{"report_id":"b29c252a-4732-4839-9d77-ec5650c32dc9","version":6,"status":"done","tags":[],"date":"2025-12-25T21:41:26Z","url":{"schema":"http","addr":"portefeuillevexo.net/","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":0,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"portefeuillevexo.net/","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"title":"Portefeuille Vexo Review 2025: Is It Legit Or A Scam?","dom":{"size":242479,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35838)","md5":"66818d143825caf5553cc5066f454ff5","sha1":"c0905a1451a3687154e1c762b825035847b86f6f","sha256":"07984aba4375bf0de012bd40ea112dc637ee85c4cc1c5008d68aa1a6699708e1","sha512":"61d7bcd7170cdf1c247624dd0c9904a73d41aea9b2eb745f5666d5c4020c00d8ad4ae9e5c26bd04d89c5dc2b0149c3e6b55af6e2ab5629bb31f6b8c7f32bab2b","ssdeep":"1536:iouutZukpR4nXBKpSpFl26vBJhEv6vSD8SGMtjBPXEAzXX8FAgs+aFyXWMZc4Jw5:idcUM8hQ6vSDzfv/xYRW0JwjZJZ","tlshash":"d434bc23426925274437d6c130ba5b3bd5e6995bfae70a003edc8bf62bfac90741b11d","dom_hash":"domhasha35cfb3dc6a23cbc9975502ce066c7eb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"portefeuillevexo.net/","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":0,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-29T21:41:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":7}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-25T21:41:04Z","timestamp":1766698864,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.27","port":50932,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2025-12-25T21:41:04.971762+0000\",\"flow_id\":1830101393081656,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":50932,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3425,\"start\":\"2025-12-25T21:41:04.918840+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-21T22:26:30.244656Z","alert_count":0,"request_count":6,"received_data":375144,"sent_data":2925,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":2,"received_data":14848,"sent_data":999,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2025-12-22T10:04:13.222507Z","alert_count":0,"request_count":1,"received_data":1153,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2025-12-21T23:41:28.705339Z","alert_count":0,"request_count":2,"received_data":138911,"sent_data":1033,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"portefeuillevexo.net","ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2025-04-17","domain_rank":0,"first_seen":"2025-12-25T21:41:27.277063Z","last_seen":"2025-12-25T21:41:27.277063Z","alert_count":196,"request_count":28,"received_data":606369,"sent_data":32705,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":2,"received_data":79924,"sent_data":1074,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"portefeuillevexo.net/frontend/assets/en/dist/js/jquery-3.1.1.min.js","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-03T22:28:38.998467Z","times_seen":138346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"aac11930ec002b0f0b6ed077067e7dc9","sha1":"c02092044dad6e17e7fe2e1d20547cf5b6c057c3","sha256":"7d86ad91212835b0ff6036abc9a77c251a7761d45511ad4ed9f1a9039d29a2d3","sha512":"a60a90b877ce2df4f620e361449cf1c44669d56d318bcf22ad055f9ee0fe3865d9e42447337516f7e69c848fcfb0e9e7892217f0916e13df36a1c2b29989769e","ssdeep":"","tlshash":"8cb0129b38cc6475d0ef2c5312938abc34540088554515326b9ccd5c4aa79f1017a6ea","size":103,"data":"","first_seen":"2025-04-15T19:08:34.631258Z","last_seen":"2026-02-01T14:16:17.999078Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.5.0/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d7c34c441a0c73f54b225cc51f30de1","sha1":"f0b6bee317c54aa421626eac803f682cb1b06fe8","sha256":"5aeda5f302d419537edff95e71c9ab97fa5f25f5cc4666e0ca5907a27ac1f4a7","sha512":"ae4eea7dfe62cd0ac55c3ea87ddd3f1da2a0e8514657b3a7bd608d64d95d6776522f2ecef700dc0a8eb83bded5602b5b0bd22103e2b71948d00525eea77c93c5","ssdeep":"768:3Pn03Xlqn/kiICXpwJx3ycC/nFjjB7dH24y4Js:3+iIfycCxB7dG","tlshash":"4bd2e6aeb3652b37a7fd82a260a50543af7f79444604042d7cac8ede1298ed171f5b38","size":31113,"data":"","first_seen":"2024-11-14T19:07:22.945119Z","last_seen":"2026-03-28T07:52:11.702391Z","times_seen":4315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?callback=jQuery31107859879815246689_1766698864721\u0026_=1766698864722","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b35df6610cb282f040df19e15e1ad859","sha1":"4800f220a698849e90e411fe6e00fc9725b6c888","sha256":"e825c5c9057ef001b90c91e096fcb13c5222a4a38a89134950c87c5016ca967c","sha512":"b0ecbf079881cc8a6dd004baddb0e63c380dc18426595103a3964bbdd3c5d203ed349f51aa7256b804362e27f8ce5132f5c747b04eefc6572948a2581988c65b","ssdeep":"","tlshash":"3e017b5b11381f3aeabd464c840b8e1b3359392b018571aa8ea61b2d54596b7a0a066e","size":672,"data":"","first_seen":"2025-12-25T21:41:31.934221Z","last_seen":"2025-12-25T21:41:31.934221Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.5.0/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be8412b24dc2374a8eb8c446774e2765","sha1":"c98f7005e9dbd00ec118c3cc2370bf3bfe6cf8a6","sha256":"8d6246375bc856c30649b3e800b02a22d913a7f03f08d92a7b2440824ff2ce9c","sha512":"070efefcd7228793e742ac76bbbae58d49ad8de94cd56863838f97955bfd86dbbd53eb41b1ff2aa59eaa3e6aeeabd5334e622824a48234d8997b6db397c79004","ssdeep":"3072:9E030DWujFs3OwPss3MwPaPjq09Q2xFM8M0TrpEBW6cC56kmLxTg/QKWVSpDUkzy:9E03+WqHjvxFM8M0T7IUT","tlshash":"0044f0ebd63c9737a1e87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","size":264516,"data":"","first_seen":"2024-11-14T19:07:22.956908Z","last_seen":"2026-03-23T15:52:20.858655Z","times_seen":4244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"418b7f8782806efae319d4b0b41e4a5f","sha1":"ab48b490fcdda3954d1f68919ddc14fefe997439","sha256":"497ac8efdd92d09c3944cf9227b6e6510ad164702ad1ce870d383cea5eb277e4","sha512":"c14dceb1e4563e4d6c03fc7511cb896608518e8e546a3f2ffac1b7472f078dc139c7b63ca62d8734b6d82ebcf3af891008494bd166ebf6b5301a969998a1995c","ssdeep":"","tlshash":"fef02b6f17760576116bf05b67de97547078804f24418b153e6dc34c0fc9d544a9187a","size":547,"data":"","first_seen":"2025-04-15T19:08:34.632606Z","last_seen":"2026-02-01T14:16:17.999634Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"62a95b720b77f4738ad8ec56d9f92c86","sha1":"ba2cc5d7d8c05c7dd10c87713b634619a0d6a049","sha256":"55fa4f29b87ca0de6042674760893ecb801cbcaba325c4bc8b50f79f48dd76fc","sha512":"295b7ae3f0b5a49e2dba0864da71659be7987e751f2f152906acf60d739182604a74733f5f1a76a685b62ab44aa474430926fbe771ac1e94cd2d9a192b1f82de","ssdeep":"","tlshash":"22f05c35fd703c758423f17e43eeaa1428bb2083a001c1093a5cc5892ff25916a12ae1","size":475,"data":"","first_seen":"2025-04-15T19:08:34.633779Z","last_seen":"2026-02-01T14:16:18.000094Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab377eca062d973e8ca39191bb05244a","sha1":"d0865d7eb0b8ffbd5655c79a0179eb143d9bf4c5","sha256":"a9f3acbf61b7911bd578cbc908d2285113ed5b6ebde0f2217af816bb09823136","sha512":"3ae10aab0dd0e292376fff0feb562e5eb37269a7528c43f6db01659fcc777e18834973f82d32886aa26e221957e1a0305f4db27ca73d10f61bfc6da1e8d2ec6f","ssdeep":"96:DNFgJzOgMZMrTZSvWs+v+JV89Xlt6jyJijWo6M2CzGi3/Js3:DNFg9KqsvWs+vbdlvJijWo52Cyi3/O3","tlshash":"48d11f8a35b123354633b479a78f61117216a02f8444ed113ded8fe41fc8b9826b6bdf","size":6678,"data":"","first_seen":"2025-12-25T21:41:31.94399Z","last_seen":"2025-12-25T21:41:31.94399Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.15.3/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 03:19:03 GMT","end":"Mon, 26 Jan 2026 04:18:56 GMT"},"fingerprint":{"sha1":"33:ED:5B:34:BA:AF:AF:80:58:92:84:39:09:81:C2:1C:F2:7B:1C:61","sha256":"F2:60:62:61:00:2F:5B:44:3D:71:67:60:E5:36:87:F9:BF:1E:D6:39:B2:E1:C2:20:E4:11:6C:79:74:03:6F:DD"}}},"request":{"raw":"GET /releases/v5.15.3/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://portefeuillevexo.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:41:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVfejeiN0qxp8eN%2Bd%2BdCMVLOU7ByFpAZqdopp6OrcWezvWS2yGPFSYTVEMy8EVdYi0d6MalonVNQI8TURqIbLBkww6iTCipfynik8LrE7HPA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nvary: Origin, Accept-Encoding\r\nlast-modified: Fri, 22 Sep 2023 01:45:21 GMT\r\netag: W/\"74bab4578692993514e7f882cc15c218\"\r\ncontent-encoding: br\r\ncf-ray: 9b3b801df8f856b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-04-03T22:34:57.365755Z","times_seen":79982,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":20,"dns":4,"connect":2,"send":0,"wait":136,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/bitgo.png","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/bitgo.png HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 25 Dec 2026 21:41:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 07 Apr 2025 10:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1956\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1956,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 38, 8-bit colormap, non-interlaced","md5":"c68d90ac969832692c912a235ff46f25","sha1":"2afcb8179cb2af28d9fa7bcc5f768a9224c822a4","sha256":"9192ab76c929b488fafdddd2d71ce2a10a6dc93ac6410467108d6a7fa99e125e","sha512":"947c200a12a35d10241e7ac0346bd31df25a5f5587ac0d3be1791f32ea8ea532a36c0949b41f841ed36504ed3a6e540ff59739b5a989a38cbf4be9a8a924226d","ssdeep":"","tlshash":"f3410a64ea502967a1e0dd3758b917dca22691fc1b5250f94e06f4c17d0ae5600a8209","first_seen":"2023-05-12T12:35:31Z","last_seen":"2026-03-23T15:52:20.835384Z","times_seen":176,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":356,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:05.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://portefeuillevexo.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Dec 2025 10:00:29 GMT\r\nexpires: Fri, 25 Dec 2026 10:00:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 42036\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-03T22:16:43.135508Z","times_seen":15974,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":120,"dns":7,"connect":23,"send":0,"wait":31,"receive":13,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/frontend/assets/en/dist/images/fav.ico","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:05.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /frontend/assets/en/dist/images/fav.ico HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 25 Dec 2026 21:41:02 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 11 Apr 2025 13:45:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2293\r\ndate: Thu, 25 Dec 2025 21:41:02 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2289,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"922151e26026a5e2f426505127c10fe7","sha1":"ad478c0870951c74dc282938c881e7e317b2ffd9","sha256":"458cbd9155169b28b9a52da9e9b5a2278c8bfbccda7ccdc10e4186c6f8b6d22c","sha512":"0bd1406bcbfb2bc49cd67d92dcccfcdfe3cebb99358edf1eb9e120116b1755e1f180bec2c30d3d885e2147a4101a7525752708697eee2cf5c0cf67e530c6aa72","ssdeep":"","tlshash":"aa414e5083e6f65b13d9db350ac8cd73df35756a557a76c89d22e480bbcf1037250045","first_seen":"2025-04-15T19:08:34.600647Z","last_seen":"2026-02-01T14:16:17.975423Z","times_seen":174,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/exchanges-flags.min.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/exchanges-flags.min.