{"report_id":"be63e83c-470d-4b7c-8461-d01f4ceb9799","version":0,"status":"done","tags":[],"date":"2026-07-31T18:13:15Z","url":{"schema":"https","addr":"edf-espace-client.co/","fqdn":"edf-espace-client.co","domain":"edf-espace-client.co","tld":"co"},"ip":{"addr":"172.67.209.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"edf-espace-client.co/","fqdn":"edf-espace-client.co","domain":"edf-espace-client.co","tld":"co"},"title":"USAePay NMI - Login","dom":{"size":42763,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1454)","md5":"702dde4cf8b76c2088b2626925a87ac8","sha1":"130a40ed7109755c9183a758c40fb21f940fc722","sha256":"0c57da4ec4ff94eabeae78456ba7adbf1bbd26fcc78eb28278caa83737475a20","sha512":"2b7d028717cbca880ab9ccf91d1622ede6ba41f95452e3ac55091885692bada06ae40f24b86dc8f1672298553944eea59b213882dfe88d1c0edb2c6f7f0fcbee","ssdeep":"384:Jnriqg5GB/cKgSQEFXXDd7KDKcMoSJUZy/lnR09NepEanOF83yFZXOSv3rF2Qyq8:JWYFjYDKVrJUGlnRMApEaOF83yFlO","tlshash":"e513e921b2b41425606b8185b65397ce3775c10bca0a476cb3fe24a5dfcaef99d236cc","dom_hash":"domhash8e899cd74093a031f7afa0d28398f2fd","first_seen":"2026-07-31T18:03:17.676045Z","last_seen":"2026-07-31T18:13:16.23238Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"edf-espace-client.co/","fqdn":"edf-espace-client.co","domain":"edf-espace-client.co","tld":"co"},"ip":{"addr":"172.67.209.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-04T18:13:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"edf-espace-client.co","ip":{"addr":"172.67.209.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-31T18:03:14.057356Z","last_seen":"2026-07-31T18:03:14.057357Z","alert_count":0,"request_count":2,"received_data":45474,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.clarity.ms","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-04-03","domain_rank":4064,"first_seen":"2018-08-22T07:41:57Z","last_seen":"2026-07-30T13:54:10.580918Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":424,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"edf-espace-client.co/","fqdn":"edf-espace-client.co","domain":"edf-espace-client.co","tld":"co"},"ip":{"addr":"172.67.209.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cebbe6b26519f72a2931236066fba4c2","sha1":"510d9d08097ecad4de07f7441dbbd35e383b1b0e","sha256":"caeb6db2f33f5e6d778c50e284ef431ff66c36160e197dc18daf65e0ffab947b","sha512":"d586e2ef521092c8f1794ae531749a8f5dd10ba93c705852221c8634e9925aef6dcd023b575aec912b7bb2f98dcd6e6a4dac8f9adbff509d1595dfac1cb9ef0d","ssdeep":"","tlshash":"38e0722a34c6503a12b388a623b7810a2222270bc49e8b127a6fc4a61f24ca1044610c","size":303,"data":"","first_seen":"2026-07-31T18:03:17.704019Z","last_seen":"2026-07-31T18:13:16.235443Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edf-espace-client.co/","fqdn":"edf-espace-client.co","domain":"edf-espace-client.co","tld":"co"},"ip":{"addr":"172.67.209.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"665fed4e4cec4587392b57f95cac115a","sha1":"c9856d794c14faf4169b000fd3dc98caa490ee68","sha256":"dff9f9b37d1a4a8b500337317a1075db8a5259cc5cc31b7e2f49c7cc5ed8fefa","sha512":"72c287cee76d10772ea708e0e10caec6c52e809b7257358f79afda24e2affd38763bf62d01d47001a40ff7f4daee8d4e77448677cce0b322cd99ae56fd1dca13","ssdeep":"","tlshash":"a8219bd37d9a567a0def5a7b21624bdd7931d04c7c0291044c3c88b84164ed73d3bae0","size":1227,"data":"","first_seen":"2026-07-26T00:20:32.539322Z","last_seen":"2026-07-31T18:13:16.236222Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"edf-espace-client.co/","fqdn":"edf-espace-client.co","domain":"edf-espace-client.co","tld":"co"},"ip":{"addr":"172.67.209.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-31T18:12:39.485Z","timestamp":1785521559485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edf-espace-client.