{"report_id":"cd8a43e6-d6b6-4fb7-9616-3d093f88fe2c","version":0,"status":"done","tags":[],"date":"2026-10-09T17:17:00Z","url":{"schema":"http","addr":"service.courrierar24.co/","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":0,"asn":396982,"as":"Google LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"service.courrierar24.co/","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"title":"Connexion  - AR24","dom":{"size":30704,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (609)","md5":"ab7e1b8dc9889698aa7aeb0ffddbaaad","sha1":"d20661959596dc3d31a68ac6ca5a08324b86f424","sha256":"40282fb35008a4970777699b7676a98767da80eea01e56e4986d78bb5b7959be","sha512":"a24736002ee1f3f188af876954dde025e45b090726c9804ff4c8ebd12eed2398dc92e335fd261317f999dc95455ceeb380db2a3f7e7e9aaf0c1758f7ab9bc8c1","ssdeep":"384:40o3g3+mYgVR5W4hdoTq7/maUw9LS9LE/sMrxoLkIeshqSHFSmAVL6:NCCWAy9a08oLJqmW6","tlshash":"1ed2f921b0f4142a1153c055bb6bab1a39368003d70a9e0576ae1bba9fc7dd36db73cd","dom_hash":"domhashdcc63d98bc36252130e5c30d0394c58a","first_seen":"2026-08-31T14:33:07.537739Z","last_seen":"2026-10-09T23:44:06.134223Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"service.courrierar24.co/","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":0,"asn":396982,"as":"Google LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T17:17:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.hygiene-numerique.com","ip":{"addr":"217.160.0.205","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"domain_registered":"2018-12-06","domain_rank":0,"first_seen":"2026-08-10T15:54:11.158163Z","last_seen":"2026-10-09T12:44:23.178164Z","alert_count":0,"request_count":1,"received_data":16197,"sent_data":588,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-10-05T23:51:00.733113Z","alert_count":0,"request_count":1,"received_data":494318,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"s.yimg.com","ip":{"addr":"188.125.94.204","port":443,"asn":10310,"as":"YAHOO-1","country":"Sweden","country_code":"SE"},"domain_registered":"1997-05-14","domain_rank":4553,"first_seen":"2012-05-20T22:45:00Z","last_seen":"2026-10-05T17:50:50.621736Z","alert_count":0,"request_count":1,"received_data":1998,"sent_data":589,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"www.zoneadsl.com","ip":{"addr":"104.26.8.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-02-06","domain_rank":332388,"first_seen":"2026-02-17T05:09:41.527797Z","last_seen":"2026-10-09T12:44:22.111644Z","alert_count":0,"request_count":1,"received_data":9624,"sent_data":681,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.antaranews.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2003-02-18","domain_rank":1559239,"first_seen":"2020-03-13T03:11:53Z","last_seen":"2026-10-09T12:44:22.524541Z","alert_count":0,"request_count":1,"received_data":9798,"sent_data":579,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"www.bouyguestelecom.fr","ip":{"addr":"23.44.32.131","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1996-10-20","domain_rank":34107,"first_seen":"2012-08-03T16:27:14Z","last_seen":"2026-10-09T12:44:22.111716Z","alert_count":0,"request_count":1,"received_data":11442,"sent_data":595,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"service.courrierar24.co","ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-09T12:44:39.850221Z","last_seen":"2026-10-09T12:44:39.850221Z","alert_count":44,"request_count":11,"received_data":134424,"sent_data":5916,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.woopic.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2002-10-18","domain_rank":1978952,"first_seen":"2012-08-21T17:45:26Z","last_seen":"2026-10-09T12:44:23.141381Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":549,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"service.courrierar24.co/","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f343b7087d52ef228a88896b3d00a024","sha1":"db5d6e29bcba0751435532e4dd94177292959752","sha256":"313ce38adba213aa163c752121530fbe08b29845494c2ea534b991dddcfca709","sha512":"77f9f997e4bcd157a0150bc9b49ac1a1d8d6186c60b45dd07a0b09350eacd229a69d8d8a0162613b328f613d1056e5ba6f79873a9d98e16fdead8f28197b7341","ssdeep":"","tlshash":