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 917\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11926,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11926), with no line terminators","md5":"7998312a7ed82fb468a0de1929a79360","sha1":"9202474f5d836ca1a41d39820cff56a79fe02e8e","sha256":"22cebc4456ac6008ec3cf64a75357926ba0a05ba55840ce77cd34c2c181f7f5e","sha512":"73884fbe8b64725a24c4196a06b5867c43302fedcab260e3eeff286fb07bfd74a4ffcee8ea6ce9e3ac05b8d374bd93e6f5c7858fdc6fae7baf36bd3f01a360d4","ssdeep":"192:M7MqrB3B23Qs0sgD1i0qwyZ+DsL0syMFt8MiwN+4bS1xKycKVYbVBfa3DsxftYj:8gnJC","tlshash":"a732661558e32179fe17f93561b056a0833e3240d9672f3d785e76a923c2ee88c73b92","first_seen":"2024-08-19T16:35:56.461197Z","last_seen":"2026-03-23T15:52:20.854679Z","times_seen":178,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.5.0/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@24.5.0/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:41:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2666\r\ncf-ray: 9b3b801df885b28a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 24.5.0\r\nx-jsd-version-type: version\r\netag: W/\"403c-QBsg/WGPIFw7qhwA2rXqpFy0oOU\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230059-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2920440\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=50i9104MN%2FCfPbL9dl3eiRIhl8Wjapj3kaPdMVYhB1ZwWdpF5W8Qoeh51nmUTG5tXeBNrWsXKgvfsVuvdqqu4yZf17L6D8LlVisjFqbj3CDmHtVm4lRRWmUc2zlCQKDZVHg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16444,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"31cc7c1401a02ca75f8e903777df602a","sha1":"401b20fd618f205c3baa1c00dab5eaa45cb4a0e5","sha256":"04a435c7d3f367d9816544975c24deb53596f62f801d8a1f208d4e55cc7c4277","sha512":"13f510ea338392976fc33b28c2b7392e44ee0640bda2a0f1f7a7148fdbfd4f9aa47bf24b15bdd103f3c0be1cc003dc38adb3041dff2247d4873db62cc2a746d9","ssdeep":"192:WzvSqT2sd5uVsAPRY6e5yE9y3tzEUbyhG/JYyiKdjr+/TEHRik1B3EBu:4v2sdk1RdE9y3C+Rd3+/TyH","tlshash":"f3728c2742b41d3ea75dc1ba38a2c4f5733f588a70aecc96eec8100e5c87791a5ebc40","first_seen":"2024-10-22T10:29:57.919158Z","last_seen":"2026-04-03T19:41:14.343937Z","times_seen":5478,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":9,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/frontend/assets/en/dist/images/fav.ico","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:05.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /frontend/assets/en/dist/images/fav.ico HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 25 Dec 2026 21:41:02 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 11 Apr 2025 13:45:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2293\r\ndate: Thu, 25 Dec 2025 21:41:02 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2289,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"922151e26026a5e2f426505127c10fe7","sha1":"ad478c0870951c74dc282938c881e7e317b2ffd9","sha256":"458cbd9155169b28b9a52da9e9b5a2278c8bfbccda7ccdc10e4186c6f8b6d22c","sha512":"0bd1406bcbfb2bc49cd67d92dcccfcdfe3cebb99358edf1eb9e120116b1755e1f180bec2c30d3d885e2147a4101a7525752708697eee2cf5c0cf67e530c6aa72","ssdeep":"","tlshash":"aa414e5083e6f65b13d9db350ac8cd73df35756a557a76c89d22e480bbcf1037250045","first_seen":"2025-04-15T19:08:34.600647Z","last_seen":"2026-02-01T14:16:17.975423Z","times_seen":174,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.5.0/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:05.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@24.5.0/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://portefeuillevexo.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 21:41:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 62310\r\ncf-ray: 9b3b80267f231525-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 24.5.0\r\nx-jsd-version-type: version\r\netag: W/\"40944-yY9wBenb0A7BGMPMI3C/O/5s+KY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230065-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 5513975\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UYQLdXHB%2BtjpTokk80tmkRcUXWEw%2FnDa0RUJRkjJcT6VrPlEIXjAY9Q0V72mVQacXrTrMiRptRXfhb3grkGyR9NJXG7rGFaqHRdZe5Gq%2FFD0FDOYMhBgtP4rHXfY2PPZu6o%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"be8412b24dc2374a8eb8c446774e2765","sha1":"c98f7005e9dbd00ec118c3cc2370bf3bfe6cf8a6","sha256":"8d6246375bc856c30649b3e800b02a22d913a7f03f08d92a7b2440824ff2ce9c","sha512":"070efefcd7228793e742ac76bbbae58d49ad8de94cd56863838f97955bfd86dbbd53eb41b1ff2aa59eaa3e6aeeabd5334e622824a48234d8997b6db397c79004","ssdeep":"3072:9E030DWujFs3OwPss3MwPaPjq09Q2xFM8M0TrpEBW6cC56kmLxTg/QKWVSpDUkzy:9E03+WqHjvxFM8M0T7IUT","tlshash":"0044f0ebd63c9737a1e87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","first_seen":"2024-11-14T19:07:22.956908Z","last_seen":"2026-03-23T15:52:20.858655Z","times_seen":4244,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-25T21:41:03.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; expires=Thu, 25 Dec 2025 23:41:01 GMT; Max-Age=7200; path=/; samesite=lax\nlaravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D; expires=Thu, 25 Dec 2025 23:41:01 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ntransfer-encoding: chunked\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":108982,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2218), with CRLF, LF line terminators","md5":"f6ae37b8083af1db04d8be22ad9461ad","sha1":"dcc4ce82942c1ba31dacfb7f9d4c53ae75dee12e","sha256":"8287e46d37246f3b0126b86d800c1764a70e743dbbbb8f0f77e265b405445350","sha512":"9866856f52d7ac3f55504c1e79a3db027df82321b5452462beb8d5ab2d13f17766f0bf1acafebcf17db803747fdfbf3c96cd6ab797648c7499f7389c6d1c370a","ssdeep":"1536:aU/ZZwZu3JhEvMvSD8aGMtjBJWMZc4J5wo:FrZhQMvSD/fvJW0J5wo","tlshash":"99b3b47362f1193701b7b1c1b2b95f1fead6801bc7474a2472ac4b655fdbc80683396a","first_seen":"2025-12-25T21:41:31.926195Z","last_seen":"2025-12-25T21:41:31.926195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":39,"dns":13,"connect":10,"send":0,"wait":401,"receive":42,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/blocks.style.build.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/blocks.style.build.