{"report_id":"c81816b5-8bca-4a0f-a95b-a9bf27ab36ce","version":0,"status":"done","tags":[],"date":"2026-07-18T17:46:25Z","url":{"schema":"http","addr":"onboarding-bpce-recette-sf5.itroom.fr","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"title":"Oney Partner Dashboard","dom":{"size":4276,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (527)","md5":"893cfdacb299f4f8ebe171ce74a15426","sha1":"9a5b3cc4f081a8985ceae8e7d6a8218f5b13f2f9","sha256":"96cee6f57a01c480c39f496c0371d1ba318650c74f549aa91f77e858d65b15ba","sha512":"bc87e2e513275569972eb6aaf23e5c6c6f904e7ae6ba93760e1cd0f002fdfb08ec842f76c9f3ae18e47706ecb4a3c4b36fb5cfcdd340de155a20581193e09bd0","ssdeep":"48:hcENVv/+6v9saWV1h1W9h3zKdFMvJH0CPa8seIPPoYB:hdHlsf/6D30FMLuNPPoYB","tlshash":"3691517310f0147b154184806fb6322eaecdfc174a955980b1fe43a49fdafcacc6b92a","dom_hash":"domhash8991b9c122054972acee9819f2882171","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"onboarding-bpce-recette-sf5.itroom.fr","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T17:46:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":2,"received_data":98154,"sent_data":1152,"comment":"","tags":null,"fingerprints":null},{"fqdn":"use.fontawesome.com","ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-07-13T08:09:02.80582Z","alert_count":0,"request_count":1,"received_data":55899,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"onboarding-bpce-recette-sf5.itroom.fr","ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":33,"request_count":11,"received_data":6021663,"sent_data":6261,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Highcharts","description":"Highcharts is a charting library written in pure JavaScript, for adding interactive charts to a website or web application. Highcharts meets accessibility standards and works with Python, Angular, React, iOS, Android, and more.","website":"https://www.highcharts.com","common_platform_enumeration":"","icon":"Highcharts.svg","categories":["JavaScript graphics"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":22812,"sent_data":616,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/vendors~back-office~front-office.js","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0426e0ca5061d4ef365a96a363a371b","sha1":"8c4b14527e337eb11c6c5a2adb5ce0d52e0229f2","sha256":"8b8217659e5e44b50923301a9f77de8024bc65ee67bfd327be4af2975b91108f","sha512":"f58ca5e787b758b1f70614da2d7d826d201577cf819d225cdd47345300a90084ce2a690bcbcf459607967af9680798b0b9898d586c6d3e7cc904d8705bc3ba4d","ssdeep":"24576:xx+GxIpIZIHRPPLlSmSt9nXdmkyfply1HE8UtuU1J:xx+4yICHRPPLlSmSt9XdUR3J","tlshash":"2db507daee0824507723629a95cf50c9d22d770385b59e0ebc1ca9443fbd52903edebe","size":2444136,"data":"","first_seen":"2026-07-18T17:46:36.402621Z","last_seen":"2026-07-19T01:53:37.125179Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/vendors~back-office.js","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f1e7063253f90edff98d67a99d3196f","sha1":"a760bf780b949c322044428aa67cf82e18abe05a","sha256":"ee78038f1bb460a6a2ef13da6d20a5394b1a2a7ff25e8f996d93f74295a3b6c7","sha512":"82dd5ace7aeef79a1a6e360738b06f7b766943ae6b331c21a41c12928e38c022843eec19cdb7814c256b14135d432023f6f7251ce433e385be8a15d7155917ee","ssdeep":"12288:o7lDyvxle+vVWgnLsDgIktl2hiQya2qty:o7lDyvxle+P","tlshash":"ebf4b5ddad692c84bb32375bdecf51e990ad2b0709424b05bc3e71855ff850c42e4eaa","size":762971,"data":"","first_seen":"2026-07-18T17:46:36.378404Z","last_seen":"2026-07-19T01:53:37.097795Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/back-office.js","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b220f4e4b6b6f0ad0292e2b4bd6d7a0f","sha1":"117fb08469ba295b3b3f821d6dedc13bb2bd7096","sha256":"b6d8864e305efbfa5605996dfabffa8f4613e9e73edaee941eeee705b05a3c75","sha512":"05218fc6705132854488cb22078a658e4f04a9fadffe71f1bbcd1d319af7a44bb0840ac79665b480c8fa5b8b189ee55a70a515445b3c3248ae007ed67ed32808","ssdeep":"3072:rUt3yKkL01TUfDMuxIZPdfAx8vAoS3Js