"3a01d177b8850c2265a3fa7813aeda543431801b1143df017e7cd76d3fbac4245216b2","size":711,"data":"","first_seen":"2026-08-17T23:55:36.483978Z","last_seen":"2026-10-09T23:44:45.850071Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"66584d5aa37f28375c6ee73269aa1880","sha1":"ec99c371cd42e985ad8d4dbff9edf26c5afad1cd","sha256":"2e423c66b310fbf31a09e479d0af6ed399d12475719f96c182d7e2bd9be1a775","sha512":"890c73a29f3e947773fa4b61facfa90a29772c5d5dc0c707d05b27680f1a04fa843699e95f55dd99ea8e28593a22de4a1c8266bdab8796ab260330ec89af591b","ssdeep":"192:m9LS9L0VEAOGsMrxoL+CuIeshqSPPFXd1av9:m9LS9LE/sMrxoLkIeshqSHFSF","tlshash":"3712c7663df6242519e7d473b72b5a8a303050139a0ada007c7f43b08fd5ea239b33c9","size":9893,"data":"","first_seen":"2026-08-31T14:33:07.582313Z","last_seen":"2026-10-09T23:44:06.171614Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2b8878b5d03c5b42134b1f228740748","sha1":"7f4bc6943b3f35bce3b9630d2507346c26107e25","sha256":"36aec0d6b73b24efb5e779aa49a40a204ace0700896f497eabcbaa6f18c73063","sha512":"58a0fcf0600fbdac2cde7aaa0867651852938b2e46a775c5e1dd786787403fe5d2eab88df16d5d109dcdc30164b157227ce9ae1f5da8b8853f812682a3c13466","ssdeep":"","tlshash":"8df02839eae425f101bbf13a624fea34a63740c394a4ea0977d40e491f908dc5bb2687","size":614,"data":"","first_seen":"2026-06-18T08:24:36.316258Z","last_seen":"2026-10-09T23:44:45.851275Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.hygiene-numerique.com/wp-content/uploads/2020/06/Mailo_logo.png","fqdn":"www.hygiene-numerique.com","domain":"hygiene-numerique.com","tld":"com"},"ip":{"addr":"217.160.0.205","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.360Z","timestamp":1791566189360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hygiene-numerique.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 25 Oct 2025 00:00:00 GMT","end":"Sun, 08 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"39:AF:5A:46:4C:7B:63:98:EF:49:76:85:F2:DC:20:A7:20:FF:39:02","sha256":"DC:F5:67:08:EE:43:F5:AA:F2:59:92:DF:68:A7:4F:05:11:E6:2A:80:E2:05:06:A5:19:0F:D6:3E:44:E0:7D:03"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/Mailo_logo.png HTTP/1.1\r\nHost: www.hygiene-numerique.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 15818\r\nx-ws-origin: available\r\nx-ws-ratelimit-limit: 1000\r\nx-ws-ratelimit-remaining: 999\r\ndate: Fri, 09 Oct 2026 17:16:33 GMT\r\nserver: Apache\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nlast-modified: Fri, 26 Jun 2020 10:55:15 GMT\r\netag: \"3dca-5a8fa8b4aeb39\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15818,"size_decoded":16197,"mime_type":"image/png","magic":"PNG image data, 600 x 185, 8-bit/color RGBA, non-interlaced","md5":"aae833ae6c433651ec0f275d80d3e3a9","sha1":"592d23f3dfe5d932a5e61153914034e3a61ca6c4","sha256":"68d3860f1044c2db9ba683ec464c79e72cace258552d429f6984f833482fecf2","sha512":"392c400fe86d266f56b33965d0baeef59cfb042cb3bd3b81a2d34fa0bfe42070beba1651aa4a7f3d89adf96b9509897b12638e26291a6cc7edb924b44e2b298c","ssdeep":"384:95yMOuM06Z/gjYHzlA7px3VDSDozSaLI/V10mL9ypDd0Wykp/W5:95AejGzlA78C8V10mZ+d0W/W","tlshash":"6262d0281eb55348ddf555717665130b7013cb0bca5eba6fe206f3f5f080a8294f650a","first_seen":"2026-08-17T23:55:36.471011Z","last_seen":"2026-10-09T23:44:45.849533Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3863,"timings":{"blocked":-1,"dns":61,"connect":31,"send":0,"wait":66,"receive":0,"ssl":3704},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/fr/9/92/La_Poste_logo.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:28.997Z","timestamp":1791566188997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 05:19:15 GMT","end":"Mon, 09 Nov 2026 05:19:14 GMT"},"fingerprint":{"sha1":"52:17:30:E7:B5:4D:78:C3:1A:27:27:36:2B:27:EF:C7:29:CE:9C:13","sha256":"AE:63:EF:37:2A:14:17:F8:1E:87:39:CA:5F:A2:71:13:FE:DF:F3:0E:88:8C:B9:2F:7D:A4:27:15:B3:2F:A8:CE"}}},"request":{"raw":"GET /wikipedia/fr/9/92/La_Poste_logo.