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2741\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27760,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27709)","md5":"e166554d9568a75420df25df66eee803","sha1":"188cf85ac6df9b1175d26c527f39826216cce272","sha256":"cd00c79e4bbf06794b0851af6b891c002601933c8b9d0cef5bf18427c62c699c","sha512":"6b95c9663bcee489d94882c10e19b12b4c1a9be0c54d6fa333799ae542a6ca1e59a51cc3845f38f3c6440c0abaadaf0a00befdabd64ec9b4b91a07511b7d22a5","ssdeep":"384:wGdY3aFwJXZWLZ9QeJsfykl6xLFLzGL2GeL2/eL59L2TyLxCLuLbL7LbPWA9P0VL:zwpMV6d+7ZV2B","tlshash":"0ac205b3e79a068ee8257d7432f80ff3785b2412f65b609f4710d548968b3e302f166a","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-04-03T18:31:10.437823Z","times_seen":1760,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/front.min.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/front.min.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 951\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5064,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5064), with no line terminators","md5":"216d791e61641ace57d8d11a12bde01e","sha1":"28bde6d98d1c689a712efe037a9592e9fa103b09","sha256":"029dedf319bc4536d9c663ae9c0b10c95d1e9f5dd1de0aa73172e9e89ae254cc","sha512":"cd31993e3719a13c971386cbca73ae88cb95e0833f2e8d9cd8ff9e0d070cee43589a4dc34fd973a9e2001aeeeb0ea9cf44e96b7536f85f2a31a47f33e6c9fac8","ssdeep":"96:57osUc17WlOajf4mYC8DdLdTJk93ik8oLrWrzrsrT0:571eYC8ZLz","tlshash":"74a11f5eba89030c51e6961196d84a88672bc87ae0b21cccb24b752a8bc7fcf370c157","first_seen":"2023-11-24T09:53:54Z","last_seen":"2026-04-03T21:43:29.017353Z","times_seen":8350,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":23,"dns":1,"connect":9,"send":0,"wait":113,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/style.min.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/style.min.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 13:05:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 16677\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":108800,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"897a703f2e00232d9998d7a22c7d23e3","sha1":"d74822c80650fcba3e2a5733227933e35ce87404","sha256":"5e31dc204ba76b9c74c980227db9691d478651d667f50a7bf334853f7b3c480c","sha512":"e9915f7c9034382882e0d505f7b9c8ab625d90d9385c3c296272b63f7a34a8394550f4b280a88dc9995c0c471be880ea2f6053f34fae513de3909238767e4401","ssdeep":"3072:pqcuk8e9bP5fWNIbiao70Uz7kLw07lADHrKfruFn78ZYKBKfrpMav75XujYrZVls:Acuk8e9bP5fWNIbiao70Uz7kLw07lADE","tlshash":"3eb3328b9ab32945b807d0696fbe5741331d5017d24eeda97f9c629ccfc9294c0a3b8c","first_seen":"2025-04-15T19:08:34.629068Z","last_seen":"2026-03-23T15:52:20.834296Z","times_seen":176,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":26,"dns":1,"connect":9,"send":0,"wait":109,"receive":50,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/all.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/all.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12380\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-04-03T22:34:57.365755Z","times_seen":79982,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/v4-shims.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/v4-shims.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3987\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26702,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-04-03T22:31:34.483668Z","times_seen":60310,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/ajax-loader-table.gif","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/ajax-loader-table.gif HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 25 Dec 2026 21:41:01 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 07 Apr 2025 10:26:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1924\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1924,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 54 x 55","md5":"4c72ec156f80768ce0b64f0ab2dec248","sha1":"ac32f6f37cf9301e37ddfa5c404f5178fc33a56a","sha256":"5392c8d8cb90f49ea8ac1788ee6520672a949b9ad289749bc5520ade7aa71fee","sha512":"e758e21fea3859d2f4a0cf2dacabdb35e5e6c59b9cb93f73b27fab79159dedd84baa038ce71ab14bd31367659c10fb32b90c8d949a135ea59c40674a8ca8ceef","ssdeep":"","tlshash":"ed41886892c70c03ff9891784c6970863e72599479874fcadcf747268e33257b1946ab","first_seen":"2024-08-19T16:35:56.44613Z","last_seen":"2026-03-23T15:52:20.845227Z","times_seen":162,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":353,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/votes.png","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/votes.png HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 25 Dec 2026 21:41:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 07 Apr 2025 10:26:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4008\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 149 x 89, 8-bit/color RGBA, non-interlaced","md5":"fb132ec81314d4a6e12e90833966c339","sha1":"528005083a8434cc241f341a778e3dd037b38ec9","sha256":"4104e07137aad6ea20d759f6c2a90b7b7e2ed22de6870bab553b983a5e5ac8df","sha512":"85b5a57b2b5952f4b796c4142c373016a82e9a75e5a93eaf822bf679bf2ba6dc23ca1b9dda798bddacce6cd6e3157c203f1b689c75768d6c3fc74c43699c9e2d","ssdeep":"","tlshash":"e2817de45370f4c5f0e3d8734713e7d1e5084118a9975775b10ba03cdce9a78b498269","first_seen":"2024-08-19T16:35:56.43964Z","last_seen":"2026-03-23T15:52:20.841784Z","times_seen":177,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":352,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/flag-icons@6.7.0/css/flag-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/flag-icons@6.7.0/css/flag-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:41:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1733\r\ncf-ray: 9b3b801dd845b28a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.7.0\r\nx-jsd-version-type: version\r\netag: W/\"6bea-KoAEZq9M5jn4PriJkbRxEQ07Xs8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230119-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2565905\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EluBJCIYzjDAQxLa3xa%2FqEoHC7GOSxY36icE%2Fu5%2BIy079uAWE%2Fg9%2BTlBeLH3vHaqovqxGeiBy8XqyQcd%2Bk6Y%2FyQA%2BOKe4qthC68gSsEK%2F%2BefXaLhnpmDP1zd22O%2FqlfyiKY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27626,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27626), with