/T2oMx68hAmh0Z9pL:vulUfv+OS/yj6Unh09L","tlshash":"e864e751ed952cb59bae1433b2df96f6820e0303055184e8b44df68a0fb8d2dd7e4e5e","size":328953,"data":"","first_seen":"2026-07-18T17:46:36.381896Z","last_seen":"2026-07-19T01:53:37.073239Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/runtime.js","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"000c3893cd42406aebf5454f3954e3e5","sha1":"c0d61af053babc85c9f667f703ded204d1f18eb1","sha256":"dfeff8bb846f34cb36a8289a74111c23ea037f22f932cb26ae7ed442cb22f8cc","sha512":"b4de411d494d226bd6f949a59d1bcd9d2821cb42d36ebb70161ec27f18cb21b7b250f63bd627b0ea3353ca0a1ad9d6e88b130f77e1f2827bdb0d58001d425e31","ssdeep":"192:KCHyEvEW6mcfXGunhXPIrWEmvKBeU71UP+3H8itnSnappbLLe:KCHyyVAXvwH1FGKpfa","tlshash":"b762a6fabb602c3b6262789ba1c651d65440790144b29b8de71cb8b83c6db2d513db37","size":14723,"data":"","first_seen":"2024-02-20T05:54:27Z","last_seen":"2026-07-19T01:53:37.110997Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/vendors~back-office~front-office~highcharts.js","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"efbe10479e5714a45e0f49e4dcb76f4b","sha1":"4033cf2aa41ad267978ee0c82381dc801aa72850","sha256":"a318a476b2fbe5b5e016da00274bf4137b194b7983e8aaab3fa174a7e5c42514","sha512":"374883dd19a39317365acefe156d08de9474afd9fd8796fff2aec1ea142d003758ff2aaaf75dd87d6032357e48e3b78bc51a4c555ac700f7c34c0cc795c434d8","ssdeep":"24576:jfYYmD43APx+WI+Y7cFyMyDTPfCAIdue+MbNIfPQ:jfYYmD43APx+W/Y7cFyMyDTPfCAIL","tlshash":"5af4b7aaaf1c1055372331ce95cb511e926d7622c5faeb0f9c6c081439bd619063eebf","size":790254,"data":"","first_seen":"2026-07-18T17:46:36.375105Z","last_seen":"2026-07-19T01:53:37.071654Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/vendors~back-office~front-office~highcharts.js","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.624Z","timestamp":1784396756624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET /build/vendors~back-office~front-office~highcharts.js HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nCookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: script-src 'unsafe-inline' default-src https:\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\netag: \"6a3269bb-c0eee\"\r\nlast-modified: Wed, 17 Jun 2026 09:32:43 GMT\r\npermissions-policy: accelerometer=('self'), geolocation=('self'), fullscreen=('self'), ambient-light-sensor=('self'), autoplay=('self'), battery=('self'), camera=('self'), display-capture=('self')\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 790254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":790254,"size_decoded":790844,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"efbe10479e5714a45e0f49e4dcb76f4b","sha1":"4033cf2aa41ad267978ee0c82381dc801aa72850","sha256":"a318a476b2fbe5b5e016da00274bf4137b194b7983e8aaab3fa174a7e5c42514","sha512":"374883dd19a39317365acefe156d08de9474afd9fd8796fff2aec1ea142d003758ff2aaaf75dd87d6032357e48e3b78bc51a4c555ac700f7c34c0cc795c434d8","ssdeep":"24576:jfYYmD43APx+WI+Y7cFyMyDTPfCAIdue+MbNIfPQ:jfYYmD43APx+W/Y7cFyMyDTPfCAIL","tlshash":"5af4b7aaaf1c1055372331ce95cb511e926d7622c5faeb0f9c6c081439bd619063eebf","first_seen":"2026-07-18T17:46:36.375105Z","last_seen":"2026-07-19T01:53:37.071654Z","times_seen":4,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/vendors~back-office.js","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.629Z","timestamp":1784396756629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET /build/vendors~back-office.js HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nCookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: script-src 'unsafe-inline' default-src https:\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\netag: \"6a3269bb-ba45b\"\r\nlast-modified: Wed, 17 Jun 2026 09:32:43 GMT\r\npermissions-policy: accelerometer=('self'), geolocation=('self'), fullscreen=('self'), ambient-light-sensor=('self'), autoplay=('self'), battery=('self'), camera=('self'), display-capture=('self')\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 