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nx-object-meta-sha1base36: dalu9j4txqh3b2v1xpvd152ceow3c4g\r\nlast-modified: Sat, 01 Dec 2018 19:11:19 GMT\r\ncontent-length: 492277\r\ndate: Fri, 09 Oct 2026 12:33:26 GMT\r\nx-ratelimit-limit: 600000, 600000;w=60\r\nx-ratelimit-remaining: 599999\r\nx-ratelimit-reset: 34\r\nserver: envoy\r\netag: 4c9df9da2980df031b196c3130b2a9f5\r\nage: 16982\r\naccept-ranges: bytes\r\nx-cache: cp3077 hit, cp3077 hit/20\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=ErFullX6uvgoELYB48C9dgP0AAAAAFvdfdygrIzSHVvgB5w1oFk7gOkb053CEcs3;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 09 Oct 2027 00:00:00 GMT\r\nx-request-id: 4b7fa768-2c5e-4c75-8121-63a65e438695\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"WMF-Uniq","value":"ErFullX6uvgoELYB48C9dgP0AAAAAFvdfdygrIzSHVvgB5w1oFk7gOkb053CEcs3","quoted":false,"path":"/","domain":"upload.wikimedia.org","expires":"2027-10-09T00:00:00Z","raw_expires":"Sat, 09 Oct 2027 00:00:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"WMF-Uniq=ErFullX6uvgoELYB48C9dgP0AAAAAFvdfdygrIzSHVvgB5w1oFk7gOkb053CEcs3;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 09 Oct 2027 00:00:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":492277,"size_decoded":494318,"mime_type":"image/png","magic":"PNG image data, 3508 x 2481, 8-bit/color RGBA, non-interlaced","md5":"4c9df9da2980df031b196c3130b2a9f5","sha1":"71d021fe4433254c6f28d6d9182847780a19c020","sha256":"1f60c6c2d5ad9875fa80cdd09e51eadf35f77f7284182a7cc4b9249d246bae54","sha512":"62c4c9a4e0a5c475969ed715d9c103bab50fd4d3a1091043d693eb76b5a7eba96dd176bdc125d845588728c677b63dd61cd956efcb9c09272b18b8839c266fd9","ssdeep":"12288:jyK5l+LSJhp9VDM6Im5W5zPMJ+K8d02LKjBavTWjGm4JiMZ8:PvnPVhW5zPsKdNvCjGm2Z8","tlshash":"a3a4120996fb6c9adc8a14b308ab2f313372798f91e8165b7b74fb518c572780d4621f","first_seen":"2026-02-17T05:09:46.963478Z","last_seen":"2026-10-09T23:44:45.84821Z","times_seen":18,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":28,"receive":80,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/static/images/logo/AR24.svg","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:28.999Z","timestamp":1791566188999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET /static/images/logo/AR24.svg HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=600\r\ncontent-type: image/svg+xml\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:29 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN4FTV3NTVCHZZ2ZQYSQN\r\ncontent-length: 1566\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1566,"size_decoded":1973,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc98fec7243c0fe0271c1e7a4023cfea","sha1":"4cc27405bb9634b603bcec4526cab8b9a3a2f6a2","sha256":"149e686c6b5d92f4b7692c33a39c8e8cb03b78a51f572080c2260b3d5014b48b","sha512":"75271d9d2fb3ee8800874a8ab8582e81b3246030f509bf4d015f1e81f2988f4cc2deb661a046468f8fe7114b60e859badca04594f1327e84f8be552234aa27a2","ssdeep":"","tlshash":"9731f0ff471862cc699b9f8cdf3269f4470f94ba76a506c1859ec7ae44c38c8e907850","first_seen":"2024-12-10T11:38:40.948442Z","last_seen":"2026-10-09T23:44:45.835597Z","times_seen":93,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/static/images/footer/frenchtech.webp","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.000Z","timestamp":1791566189000,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET /static/images/footer/frenchtech.webp HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=600\r\ncontent-type: image/webp\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:29 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN4FV6TM4NBC1N5AG79PN\r\ncontent-length: 1452\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1452,"size_decoded":1878,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4580fe2a5196bdd973aeb4cd6bca856a","sha1":"0053e73ae1ec9667a5a8e61687d3758670cf7131","sha256":"fa55b8cae5f31bdb83987c7c0214104581f779313cb50771578405ddd561fcec","sha512":"c27bd2fcf02db3e0491cd53f5fe5f8ff68a5573e17ee09819e0da0f42d5153d09e98e53dde7f04d53198486725a817ad00ac080b1a7b4e51fc791081d66aa326","ssdeep":"","tlshash":"7331c9d969a20f6aec35a431a5f7120f92e29c48aea13db31ca2147c35211db466e397","first_seen":"2026-08-17T23:55:36.466729Z","last_seen":"2026-10-09T23:44:45.83992Z","times_seen":12,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/static/images/SFR-2022-logo.svg.webp","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.350Z","timestamp":1791566189350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET /static/images/SFR-2022-logo.svg.webp HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=600\r\ncontent-type: image/webp\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:29 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN4TTAA4YYEJMXTD7SH0Y\r\ncontent-length: 2520\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2520,"size_decoded":2946,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3d68e517a173ab2681b1f8cdff92303","sha1":"cdfbe54bcf4e286b8250bc3aa0e05a0997e3e1f9","sha256":"2a541ec1826ef26f63ceb830831e8db471a3b4c26cf5dbb8e587116fbcafa2dc","sha512":"725a139a651d7ee1ff77c4d10a44ac4056b9ee07b18a22fc7a3082acf2557299c77219786f9c95afdad7e45c4ea98e53692fe9b2fafc793606d92a6fd2030d6c","ssdeep":"","tlshash":"e3514c3ca2fd1e32d6addcd7903c2a4d28152e908ab0f58e91a9fd70abab0b12456041","first_seen":"2026-08-17T23:55:36.469473Z","last_seen":"2026-10-09T23:44:45.836192Z","times_seen":12,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"188.125.94.204","port":443,"asn":10310,"as":"YAHOO-1","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.358Z","timestamp":1791566189358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Sep 2026 00:00:00 GMT","end":"Wed, 18 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B5:D2:29:46:8E:99:2C:BF:0C:6B:FD:3C:E2:FD:3B:F7:25:C6:B5:24","sha256":"04:DC:3B:6A:7E:BF:A6:EB:4F:A5:1E:8B:62:4A:EB:E4:3D:F5:81:C3:49:69:14:A6:19:46:0A:7A:78:51:8B:EE"}}},"request":{"raw":"GET /rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: 0J6Pjs7KAxN26xjfCDMtaT4dU3LYTCRsfkIRazXqO7Sfy6cqa617ljtya3bi76xIRarsjO6Cplo=\r\nx-amz-request-id: TRP869ZE3X9HDP9F\r\ndate: Fri, 09 Oct 2026 09:46:49 GMT\r\nlast-modified: Tue, 25 Aug 2026 21:32:12 GMT\r\ncache-control: public,max-age=86400\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-length: 1346\r\nserver: ATS\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\netag: \"cd166981c96c6d0f4b5a7d798c25878e\"\r\nexpires: Fri, 09 Oct 2026 23:00:00 GMT\r\nage: 26980\r\nvary: Origin\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":1346,"size_decoded":1998,"mime_type":"image/png","magic":"PNG image data, 240 x 72, 8-bit colormap, non-interlaced","md5":"cd166981c96c6d0f4b5a7d798c25878e","sha1":"09031c4013138bb8bd54ab9092ac59aa47d7c60c","sha256":"0fdefe26bac6a6b0b06fe67984582f887af70b7da25d6cb1b401f9074db58338","sha512":"6d217a81dfdcfd601c3f6d9cde3f1be0c4d4ffef85b02b06208014101456ca730ef759bd51637966c9f2572080b79e8a2f9d45a2087ddc40df015f8c052da501","ssdeep":"","tlshash":"6821d85a1a7baa91cda1bc7278bcc89ef5106013ca311d93826ab5699c0e0eab15406a","first_seen":"2023-04-17T08:42:57Z","last_seen":"2026-10-09T23:44:45.846109Z","times_seen":3370,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":3,"connect":8,"send":0,"wait":10,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/static/fonts/barlow/webfonts/barlow-latin-400-normal.woff2","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.306Z","timestamp":1791566189306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET /static/fonts/barlow/webfonts/barlow-latin-400-normal.woff2 HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/static/min/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=600\r\ncontent-type: font/woff2\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:29 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN4SF4S07MA3AMRXBTN7K\r\ncontent-length: 21144\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21144,"size_decoded":21571,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21144, version 1.0","md5":"2bc7630144496092dc786ce63109e560","sha1":"723df3658078cfed03c85e47f15fc439eb4331be","sha256":"7c9c80a6c32c0619d61c28f28723e68c5f8f75163e77ee5cf64c39e640e0d71e","sha512":"754a5961176362bff5265b0adcb5265635080ca863aa48361b74aceee98db55814fdaf56ed56ab146b896f4454a5f6882d227557b88e06a1b24424a3b1f25db5","ssdeep":"384:FGsBF/l0XPCCdAj5mRQmkj5uAbKgz1SKYo8a8eo0tcwJsCPT5qJl/z1X:FVF/l0/CCI5mRw4hgz1SDhe7tcwJHAJj","tlshash":"2d92d0b95535a50f0b1f9cd777212a4fa75c02034f622d30ea82e369c1a944d73e74bb","first_seen":"2023-04-07T08:38:17Z","last_seen":"2026-10-11T05:08:30.850096Z","times_seen":7362,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":176,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/static/fonts/barlow/webfonts/barlow-latin-600-normal.woff2","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.333Z","timestamp":1791566189333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET /static/fonts/barlow/webfonts/barlow-latin-600-normal.woff2 HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/static/min/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=600\r\ncontent-type: font/woff2\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:29 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN4T9S3Y2K5MM28B3FKFD\r\ncontent-length: 21796\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21796,"size_decoded":22223,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21796, version 1.0","md5":"8074c760fbdd366fc1c33ce702911abf","sha1":"b68cdebfb413c4ad60fa131dc29e36da4b3ce45c","sha256":"2b14e8397d552f351a4396dec25ec5da1348865683100e94c4ab0faea4a9a254","sha512":"3ab42a18af9e84cf5235e3b62e742ec42edb5bee37cf02ec9264b68f455821099f892b5c61a59c84832b3cb94fdb9729459aadfde4906cce785baf92db1c3dca","ssdeep":"384:LjnuqNDx7psI0H8OXaqJE5sEctLpFezBXoQkbnAvWbWA4QE6sMEQ6ojRMsp:LjnZxtsHDEKESV8N4QunABQK2eU","tlshash":"0ca2d19c97918ad30e765eb0d4ec970b2241cb28499fcde5b521117d7c2cd9621fabcc","first_seen":"2023-04-08T01:44:26Z","last_seen":"2026-10-11T01:05:18.840874Z","times_seen":4434,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zoneadsl.com/_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2Fdwb5rz3t%2Fproduction%2F751bb27e3e1fe67dbb6909cab7a31e5cda694217-600x400.png\u0026w=1920\u0026q=75","fqdn":"www.zoneadsl.com","domain":"zoneadsl.com","tld":"com"},"ip":{"addr":"104.26.8.139","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.352Z","timestamp":1791566189352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoneadsl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Oct 2026 07:14:56 GMT","end":"Thu, 31 Dec 2026 08:14:47 GMT"},"fingerprint":{"sha1":"63:3B:5B:8A:39:F7:24:1E:F9:11:15:CF:1E:F8:DA:3D:E7:09:D8:20","sha256":"6E:6C:42:79:BF:70:B2:3E:11:C7:16:95:B4:A8:01:4B:A3:BC:85:91:0A:9F:F3:19:6A:6A:6A:D8:A7:09:59:91"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fcdn.sanity.io%2Fimages%2Fdwb5rz3t%2Fproduction%2F751bb27e3e1fe67dbb6909cab7a31e5cda694217-600x400.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: www.zoneadsl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nalt-svc: h3=\":443\"; ma=86400\r\ncache-control: public, max-age=2592000, must-revalidate\r\ncontent-disposition: attachment; filename=\"751bb27e3e1fe67dbb6909cab7a31e5cda694217-600x400.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\netag: OjegYwF0y70T9qxd9IlIqVZpgoxNI3WMMWHaTW1N9PI\r\nvary: Accept, accept-encoding\r\nx-nextjs-cache: HIT\r\nserver-timing: cfExtPri\r\nage: 16356\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzUFQnRq0UEtUW%2Bb7O2RtSfROKZWo%2F%2FvPwMDwRwXmKUjJPUbbtQ4Ofvx8Lbq2trRNZ0WHS0APCuiP2yJD8h0Q6eTyzZKk1np%2FieCqKaJlMqkJSlw%2FGbtHR6uzR8dauS48FY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a47f088b9c6a56a3-OSL\r\ncontent-length: 8582\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8582,"size_decoded":9624,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"51e0bcff041ca1bdfa735cb31d7ea4c1","sha1":"a418c7b30d7cb86a82355d7cb6fe0922bb227e9b","sha256":"3a37a0630174cbbd13f6ac5df48948a95669828c4d23758c3161da4d6d4df4f2","sha512":"cbc15f05dbe1d1e3f1848511b1ca56a6dd14ba767a736db2ebe145c44dedee4383313fdacb893b1c9bee36ae33d13203c6728d4cbf6647399a41411d3c7ba9fc","ssdeep":"192:2sZ8fa4wH3JPzwGlrfdDVrZiw3NLwOOny8yZmb:XSfa4wHZsurPrEdOOyjZmb","tlshash":"13028c49d6cae381d0f722b799b419609b0ad27868e60fc7a00d3f8b7d804f22de3154","first_seen":"2026-02-17T05:09:46.949249Z","last_seen":"2026-10-09T23:44:45.848805Z","times_seen":18,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":7,"connect":21,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.woopic.com/logo-orange.png","fqdn":"c.woopic.com","domain":"woopic.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.353Z","timestamp":1791566189353,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /logo-orange.png HTTP/1.1\r\nHost: c.woopic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T04:43:25.965162Z","times_seen":19017510,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.antaranews.com/cache/1200x800/2017/11/Outlook.jpg.webp","fqdn":"cdn.antaranews.com","domain":"antaranews.