no line terminators","md5":"be1ce183b675615fe4b85c139bdbb6ea","sha1":"2a800466af4ce639f83eb88991b471110d3b5ecf","sha256":"79cd7caefbbed828edeab8d3db8a8f2f9f8a617b9df4d3acfd46805b2319981d","sha512":"b3f36b6b9f3f7ade020ca4a785488fadc7bef0ce6d74ad4fb34fbd74a7b823d247fe0d101b3b0f01d7f57cb781b0c4cc1b5cd6301b27cf1bcf8133801541f02d","ssdeep":"192:E6XxgF5JRQUZuEvCtkCNDpfDYxmn21KoLSQfl99xT:XcvQmv8DpfDYxh53","tlshash":"03c20323d2c6e46fb84b5a33742a771cb2db5ac7d305473b6a2f62b5e41a084343b5b0","first_seen":"2023-07-03T14:11:36Z","last_seen":"2026-03-28T15:28:10.860027Z","times_seen":285,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":9,"dns":0,"connect":1,"send":0,"wait":11,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/layers-icons.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/layers-icons.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 640\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d5766258b40524e7b319a20d7f409a05","sha1":"05efb18449acc6cf6182dff4c96d10dad8a09bc5","sha256":"695f7da598f6d98b629961c60241b689046f96cdf269542dc87bc5885c4b7e01","sha512":"0fdd9f9d5b106d3420403842f94134e80e9fa2d8bea993194c96cd637b5ac17a827922286d9f9983ac7e9ce7e96ffe6a1915bda9925ac48df3b9748ba3c5f570","ssdeep":"","tlshash":"8b413994a8be19414311d4c4739b6385bb0df12b9e04ac49f757be4c9fe5706a1833dd","first_seen":"2025-04-15T19:08:34.630173Z","last_seen":"2026-03-23T15:52:20.848149Z","times_seen":177,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/charts.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/charts.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 169\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":325,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5c316b418b9a5b41c7be554fa67baf08","sha1":"8af99eb5d0db86dbb15dc0c4aa369de806ec9022","sha256":"d68ceb4198de64fae6d5921bb5f43204490b3d4e0b17457efe466bcbc178a2d6","sha512":"5f72a70dd3e3fe89fbd5020b210ca3a4e29eec881ec5fb3e3852f3f228bc79408e60f669883c00e51d19b89c4cfa03f88eee1cb75534573cbb17f64147faa167","ssdeep":"","tlshash":"c8e07d94d6c03721fc67c1ddec45e30fb50ec5ca8f918a931948432e8f21402a70cba0","first_seen":"2025-04-15T19:08:34.61326Z","last_seen":"2026-03-23T15:52:20.84378Z","times_seen":177,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Playfair+Display:wght@400;500;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Playfair+Display:wght@400;500;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 25 Dec 2025 21:41:04 GMT\r\ndate: Thu, 25 Dec 2025 21:41:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4917,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c999d2de19ec7e5519096280f4423bc3","sha1":"d28aac5ce214f2ffc3c90ccd68c7fffee8970f52","sha256":"43b860ad74b07c050860a4a3a5127c05b4fb1a89b7178edc426209fdb3ef509a","sha512":"4f0f8c2b12fde66a0c68d6888befcaebebf905a0e6a141154397bb87be10d7f26cc3e2b38918bd7cbc1c5227a5988e1a59f6b2f1537f04bc4b2343e87ab42fe9","ssdeep":"96:JIOEar2om6FZOjOEar2vEOEar2bFJc+uHOEar2fNMIOXar2om6FZOjOXar2vEOXI:JHr2om/Ur2vrr2btVr26gr2om/7r2vEt","tlshash":"bca1cba20567a5109a474cc223cfbf365dae60507081927daffe1dcc5c9fd26d264b0e","first_seen":"2025-09-13T09:01:46.106142Z","last_seen":"2026-03-23T15:52:20.856039Z","times_seen":164,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":153,"dns":20,"connect":20,"send":0,"wait":32,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/fonts/nunito-v12-latin-regular.woff2","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /fonts/nunito-v12-latin-regular.woff2 HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/assets-en/fonts.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nkeep-alive: timeout=5, max=100\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Thu, 25 Dec 2025 21:41:02 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-04-03T19:15:50.724175Z","times_seen":6811,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/fonts/nunito-v12-latin-700.woff2","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /fonts/nunito-v12-latin-700.woff2 HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/assets-en/fonts.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nkeep-alive: timeout=5, max=100\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Thu, 25 Dec 2025 21:41:02 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-04-03T19:15:50.724175Z","times_seen":6811,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.15.3/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Oct 2025 03:19:03 GMT","end":"Mon, 26 Jan 2026 04:18:56 GMT"},"fingerprint":{"sha1":"33:ED:5B:34:BA:AF:AF:80:58:92:84:39:09:81:C2:1C:F2:7B:1C:61","sha256":"F2:60:62:61:00:2F:5B:44:3D:71:67:60:E5:36:87:F9:BF:1E:D6:39:B2:E1:C2:20:E4:11:6C:79:74:03:6F:DD"}}},"request":{"raw":"GET /releases/v5.15.3/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://portefeuillevexo.