762971\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":762971,"size_decoded":763561,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"3f1e7063253f90edff98d67a99d3196f","sha1":"a760bf780b949c322044428aa67cf82e18abe05a","sha256":"ee78038f1bb460a6a2ef13da6d20a5394b1a2a7ff25e8f996d93f74295a3b6c7","sha512":"82dd5ace7aeef79a1a6e360738b06f7b766943ae6b331c21a41c12928e38c022843eec19cdb7814c256b14135d432023f6f7251ce433e385be8a15d7155917ee","ssdeep":"12288:o7lDyvxle+vVWgnLsDgIktl2hiQya2qty:o7lDyvxle+P","tlshash":"ebf4b5ddad692c84bb32375bdecf51e990ad2b0709424b05bc3e71855ff850c42e4eaa","first_seen":"2026-07-18T17:46:36.378404Z","last_seen":"2026-07-19T01:53:37.097795Z","times_seen":4,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/back-office.js","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.632Z","timestamp":1784396756632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET /build/back-office.js HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nCookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: script-src 'unsafe-inline' default-src https:\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\netag: \"6a3269bb-504f9\"\r\nlast-modified: Wed, 17 Jun 2026 09:32:43 GMT\r\npermissions-policy: accelerometer=('self'), geolocation=('self'), fullscreen=('self'), ambient-light-sensor=('self'), autoplay=('self'), battery=('self'), camera=('self'), display-capture=('self')\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 328953\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328953,"size_decoded":329543,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1186)","md5":"b220f4e4b6b6f0ad0292e2b4bd6d7a0f","sha1":"117fb08469ba295b3b3f821d6dedc13bb2bd7096","sha256":"b6d8864e305efbfa5605996dfabffa8f4613e9e73edaee941eeee705b05a3c75","sha512":"05218fc6705132854488cb22078a658e4f04a9fadffe71f1bbcd1d319af7a44bb0840ac79665b480c8fa5b8b189ee55a70a515445b3c3248ae007ed67ed32808","ssdeep":"3072:rUt3yKkL01TUfDMuxIZPdfAx8vAoS3Js/T2oMx68hAmh0Z9pL:vulUfv+OS/yj6Unh09L","tlshash":"e864e751ed952cb59bae1433b2df96f6820e0303055184e8b44df68a0fb8d2dd7e4e5e","first_seen":"2026-07-18T17:46:36.381896Z","last_seen":"2026-07-19T01:53:37.073239Z","times_seen":4,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/images/ecran-accueil.97891eee.jpg","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.923Z","timestamp":1784396756923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET /build/images/ecran-accueil.97891eee.jpg HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/build/back-office.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: script-src 'unsafe-inline' default-src https:\r\ncontent-type: image/jpeg\r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\netag: \"6a3269ba-8ac4a\"\r\nlast-modified: Wed, 17 Jun 2026 09:32:42 GMT\r\npermissions-policy: accelerometer=('self'), geolocation=('self'), fullscreen=('self'), ambient-light-sensor=('self'), autoplay=('self'), battery=('self'), camera=('self'), display-capture=('self')\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 568394\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":568394,"size_decoded":568972,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=912, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1366], baseline, precision 8, 1366x912, components 3","md5":"4c52e99f4ed09a640d5f95008b6cb7ba","sha1":"bd90b5b9036c500e65384d3ebadf4f987594972b","sha256":"fb2e04dfadcb91e7fc32db5619bf19312fbb38bad99a371b2a0bb240111e6136","sha512":"477145c094a1b78a36803bc323b9ec5bfd728d09d3e2654deff027db99d96942ff35226f72837ef3ae65c9683b291cb184b607ef6df71829511a6083a71eb9d5","ssdeep":"12288:O2A9oMeQXZPm5bpo1d23eT7kY+uBUmkrSm8dGl634YxL:AsseCd2uT7kxuBmeUift","tlshash":"37c4125fc5a1cf0bf288b6389f17dbaaa5223f7e2251435e758d2c03b76105af01895d","first_seen":"2026-07-18T17:46:36.384568Z","last_seen":"2026-07-19T01:53:37.119806Z","times_seen":4,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/images/favicon.ico","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:57.124Z","timestamp":1784396757124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET /build/images/favicon.ico HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nCookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: script-src 'unsafe-inline' default-src https:\r\ncontent-type: image/x-icon\r\ndate: Sat, 18 Jul 2026 17:45:57 GMT\r\netag: \"6a3269ba-cb\"\r\nlast-modified: Wed, 17 Jun 2026 09:32:42 GMT\r\npermissions-policy: accelerometer=('self'), geolocation=('self'), fullscreen=('self'), ambient-light-sensor=('self'), autoplay=('self'), battery=('self'), camera=('self'), display-capture=('self')\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 203\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203,"size_decoded":777,"mime_type":"image/x-icon","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"9ad54abdcbfe0d4d9e39bd80c12cdd0a","sha1":"435c11bd3174fd8f38ee79178f301f8d61165707","sha256":"3437f454f8acc16a95de8b9c95101d50e3932025777673481a2150fc87b9aa09","sha512":"ec2d16dc8ac2955a8ebfaabff02f647c1760d8b43f5bb5c98ab7aefcd9cac55f90d8c4469d34e60f55ede272c25fe99e131e4b01421b31325f45483c5c6c114c","ssdeep":"","tlshash":"ddd02345f2295c68655d555bc11b41196c1148355e891715134605690cb5d890c5cb51","first_seen":"2023-09-24T03:23:21Z","last_seen":"2026-07-19T01:53:37.077549Z","times_seen":12,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T17:45:55.709Z","timestamp":1784396755709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=0, must-revalidate, private\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 18 Jul 2026 17:45:55 GMT\r\nexpires: Sat, 18 Jul 2026 17:45:55 GMT\r\nserver: nginx\r\nset-cookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3; path=/; secure; httponly; samesite=lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Highcharts","description":"Highcharts is a charting library written in pure JavaScript, for adding interactive charts to a website or web application. Highcharts meets accessibility standards and works with Python, Angular, React, iOS, Android, and more.","website":"https://www.highcharts.com","common_platform_enumeration":"","icon":"Highcharts.svg","categories":["JavaScript graphics"]}],"data":{"size":4362,"size_decoded":4677,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (527)","md5":"0d476ef247b81af08ef48e04c222fb8f","sha1":"0c677ef4e3d80eee71a90b79e03c46d60fbbdca8","sha256":"973bd903e7d2c01f54dda6a5c91f70edfd7509b35eef8e416f9a58b7dc80e63a","sha512":"31e0ab15ea5ed5bdc9bee3a9d6dfe6509617920eb972ca547fe2509697f2b6fcf146831a665518f89c8625c6f487d5bef4f100e4a8c001dbfbcc3903fd9dad8d","ssdeep":"48:43xcENVvc+EffsaWQh1W9h3J5dFdAJHCPa8seIPPoYl:4dE1sfQ6D31FdXuNPPoYl","tlshash":"4c91827310f4246b150184806fb6322eaecdfc078a555980b1fd47e49fcafcacc6792a","first_seen":"2026-07-18T17:46:36.389832Z","last_seen":"2026-07-18T17:46:36.389832Z","times_seen":1,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":63,"connect":23,"send":0,"wait":59,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Raleway:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.607Z","timestamp":1784396756607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Raleway:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Jul 2026 17:45:56 GMT\r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22128,"size_decoded":1575,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0d1a0fd65f5a683bb62dd4f7b2875550","sha1":"4f5e319d9f0016dc9bc17f5e7f1b086c8330b17c","sha256":"b3ab94d30813d6c46b81fd2c171fdd23a93c850c70a644bd0b7f26a1d19237c9","sha512":"85ad15b65d28757ce5eb351f7fbd5bf988c70630b9984dcc87e24412c489a1edda99f39718f400eade712ffc215a29ac1d8bd5a7b141251200cba289ea169baa","ssdeep":"384:gCwXTUH6XwIT/YBEw9Tu94ZweTJufGw7TILWbwsTj8kc7iFSnStobcFwf+Jm1:t","tlshash":"b0a2da910917d000ee47adc667cf7e36ee4e62143046c57e9bfd58e8acaac3213a4b0c","first_seen":"2025-09-27T05:29:58.884577Z","last_seen":"2026-07-19T01:53:37.121495Z","times_seen":14,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":35,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/vendors~back-office~front-office.css","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.614Z","timestamp":1784396756614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET /build/vendors~back-office~front-office.css HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nCookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: script-src 'unsafe-inline' default-src https:\r\ncontent-type: text/css\r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\netag: \"6a3269bb-a8d4\"\r\nlast-modified: Wed, 17 Jun 2026 09:32:43 GMT\r\npermissions-policy: accelerometer=('self'), geolocation=('self'), fullscreen=('self'), ambient-light-sensor=('self'), autoplay=('self'), battery=('self'), camera=('self'), display-capture=('self')\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 43220\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43220,"size_decoded":43794,"mime_type":"text/css","magic":"ASCII text, with very long lines (27046)","md5":"dfb4bb8397446fc944325095f1d078f8","sha1":"374e09289aeb9708cb771ac7bd3f8b7ca9296a31","sha256":"4d6e2e9012ebd323b4e377c5c3db36e4e1f34b560947c77b6c7c1b4dc505abaf","sha512":"c5ad0d534fa90233e7f90d888a7f641c2a5168c8285079bd14dbafef11eb99a8ed9c5d4486f7c4c2cd2b58f30be46056186bf2376354de8797ce8d6466ef503f","ssdeep":"768:cKgFKFCYZF9G24ABk25OVmW/z/Cpn6+6TqvnsxFaSt5rwhKgyTspG2KwE+Z:ngMF4LCJEaSfUhGG","tlshash":"d213e9b77785722a2117ed65208685793f333102251a8f3dac5cf6821f17ecbb6a0e67","first_seen":"2026-07-18T17:46:36.392533Z","last_seen":"2026-07-19T01:53:37.109762Z","times_seen":4,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/runtime.js","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.622Z","timestamp":1784396756622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET /build/runtime.js HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nCookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: script-src 'unsafe-inline' default-src https:\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\netag: \"6a3269bb-3983\"\r\nlast-modified: Wed, 17 Jun 2026 09:32:43 GMT\r\npermissions-policy: accelerometer=('self'), geolocation=('self'), fullscreen=('self'), ambient-light-sensor=('self'), autoplay=('self'), battery=('self'), camera=('self'), display-capture=('self')\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 14723\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14723,"size_decoded":15311,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8452)","md5":"000c3893cd42406aebf5454f3954e3e5","sha1":"c0d61af053babc85c9f667f703ded204d1f18eb1","sha256":"dfeff8bb846f34cb36a8289a74111c23ea037f22f932cb26ae7ed442cb22f8cc","sha512":"b4de411d494d226bd6f949a59d1bcd9d2821cb42d36ebb70161ec27f18cb21b7b250f63bd627b0ea3353ca0a1ad9d6e88b130f77e1f2827bdb0d58001d425e31","ssdeep":"192:KCHyEvEW6mcfXGunhXPIrWEmvKBeU71UP+3H8itnSnappbLLe:KCHyyVAXvwH1FGKpfa","tlshash":"b762a6fabb602c3b6262789ba1c651d65440790144b29b8de71cb8b83c6db2d513db37","first_seen":"2024-02-20T05:54:27Z","last_seen":"2026-07-19T01:53:37.110997Z","times_seen":33,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.931Z","timestamp":1784396756931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://onboarding-bpce-recette-sf5.itroom.