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.356Z","timestamp":1791566189356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.antaranews.com","organization":""},"issuer":{"commonName":"SSL.com TLS Issuing RSA CA R1","organization":"SSL Corporation"},"validity":{"start":"Sun, 16 Aug 2026 06:12:21 GMT","end":"Tue, 02 Mar 2027 06:19:17 GMT"},"fingerprint":{"sha1":"CD:0E:6B:ED:63:88:EC:E8:A0:3D:3A:EE:AC:DA:19:0E:9D:5B:8B:AA","sha256":"AC:61:F0:7A:6F:18:8B:9E:3A:55:0C:BB:07:E8:96:D8:3F:96:08:B7:54:1E:46:3C:77:5F:7B:60:1C:4A:05:14"}}},"request":{"raw":"GET /cache/1200x800/2017/11/Outlook.jpg.webp HTTP/1.1\r\nHost: cdn.antaranews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9078\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 119024\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=25600000\r\netag: \"69da3e76-2376\"\r\nlast-modified: Sat, 11 Apr 2026 12:28:38 GMT\r\ncdn-storageserver: DE-660\r\ncdn-requestpullsuccess: True\r\ncdn-fileserver: 1068\r\nperma-cache: HIT\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/09/2026 12:43:53\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://imgcdn.antaranews.com/cache/1200x800/2017/11/Outlook.jpg.webp\u003e; rel=\"canonical\"\r\ncdn-requestid: b60091e50b68fbd21e7c628964199364\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9078,"size_decoded":9798,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5207e0e186684cf31900239bc989e2e1","sha1":"836dfd7e50cf9a972a328986f201b7f2c3658e86","sha256":"284ee7609c4baa6fa6c601273467514fb0b8e8e396bbc45596b92511eb325b49","sha512":"31ca80c7c7dd43ff88ca7b582894b2c29c980daf8fca5adf7e57829d99c25bd8533f4464ef98f97ea729399e48aa9b314635a46fbef5e94ad3acb766e3879c37","ssdeep":"192:dOZBtsHETTFTaUMP6jrXCcP6CqU6jjAb0/8w0NN0YOpR:dOZBWyRTBXWjUWZv0NN0YOz","tlshash":"18127f2cdb04aa77ec72f1764a0b10802bda24b7f484a518b8b4c950356b63d17bd7af","first_seen":"2026-08-17T23:55:36.458625Z","last_seen":"2026-10-09T23:44:45.845255Z","times_seen":12,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":10,"connect":1,"send":0,"wait":3,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/static/images/favicon.png","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.776Z","timestamp":1791566189776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET /static/images/favicon.png HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=600\r\ncontent-type: image/png\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:29 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN58491JC6ZW4TWV62NSA\r\ncontent-length: 2258\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2258,"size_decoded":2661,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"0b820489e67009df39eef3c45440ea7a","sha1":"9e756c48bb0a1384e235bb833c6c4603bdb75c02","sha256":"7b9b5f074a1c29f8edd2972e07bed2006210c271178fb443e2de7eec888d14a9","sha512":"c471951fdf9827d6e68cd8c79cbeaa0fb54218bbc8fffa303f8f824667039d89021248ea293c96fa59b8e775269c7617ab7c619b4473b7f6680de614b23215f6","ssdeep":"","tlshash":"8d41608e1667f197445eca37e30071da34e81a66e0beaa7d67e32d21b039d5e50043ec","first_seen":"2024-02-29T19:36:55Z","last_seen":"2026-10-09T23:44:45.836811Z","times_seen":116,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T17:16:27.805Z","timestamp":1791566187805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=600\r\ncontent-type: text/html; charset=utf-8\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:28 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN3VNXR144PHZB27TY0DW\r\ncontent-length: 29498\r\ndate: Fri, 09 Oct 2026 17:16:28 