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:41:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78196\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lT2jWbPYPNIkarAOzSki1hZh%2BKE3chng7Gq%2B7wW8oV0f1HLS%2FlOindc4GRIfgwKsAwBbIKI0rtaYf9l0rgNDBgpqS3Z2XbSSsgvH4EfLJey3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"e8a427e15cc502bef99cfd722b37ea98\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:23 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9b3b8020ab1256b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-04-03T22:33:23.796297Z","times_seen":119452,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?callback=jQuery31107859879815246689_1766698864721\u0026_=1766698864722","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 19:31:13 GMT","end":"Thu, 19 Mar 2026 19:31:12 GMT"},"fingerprint":{"sha1":"FD:43:17:F6:FC:F9:5E:2B:53:FD:34:62:25:32:FF:41:EC:72:38:91","sha256":"8D:5B:FC:11:FC:AF:23:2A:87:1C:7B:4B:8D:AD:0B:AB:BB:D9:D3:7D:C7:9E:49:C6:11:1F:78:3D:E2:1A:49:DC"}}},"request":{"raw":"GET /?callback=jQuery31107859879815246689_1766698864721\u0026_=1766698864722 HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ndate: Thu, 25 Dec 2025 21:41:05 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":672,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (391)","md5":"b35df6610cb282f040df19e15e1ad859","sha1":"4800f220a698849e90e411fe6e00fc9725b6c888","sha256":"e825c5c9057ef001b90c91e096fcb13c5222a4a38a89134950c87c5016ca967c","sha512":"b0ecbf079881cc8a6dd004baddb0e63c380dc18426595103a3964bbdd3c5d203ed349f51aa7256b804362e27f8ce5132f5c747b04eefc6572948a2581988c65b","ssdeep":"","tlshash":"3e017b5b11381f3aeabd464c840b8e1b3359392b018571aa8ea61b2d54596b7a0a066e","first_seen":"2025-12-25T21:41:31.934221Z","last_seen":"2025-12-25T21:41:31.934221Z","times_seen":1,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":57,"dns":1,"connect":25,"send":0,"wait":151,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/svg-with-js.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/svg-with-js.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1391\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6359,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6173)","md5":"2108262303774a1a8bd411a0b7d56446","sha1":"e0c5a2beacac5bce8742eda5af49cbcd9f53b9a7","sha256":"68bafa0f646e385fe6da7a839ef32c0f0b6d0abd7284f0cce68435c770955025","sha512":"5b765f826679835ac23c58826ce6feb67ee0eec416390081d40903aab046d58a778838d8f4a60587f935016c6bb7ce4b5f90516b3100baffb90d5d986708216a","ssdeep":"96:dP6Oh8o/66Eeckx3HRcR1RtRfRZ05zBZMWch4y:dP6Oh/kt05FZzg4y","tlshash":"d0d1186b8742224744194f21d3d86d1cb238ff3326e3498fb24636556b8bbed71d2396","first_seen":"2025-04-15T19:08:34.60196Z","last_seen":"2026-04-03T02:42:36.518666Z","times_seen":543,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":26,"dns":1,"connect":10,"send":0,"wait":113,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/font-awesome.min.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/font-awesome.min.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6658\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-03T22:31:48.785209Z","times_seen":236341,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":22,"dns":1,"connect":9,"send":0,"wait":116,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/norton.png","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/norton.png HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 25 Dec 2026 21:41:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 07 Apr 2025 10:26:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2511\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 43, 8-bit colormap, non-interlaced","md5":"bfd705ee9cac70f63b2ce64a1daae2d3","sha1":"6c164c8fde1066a65ecaa7eb19e12c3825396c50","sha256":"6d47d23d5ee7efe59fa9b3855fa2c918d4319b8561b647d6cd0f8b729a910328","sha512":"01a22cf987cbac2565e86631c062c454d32f579f1307c91fcc8582f2f4b2d8aacb89c44bd71834ff0d565b9520a051c8643f45e56e24803ee30e72f990bc716f","ssdeep":"","tlshash":"9d514df2435433287ca451adc188504847191b6f1796ca6bd9fd68be63440b253fb77d","first_seen":"2023-05-12T12:35:31Z","last_seen":"2026-03-23T15:52:20.855497Z","times_seen":176,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":355,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/mcafee.png","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/mcafee.png HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 25 Dec 2026 21:41:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 07 Apr 2025 10:26:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2567\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 31, 8-bit colormap, non-interlaced","md5":"ae9491a47792391f6bc44ceffbb5e2d0","sha1":"6126a9dc79998f9666939335dd4d9fa90ce389f7","sha256":"fe4f71021ef8418e8da185b382b4f502354fdd652ba35918c9092283d1bafcbc","sha512":"9dbafd9060e0b521019c973b919eb6f460bdc88e2fafb61b2bce228c02ae6722c7e455bac93c107b25723a71854a950c2b23863fea1bb52600fd82b75745f2cd","ssdeep":"","tlshash":"fe515de7c2701f7a6247afe0830755e6f51811babda9f7070327c8d8da51da08444b53","first_seen":"2023-05-12T12:35:31Z","last_seen":"2026-03-23T15:52:20.850885Z","times_seen":177,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":354,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/frontend/assets/en/dist/js/jquery-3.1.1.min.js","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /frontend/assets/en/dist/js/jquery-3.1.1.min.js HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 07 Apr 2025 10:26:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29460\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-03T22:28:38.998467Z","times_seen":138346,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":171,"dns":0,"connect":0,"send":0,"wait":59,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.5.0/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@24.5.0/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 21:41:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 11767\r\ncf-ray: 9b3b801de85ab28a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 24.5.0\r\nx-jsd-version-type: version\r\netag: W/\"7989-8La+4xfFSqQhYm6sgD9oLLGwb+g\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230057-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 4847449\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OjW%2BAqdjcQRw1uZP%2Fn96DgHOIugg4mz32bUIlsPTlXKWD3nuk5sHqk%2F05%2FVEEMCk5PfJZEi%2FQkei6Cz4iaUso6gg%2BY0tGhqIDxb3VBKUyti5ZFzyStDLwZT7k8esgBPOWxc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31113,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30745)","md5":"8d7c34c441a0c73f54b225cc51f30de1","sha1":"f0b6bee317c54aa421626eac803f682cb1b06fe8","sha256":"5aeda5f302d419537edff95e71c9ab97fa5f25f5cc4666e0ca5907a27ac1f4a7","sha512":"ae4eea7dfe62cd0ac55c3ea87ddd3f1da2a0e8514657b3a7bd608d64d95d6776522f2ecef700dc0a8eb83bded5602b5b0bd22103e2b71948d00525eea77c93c5","ssdeep":"768:3Pn03Xlqn/kiICXpwJx3ycC/nFjjB7dH24y4Js:3+iIfycCxB7dG","tlshash":"4bd2e6aeb3652b37a7fd82a260a50543af7f79444604042d7cac8ede1298ed171f5b38","first_seen":"2024-11-14T19:07:22.945119Z","last_seen":"2026-03-28T07:52:11.702391Z","times_seen":4315,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/fonts/nunito-v12-latin-700.woff2","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /fonts/nunito-v12-latin-700.woff2 HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/assets-en/fonts.