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:14:35 GMT\r\nexpires: Mon, 12 Jul 2027 10:14:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 545481\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-19T05:16:20.093412Z","times_seen":60071,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":54,"send":0,"wait":22,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/vendors~back-office~front-office.js","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.626Z","timestamp":1784396756626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET /build/vendors~back-office~front-office.js HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nCookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: script-src 'unsafe-inline' default-src https:\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\netag: \"6a3269bb-254b68\"\r\nlast-modified: Wed, 17 Jun 2026 09:32:43 GMT\r\npermissions-policy: accelerometer=('self'), geolocation=('self'), fullscreen=('self'), ambient-light-sensor=('self'), autoplay=('self'), battery=('self'), camera=('self'), display-capture=('self')\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 2444136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2444136,"size_decoded":2444728,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"a03d00581292cbe25523d191a694dab1","sha1":"9a592b7ca20d4dba57488ef7b86838810ffc6225","sha256":"14acac0cfefb8d0934f8a48cb6dbe144d4bef3886b98c3d3facce283baa123e5","sha512":"4fe8937d292e7456d8a5ec6786d0198ac33b59034da229e4716202455a2197f3f443ff7e630edc7b55cd5d6341bee86784352b4f6ceacee883a67c13cf4982bb","ssdeep":"12288:x5Fd+GxImyIZUN04gqHRPPLlSmStWXoCmAodkE:xx+GxIpIZIHRPPLlSmSt9nXdf","tlshash":"6025c6e9ff4c11721023b1fada5f929ce23d562782818e18bc5ce1483fb5928527dfa5","first_seen":"2026-07-18T17:46:36.397283Z","last_seen":"2026-07-19T01:53:37.089056Z","times_seen":4,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/back-office.css","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.617Z","timestamp":1784396756617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET /build/back-office.css HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nCookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: script-src 'unsafe-inline' default-src https:\r\ncontent-type: text/css\r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\netag: \"6a3269bb-10133a\"\r\nlast-modified: Wed, 17 Jun 2026 09:32:43 GMT\r\npermissions-policy: accelerometer=('self'), geolocation=('self'), fullscreen=('self'), ambient-light-sensor=('self'), autoplay=('self'), battery=('self'), camera=('self'), display-capture=('self')\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 1053498\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1053498,"size_decoded":1054076,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (629)","md5":"df9aa6019a27f5e3eaf55fe6652e4f77","sha1":"bc2b751b7223a60c2ad7dd202fcd5ffba5621d47","sha256":"adc610f22218958b1e6f788ad695c11560acd43160149b221bdbfddbc9bb9cf2","sha512":"9ed30487473453c6ed951196228f208b0953578c686c3a18ba0ec78c199ec0fbc596ea2a54365a10847baa742c2eed4b867e26591a3e87cd606b3efb76a32d16","ssdeep":"12288:vURyJcRrLLnefJqBQ6eSUuE4KS4xo76VSvuoQNg2XPzApZUgH+CeCIfRbwZnWc6e:nc69MhL/ku0Jz0v9QNYUMYNQL","tlshash":"b9255bedddbc3c157b22861830cfa5e3331e53472815ce59ea99b2848f9d28e15f0a79","first_seen":"2026-07-18T17:46:36.398873Z","last_seen":"2026-07-19T01:53:37.080739Z","times_seen":4,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onboarding-bpce-recette-sf5.itroom.fr/build/images/logo-oney-vert-login.png","fqdn":"onboarding-bpce-recette-sf5.itroom.fr","domain":"itroom.fr","tld":"fr"},"ip":{"addr":"185.225.232.49","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.641Z","timestamp":1784396756641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onboarding-bpce-recette-sf5.itroom.fr","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 06:59:14 GMT","end":"Sun, 27 Sep 2026 06:59:13 GMT"},"fingerprint":{"sha1":"4B:8B:BB:F0:8D:31:A9:0D:15:AF:CE:9F:C1:A6:DD:10:1F:6A:02:43","sha256":"19:CA:E8:7B:84:94:C4:55:E0:08:05:A8:7E:C2:D3:4B:3E:81:4B:F4:4B:66:90:D7:B0:FB:4B:80:7D:FB:AD:DF"}}},"request":{"raw":"GET /build/images/logo-oney-vert-login.png HTTP/1.1\r\nHost: onboarding-bpce-recette-sf5.itroom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nCookie: PHPSESSID=6747bfd98bfd45bd5a5b44466c9a31f3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-security-policy: script-src 'unsafe-inline' default-src https:\r\ncontent-type: image/png\r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\netag: \"6a3269ba-12c6\"\r\nlast-modified: Wed, 17 Jun 2026 09:32:42 GMT\r\npermissions-policy: accelerometer=('self'), geolocation=('self'), fullscreen=('self'), ambient-light-sensor=('self'), autoplay=('self'), battery=('self'), camera=('self'), display-capture=('self')\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 4806\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4806,"size_decoded":5380,"mime_type":"image/png","magic":"PNG image data, 140 x 56, 8-bit/color RGBA, non-interlaced","md5":"467422cc48eed7acdadff8ae74751df3","sha1":"dd82df542ce0bd71936be964e492a4e3be99d3be","sha256":"3ea14fe3d3598ea91efa0f9330a1b33cf1b961d8c2f8c075dc57e16581f9dc07","sha512":"99e351f4d34245322f69cbe2f813d0af89818ffcae9959696aa0cec6e99bf0ee02ef09eeef4ccd722bc5893bb0b8975c4c0f7e527f4bb80d48554104df796d82","ssdeep":"96:qqf/O/mwWYRjPhg97/MCQxGbMzkoslKtxr6u7uUcidFyd6c+hCA:qy/nw55g97//rCkosS64cirVBhh","tlshash":"d3a16eff7a4cd996cedbeed124de510eb85000e99619093e544dc1c6dc72f0d4683d5a","first_seen":"2026-07-18T17:46:36.400339Z","last_seen":"2026-07-19T01:53:37.102686Z","times_seen":4,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-18","alert":"Phishing Block","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"onboarding-bpce-recette-sf5.itroom.fr","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.934Z","timestamp":1784396756934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://onboarding-bpce-recette-sf5.itroom.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:14:35 GMT\r\nexpires: Mon, 12 Jul 2027 10:14:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 545481\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-19T05:16:20.093412Z","times_seen":60071,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":29,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.8.2/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onboarding-bpce-recette-sf5.itroom.fr/","date":"2026-07-18T17:45:56.611Z","timestamp":1784396756611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 04:47:15 GMT","end":"Sat, 19 Sep 2026 05:47:13 GMT"},"fingerprint":{"sha1":"56:7D:E6:34:CD:99:1D:3A:86:60:3A:0C:55:7C:7E:C8:F3:CA:97:5C","sha256":"91:DF:1A:31:E1:02:E5:20:5D:FB:5D:28:52:C7:B2:13:27:02:F1:DF:C8:65:11:80:77:BA:34:41:7D:64:69:FD"}}},"request":{"raw":"GET /releases/v5.8.2/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://onboarding-bpce-recette-sf5.itroom.fr\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onboarding-bpce-recette-sf5.itroom.fr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 18 Jul 2026 17:45:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 22 Sep 2023 01:45:57 GMT\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v44DEdUAElaVkoVjjB8g5h9Hmadch0ZisrIx8hOGn7X7AW8fpzqrd%2FW2gtZ2bUUplkKwemthIEj7%2FpZunPE5By4jqv%2Fk86AUFafzPcgzXi9uTeScoo537dx5q8g0y97bk4GL9l3g\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\netag: W/\"77cbad34e5ce95e70847b074e05faeab\"\r\ncontent-encoding: zstd\r\ncf-ray: a1d34d910982783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55183,"size_decoded":13500,"mime_type":"text/css","magic":"ASCII text, with very long lines (54998)","md5":"77cbad34e5ce95e70847b074e05faeab","sha1":"50ccfd672cc8d4d4cff476204509c2fd51907ffa","sha256":"06d6e10886ed7de5561acab1935bce1c46174baa9cbd0bcb319aa3b69594131f","sha512":"aea425b5746e1f1b4f5a192da406712c751527712899b9f786f93d3c78d5fcde43314627cca3c2d62dee6f49845e0173b1a64d789728134607ab48ff185b1d1a","ssdeep":"768:nuC31UP18Pq4/vnU6UHJXkQCZ/WMQyjJKX7I9sGsQz5:nu5PWC4/vYH5BCkgc7qsiF","tlshash":"bd430bb8e54c41c9a731c44fbf82b2bc61b6f73ce5914d95f00e691c2ad26a811c9fb9","first_seen":"2023-04-05T05:12:38Z","last_seen":"2026-07-19T01:53:37.105954Z","times_seen":4785,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":12,"connect":7,"send":0,"wait":111,"receive":-1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}