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29498,"size_decoded":29917,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (609)","md5":"052d3a0593cb8745c13c04bef78b04cc","sha1":"cdc1bab0f0021b7128068f37f6e2e5af2cb4d22d","sha256":"d802b672a74ab9e21abbf53778f1055477f9896babcbfd905cbbd0c86f62b85f","sha512":"c1d791a33062906113c1c42d1e35d2e58adb6b272d891f62ffabc4088a95b7087a4410b9a8115e51854479b68067b360203f0552e78d5d9714697369af58afe4","ssdeep":"384:Hbob9xNmUg3WiyW9udot0w9LS9LE/sMrxoLkIeshqSHFSmAVr:8RdWUyya08oLJqmk","tlshash":"eed2f921b0f414260193c066bb6bab1a39369043d70a9e047aad1bf95fc7dd26db33cd","first_seen":"2026-08-31T14:33:07.574563Z","last_seen":"2026-10-09T23:44:06.163874Z","times_seen":5,"resource_available":true,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":129,"connect":112,"send":0,"wait":229,"receive":123,"ssl":305},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/static/min/style.css","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:28.990Z","timestamp":1791566188990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET /static/min/style.css HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=600\r\ncontent-type: text/css; charset=utf-8\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:29 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN4FJW5XMH7F680K1SFKJ\r\ncontent-length: 31818\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31818,"size_decoded":32236,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3546)","md5":"d96489012340a5a36a31c7686502cccf","sha1":"d79bc5c21597fc87bb65ef1570653ff6ac3ac59e","sha256":"a886728121f8b38b2cfdaeb98b9cfe6a82ffc1e39d2982a382b6721ca392c901","sha512":"4fa7a71c10b19434f90d656f259d1d73209c1aba4ef1114d14763e79e6598f05c048dfd0704fd4d4e4110e9c84eeff8dd408679ed3ee83b8667c08960bbbb696","ssdeep":"384:qJm5sc2igaDT8TQrkPe4TKiv3D+qRTugwQSO:qJCg0T8TQrkPRT5Dz5","tlshash":"72e276a3fad0300da51bc12ab4d1bfac243ad45286524b7bf11bb77587cb1a71762b1c","first_seen":"2026-08-17T23:55:36.476944Z","last_seen":"2026-10-09T23:44:45.847533Z","times_seen":12,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/static/images/footer/regionalsace_grey.webp","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.001Z","timestamp":1791566189001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET /static/images/footer/regionalsace_grey.webp HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=600\r\ncontent-type: image/webp\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:29 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN4FW76V89P9MWQDJC2JM\r\ncontent-length: 1380\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1380,"size_decoded":1806,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ecf425ee888d7a2dac246ba4c2a24f0","sha1":"398ebfd9b1299c283a95253b659e52e1125396c0","sha256":"39991b7568265ea395f63e261e09bd847d9245faf2ae78de3a8f898afd7a7ab6","sha512":"d630347e4ee22a268fdd48bfb81fdfed58114f937d2cf8e25c5bc91e8891a6e8ae45e78d6d51bc785a80bd32ef97c41524f7a8ce3871e5f43a3cd528a7f14f53","ssdeep":"","tlshash":"9e210b74ecdae5b1e615143679b1ec1c2291db77e0422b13c5dfc84875fc21636516f8","first_seen":"2026-08-17T23:55:36.480697Z","last_seen":"2026-10-09T23:44:45.840794Z","times_seen":12,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/static/images/footer/syntec.webp","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.002Z","timestamp":1791566189002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET /static/images/footer/syntec.webp HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=600\r\ncontent-type: image/webp\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:29 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN4FXM97XY2NX8WC2CFV2\r\ncontent-length: 1288\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1288,"size_decoded":1714,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27ad3ff7cbac652f3af551d18d11f285","sha1":"e740dbd7a05e05ae57bb8de6cc8e1013ab930589","sha256":"04d1aeee359edf1027822df1b2b31c7e602520890a0a9a8a671aae3e992fb0b0","sha512":"3d8e63b81940434c4733007ae6666546a4a0655a02cbc459be824ca2d534df061344bf09a689b536cac882aa68651c80370f22be3099a3cf550a7f751797e464","ssdeep":"","tlshash":"2021a29b7dea68b056125a3e16088702114ada1cb017fe5478564643fb4f0cc6da11a6","first_seen":"2026-08-17T23:55:36.48281Z","last_seen":"2026-10-09T23:44:45.838518Z","times_seen":12,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.courrierar24.co/static/fonts/montserrat/webfonts/montserrat-latin-600-normal.woff2","fqdn":"service.courrierar24.co","domain":"courrierar24.co","tld":"co"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.326Z","timestamp":1791566189326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"service.courrierar24.co","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 13:22:55 GMT","end":"Wed, 30 Dec 2026 13:22:54 GMT"},"fingerprint":{"sha1":"13:41:18:27:97:74:81:EC:A5:1B:3B:8F:A9:28:EA:AF:C9:24:05:DC","sha256":"7A:57:9E:9D:62:3B:A8:CD:1D:D7:46:12:0F:26:38:5E:DD:3B:C8:3A:E1:51:54:DC:A9:AB:81:F6:CC:EF:65:1D"}}},"request":{"raw":"GET /static/fonts/montserrat/webfonts/montserrat-latin-600-normal.woff2 HTTP/1.1\r\nHost: service.courrierar24.