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nkeep-alive: timeout=5, max=100\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Thu, 25 Dec 2025 21:41:02 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-04-03T19:15:50.724175Z","times_seen":6811,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/language-select.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/language-select.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 12 Apr 2025 15:36:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 248\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":863,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c2df2ed3114e4d0f05a0c967125b2c9e","sha1":"79bfea7c5674887a5b4a182a42e869bd66d7a88b","sha256":"5d301c853a427d18d264ef6bb2e3c83457225c9c95cc3ad9186ea8815189e25f","sha512":"dc2c0fcb3bf635e46cc5c27b044b9d35aa1210f0b2b496b0d91d07106df6336de882f7486e6155ad4c7ea74e6b5f84ecea796b0f3df7b72ed178c784b6e0ea3d","ssdeep":"","tlshash":"7b112f5f56e70af4704ed5877ce1aa02f2e8d8cad82ded15abe0114c5ecb2985022a57","first_seen":"2025-04-15T19:08:34.612356Z","last_seen":"2026-02-01T14:16:17.990708Z","times_seen":176,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":25,"dns":3,"connect":9,"send":0,"wait":114,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/flag-icons@6.7.0/flags/4x3/gb.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/flag-icons@6.7.0/flags/4x3/gb.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/flag-icons@6.7.0/css/flag-icons.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 21:41:04 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 307\r\ncf-ray: 9b3b80206d401525-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.7.0\r\nx-jsd-version-type: version\r\netag: W/\"217-aLLq1DcOere3DrbTWgnDHnPET9M\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230106-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 3204611\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zzH6c7FUalwbQawp6CFh7%2F905ueQeIA4j%2Fsb5KYkUv7yawWkNEq8Mu1S5kJt%2Bm1GKUNCrrbwS1oEReue3Uz3rBRMDKnmsYywZ%2Fpg7gLCpFsOh2dOZusATjwB%2Fmj%2BOAJZUho%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcfef6780b36bef537381474df9d0be9","sha1":"68b2ead4370e7ab7b70eb6d35a09c31e73c44fd3","sha256":"51a8613ac1b05eafb9486e6420336bd8b95dae7a9d11def6318776a61c701a08","sha512":"ec21f7b6951f00f0da0acfdb21bbbe037dcaa2a14f2a1de02c991f91af689b1039720801ebb90ca900379766d5726752ed7fd85a349db508d3f94edecc4ec0a0","ssdeep":"","tlshash":"acf0c9c8c32c7005c70a97105cbcf8e3d4c9a1ce588400eab4e09ae460aeba7dccadd1","first_seen":"2023-04-17T21:02:35Z","last_seen":"2026-04-03T21:51:32.199626Z","times_seen":1825,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/fonts/nunito-v12-latin-700.woff","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:05.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /fonts/nunito-v12-latin-700.woff HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/assets-en/fonts.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nkeep-alive: timeout=5, max=100\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Thu, 25 Dec 2025 21:41:02 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-04-03T19:15:50.724175Z","times_seen":6811,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/fonts/nunito-v12-latin-regular.woff","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:05.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /fonts/nunito-v12-latin-regular.woff HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/assets-en/fonts.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nkeep-alive: timeout=5, max=100\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Thu, 25 Dec 2025 21:41:02 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-04-03T19:15:50.724175Z","times_seen":6811,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/all.min.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/all.min.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12386\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59349,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59159), with CRLF line terminators","md5":"502f5bb67776eb6589a5ed11ed355a80","sha1":"177d0aa48685d85931ce4d2f0031ca55bb98fd19","sha256":"54f90a3ae392d9630baa0591ab66ac679bfbff0d0a7b12f4c0368aac84fdc77d","sha512":"8c1fc8d1a1ae1727e9a0f85dae8fa402caefc07fcceaa1f9f1e0d7ab08042ed8ed8a21a6ad3006209f1aa621f52a72839638a3f8962a62599d44b6ebff0bd2bc","ssdeep":"768:GKh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:GK0PxXE4YXJgndFTfy9lt5B","tlshash":"1143fbb8e54c01c9b731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2024-08-19T16:35:56.468843Z","last_seen":"2026-03-23T15:52:20.841254Z","times_seen":188,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/assets-en/fonts.css","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /assets-en/fonts.css HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nkeep-alive: timeout=5, max=100\r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 24 Jan 2026 21:41:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 10:26:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 318\r\ndate: Thu, 25 Dec 2025 21:41:01 