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 11:19:54 GMT","end":"Fri, 09 Oct 2026 12:17:15 GMT"},"fingerprint":{"sha1":"EC:B7:68:A4:F5:A1:23:AD:56:4D:4F:64:2F:7C:37:1C:D7:60:ED:43","sha256":"97:32:34:C7:47:83:CB:45:BE:1D:B8:F2:16:D3:BA:60:48:B2:53:85:59:C0:34:C5:30:83:94:33:59:A0:64:B0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: edf-espace-client.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Wed, 17 Jun 2026 16:55:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ndate: Fri, 31 Jul 2026 18:12:39 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5xLH%2B5gfQ%2FQkFbrogQsQOHrNNs5jsgC8Ckz4cogDBTQclaXLcZwBeeV9N3bF9Puk289DcT%2FgaBXPUxSB9a5RvS1yVt7zNZdsYSjnNNgpMBOiAYeu0r%2BriEBWFefodFeNMDZbdb2pA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a23e9292ebba7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42602,"size_decoded":11524,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1472)","md5":"9dc0e1464ec35331396bc55dc87ae8d4","sha1":"dc4689f6063223382b779fa547eebe881e09ad48","sha256":"85bc5ce2fff72a14a5f727e21c4b8ed9cfe63cdcfddfca331b2eafdea123c939","sha512":"92d833590ec76ff56ac6fe67ad7f750262623d2733ff13dfdc1e771d08d50cf135dfa3fccd492f0c61886ec8550d5d437a570f9fc0762a6029632dc72a30154e","ssdeep":"384:2/iqA5AIFXXDd7KDKcMoSJncBDtnz0sFWep8xn1nFJ3/paXajEjrF2QyqJQ:2az+IFjYDKVrJn8tnz9Np8x1nFJ3/pNn","tlshash":"fa13e821b2b41025606b8155b69387de3375c10bcb0a466cb7fe24a5dfcaef99d236cc","first_seen":"2026-07-31T18:03:17.686606Z","last_seen":"2026-07-31T18:13:16.233443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":225,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clarity.ms/tag/x8ckw9uvu0","fqdn":"www.clarity.ms","domain":"clarity.ms","tld":"ms"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://edf-espace-client.co/","date":"2026-07-31T18:12:40.050Z","timestamp":1785521560050,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tag/x8ckw9uvu0 HTTP/1.1\r\nHost: www.clarity.ms\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T07:49:10.852247Z","times_seen":17813675,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edf-espace-client.co/favicon-32x32.png","fqdn":"edf-espace-client.co","domain":"edf-espace-client.co","tld":"co"},"ip":{"addr":"172.67.209.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edf-espace-client.co/","date":"2026-07-31T18:12:40.221Z","timestamp":1785521560221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edf-espace-client.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 11:19:54 GMT","end":"Fri, 09 Oct 2026 12:17:15 GMT"},"fingerprint":{"sha1":"EC:B7:68:A4:F5:A1:23:AD:56:4D:4F:64:2F:7C:37:1C:D7:60:ED:43","sha256":"97:32:34:C7:47:83:CB:45:BE:1D:B8:F2:16:D3:BA:60:48:B2:53:85:59:C0:34:C5:30:83:94:33:59:A0:64:B0"}}},"request":{"raw":"GET /favicon-32x32.png HTTP/1.1\r\nHost: edf-espace-client.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://edf-espace-client.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 08 Aug 2026 01:45:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Jun 2026 01:53:33 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Fri, 31 Jul 2026 18:12:40 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 594\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=072UOIccQmpfN0MqsUSgoWIxfAc5X57wIYT%2FkD5Iu3ZjGaCc70XjLSvFyPmYkPndFSxpuXaFWJK0elRZITyi7FIyYb6SAWOPBf64ZWLR2M4FOYh0gQKXT8UgCIG1XP5EW07mgikcIg%3D%3D\"}]}\r\ncf-ray: a23e92976c137131-OSL\r\ncontent-length: 1237\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1237,"size_decoded":2094,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"209fd6c84a98a77f1c3bb6a794df5f2d","sha1":"3e176e85228c430b7fbac7de24fd02a537a55687","sha256":"558350e9344e739c64eefd5a371a69b65c001f5c97c0e467a98b3a2a6ba65daf","sha512":"73778eb329b76ef6086da9baf0cd8b8a6ed7585663947f9ca23e79476bc91c7b3ef46386670e99913138eff1d1df0b93d4bc75ab44d055467e185b6a13d791f4","ssdeep":"","tlshash":"6b21b4a98beaee7c321b8272a3c905949a37429a05288008e503e3ebe22424830f5357","first_seen":"2026-07-31T18:03:17.683576Z","last_seen":"2026-07-31T18:13:16.234692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}