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/static/min/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=600\r\ncontent-type: font/woff2\r\netag: \"eefd60fe502635db5ce81e9dae0b2a542f264860b954701a4f80ea57dc5ab7ce\"\r\nexpires: Fri, 09 Oct 2026 17:26:29 UTC\r\nlast-modified: Thu, 01 Oct 2026 14:01:06 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01M4GTN4T61Z5AEY9MEWNV0Y0Z\r\ncontent-length: 15072\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15072,"size_decoded":15499,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15072, version 1.0","md5":"abb0e70f516579f1d3340707a949f76b","sha1":"a35b9bb416d3cf79d45d7e6c7ac5ae84c57ed9ec","sha256":"9f5f68f23573a4df9d5ce9fdd7c28154b326232e7dc31731a2a2deaa2ab6ca43","sha512":"1801fa5a2c2d06d6b55f08393b7e0d0ecc45bb6ec73af74e73b82ee284978973e1ff3e8a84e18f6437ed72c09c123602f856901ea11209f364019088297b107e","ssdeep":"384:FGR0tf/J6wCBUS8oEPCTQlvTvQSE4W1THGOTWdD8v3:FGup/8H2S8olTqE4W1TH1b","tlshash":"1b62d060471682a1e43862bb26980d7fe25b3e016f20dcf87844548e6cd63f79fe65e7","first_seen":"2023-09-15T19:24:22Z","last_seen":"2026-10-10T19:07:24.438041Z","times_seen":2740,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"service.courrierar24.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-09","alert":"Phishing Block","trigger":"service.courrierar24.co","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bouyguestelecom.fr/static/wbm/assets/hub/img/logo-bouygues-telecom.svg","fqdn":"www.bouyguestelecom.fr","domain":"bouyguestelecom.fr","tld":"fr"},"ip":{"addr":"23.44.32.131","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://service.courrierar24.co/","date":"2026-10-09T17:16:29.354Z","timestamp":1791566189354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.espaceclient.bouyguestelecom.fr","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Sep 2026 00:00:00 GMT","end":"Thu, 11 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"13:44:24:A7:75:FA:9D:AD:FE:54:3D:31:B4:0C:83:D3:36:99:8E:60","sha256":"07:E1:4A:85:50:F6:37:7C:5B:C3:54:E0:8B:D8:04:C1:58:FB:18:8D:A0:48:88:F5:78:ED:C1:75:34:E8:A5:18"}}},"request":{"raw":"GET /static/wbm/assets/hub/img/logo-bouygues-telecom.svg HTTP/1.1\r\nHost: www.bouyguestelecom.fr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://service.courrierar24.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: t6dLqHCHNxsEr+TprvdrI28s9OMILc8Y3X0QkQzBPsTujx9A17G67gyPZljsuK8Q5Z5QNAvq+mM=\r\nx-amz-request-id: 8FTXPMJE0HQN7S7S\r\nlast-modified: Tue, 13 Jul 2021 12:02:33 GMT\r\netag: \"523eb2a09b943cc212a3477ecb3b20b3\"\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=27229\r\ndate: Fri, 09 Oct 2026 17:16:29 GMT\r\ncontent-length: 4225\r\ncontent-security-policy: frame-ancestors 'self' https://*.bouyguestelecom.fr https://bouyguestelecom--c.vf.force.com https://bouyguestelecom.lightning.force.com https://bouyguestelecom.my.salesforce.com;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10801,"size_decoded":4866,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"523eb2a09b943cc212a3477ecb3b20b3","sha1":"4cfee2f538403cabd879412579eeacda169f3b41","sha256":"9a1b47b80d09333ca99268aad0a9e01cd8285173f584d7d3d423ded6566ec4a8","sha512":"83932663983e0873e95ade9154a519c28be2d1dbe91db1b0534eec126eddd31dda1736a29ba49b60ce98478641f6bc993ee5d5dd446c0ecdcde630e376b71986","ssdeep":"192:STpMlkVq1uYuXDOZ6MVgrJTa2nN4mwDFQBC2FQMVFuK8ChaWToDMKjPp:KMCO9uTz3N4hDq2MVNzaWToNV","tlshash":"e422fedd6e9713e8a90087d49d5206b07f1fe0be3fab4bb0c250c731b916869d880c9b","first_seen":"2025-05-17T11:43:39.719812Z","last_seen":"2026-10-09T23:44:45.843886Z","times_seen":15,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":11,"connect":1,"send":0,"wait":12,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}