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2078,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6450e18dd6c6ad65818d2029c2ba4e12","sha1":"95819875934187d28096f99fb27a24980a686296","sha256":"5aca9dd2f59e32f617246f7a4dccdf35c3a92c906107585a2254128628969e53","sha512":"033c781189fc9ed3e6be179fb044a94b2c6e9d0f000a6ff455fd2adb0500d20a06ebe7f2d823fd412add408e49275cda629b6d0232f3e69d25ed09bda34eb36d","ssdeep":"","tlshash":"18419d531ed970425d01b94ba76b9d197f8c642a36464a57b92ec408cefbe89038cf8c","first_seen":"2025-04-15T19:08:34.62327Z","last_seen":"2026-03-23T15:52:20.844151Z","times_seen":177,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;700\u0026family=Playfair+Display:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;700\u0026family=Playfair+Display:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 25 Dec 2025 21:41:04 GMT\r\ndate: Thu, 25 Dec 2025 21:41:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8559,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7b20f70349b606da265a33b3a972e09e","sha1":"d16f47f254a22f0e0c5033ea9f92578eb7c70c93","sha256":"8f5bcfeab0182624729f54825e3ece2cd7d8f9640025f3e9e6eecfa41fd60d5b","sha512":"e2abd2190c7163ec6aa46babbd1bc57f184e955e4178849eb7ac9a9d09b841b672d90c7b76e5fc6f87fa9df1a5f74bd1ec9f956f773e347db1aca423446c359e","ssdeep":"192:OH+yptkULHbywkkdpHr2om/Ur2vrr2btVr26gr2om/7r2vEr2bt2r26qr2om/drd:ilNeAL2R/W2v/2bv26S2R/P2vG2b226T","tlshash":"c102bba2046be510aa471cc227cfbf36ad5e61503044c67daffe58989c9bd279364b0e","first_seen":"2025-09-19T16:02:17.920285Z","last_seen":"2026-03-23T15:52:20.845745Z","times_seen":157,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":121,"dns":17,"connect":20,"send":0,"wait":31,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@24.5.0/build/img/flags.webp","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/intl-tel-input@24.5.0/build/img/flags.webp HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@24.5.0/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 25 Dec 2025 21:41:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28174\r\ncf-ray: 9b3b8021b8f81525-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 24.5.0\r\nx-jsd-version-type: version\r\netag: W/\"6e0e-+c9J+qvl4+pvpQpQCqvUf+8x4WA\"\r\nx-served-by: cache-fra-eddf8230056-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 9273856\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9vCKkVk6zaYmGOxvpkOcHhROHJWLzBSHy%2BJT%2FlgAJhPLtxLRF67WdX2BQPiNRMa9eppKtC3%2Fd9jBiPYe2%2Bkn%2BdmgLsmdGVtzbn0WhqRyES%2FO%2Bv34jw9mwPW%2BemQO%2B3jvD54%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28174,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4099564bc7b03997031ad1348e646601","sha1":"f9cf49faabe5e3ea6fa50a500aabd47fef31e160","sha256":"667642959de122c4b844afcae211c1c54c9166d262fb833beb63abc02ebd0dd4","sha512":"e1633c3f57dc45e189d3d0ac97afe6ff1f44063cdb0948632e9c7fdfcb848f92ef854b22c11a9c58c6f304b0123f34f3b0d132399ec27c95943dc3564fb7640e","ssdeep":"768:Xtn4kqql2jDWRFRS21T2r9lDAkRYKU01RENG:Xtn4kq2wDGFRN16wwYKU01RE8","tlshash":"6ec2e2f1690d6390ad635390c0f66355cdd927393a7f8ca4f96292848234177db3eb64","first_seen":"2024-10-17T04:51:34.39147Z","last_seen":"2026-04-03T11:10:39.063709Z","times_seen":4927,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portefeuillevexo.net/fonts/nunito-v12-latin-regular.woff2","fqdn":"portefeuillevexo.net","domain":"portefeuillevexo.net","tld":"net"},"ip":{"addr":"91.236.116.69","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:04.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portefeuillevexo.net","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 18:44:48 GMT","end":"Wed, 31 Dec 2025 18:44:47 GMT"},"fingerprint":{"sha1":"1D:B8:90:C7:28:5E:1E:81:22:24:E3:3D:EF:D2:7E:C3:16:24:77:89","sha256":"CB:65:1D:0B:D9:78:A6:E9:92:5B:95:14:B2:92:78:D2:FA:EB:2B:1D:20:A1:91:0C:81:32:21:B5:90:52:A0:1E"}}},"request":{"raw":"GET /fonts/nunito-v12-latin-regular.woff2 HTTP/1.1\r\nHost: portefeuillevexo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portefeuillevexo.net/assets-en/fonts.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJYaU1XTXk1dHFWbVVRbEZYZ3h3U1E9PSIsInZhbHVlIjoielRoU2tsK2J6QTBCVkN0aUcraUFqbzlBdkJsa1FMR2FZbmRjbHZXSWVSYlNtZVVOenhiK3UzWTlLQytKcTVJNE5Gb0w0V2RuOW9oYjY0OTQwSlVGa0trZGdlOVRwWDFlT0JmWlJuMGxPYUJKVWVwaTdKd2lIM2FZa0RYcUtzNkUiLCJtYWMiOiI3OGMyYzljNTZkNmRhZTllNjJjMTEyMTM0OWU0NzI4ZTZmMTc4MTAwZDJmMTMzNGNmZTFjZGI5YmJjZWI4ZGFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPRktabzVxVW5uQWZuVnZ3TlIwdXc9PSIsInZhbHVlIjoiYkhHZU1HWDlhUjQwM0tiR1J3bjdpSGNVdDY5S05pTS81R3JBTTRzQVVYdHZkZENXMEt5NXZJK2NodEZYUzRzVEU0d3Y1d1JrUmEzRnBqOXYyZzZGMHEyTDdXRmwwMmRsa01sVWtiM0htclgvL2JmTGtreHB5SWlCZEVGNU5kRGsiLCJtYWMiOiIyOGQ4ZDkxYzBhMzQxMDZjYWRhN2QzZGEzYTg5YTMzYzU2YjcwN2VlODk4ODNhZGMyNWM3NTE4YmNjMGExZjM0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nkeep-alive: timeout=5, max=100\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6603\r\ndate: Thu, 25 Dec 2025 21:41:02 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-04-03T19:15:50.724175Z","times_seen":6811,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":366,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-25","alert":"Phishing Block","trigger":"portefeuillevexo.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-25","alert":"Sinkholed","trigger":"portefeuillevexo.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portefeuillevexo.net/","date":"2025-12-25T21:41:05.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://portefeuillevexo.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Dec 2025 10:00:29 GMT\r\nexpires: Fri, 25 Dec 2026 10:00:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 42036\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-04-03T22:16:43.135508Z","times_seen":15974,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":154,"dns":57,"connect":21,"send":0,"wait":21,"receive":26,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}