{"report_id":"ee96c7a9-5c77-4eb2-8746-c3b665bffe8c","version":0,"status":"done","tags":["adobe","phishing"],"date":"2026-08-23T15:55:23Z","url":{"schema":"http","addr":"ccpb.ma/internal/docshared","fqdn":"ccpb.ma","domain":"ccpb.ma","tld":"ma"},"ip":{"addr":"46.105.59.3","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"ccpb.ma/internal/docshared/","fqdn":"ccpb.ma","domain":"ccpb.ma","tld":"ma"},"title":"PDF Viewer","dom":{"size":793933,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (31998)","md5":"a492c36d3e522ed9a5416ca1bb7440e7","sha1":"538ffec2dbbe3a794c9f99cd337f839e6cad0f14","sha256":"1a02a037ae42a17faa75c9bb09d8688673b0a2860d2e7474709840f0f43fdf7a","sha512":"fe1984fe519af8edc82023bc08f1a6fb7baecf49dcaf41104a642299fb5cc34e9da7f126ebef36b51158d1a8b961f0191dea01e4b815e776b0ca3c710ccd329c","ssdeep":"12288:ugLk/VgEH1TWfOLnxAVu39ToJ9VNUzoJsk:uz+EHVWfOTb39TSUze","tlshash":"05f4f1769afb24366e42a56a275f36543f30e057d088ec2c7d4c6294cfeab009933e5d","dom_hash":"domhash94ab29293de521311a0a781a69241ed8","first_seen":"2026-08-23T15:23:31.570522Z","last_seen":"2026-08-23T15:55:25.252437Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ccpb.ma/internal/docshared","fqdn":"ccpb.ma","domain":"ccpb.ma","tld":"ma"},"ip":{"addr":"46.105.59.3","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T15:55:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]},"summary":[{"fqdn":"t3.gstatic.com","ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:15:36Z","last_seen":"2026-08-22T17:57:49.639079Z","alert_count":0,"request_count":1,"received_data":3004,"sent_data":583,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-08-17T18:23:52.170748Z","alert_count":0,"request_count":1,"received_data":15051,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-16T22:53:44.913224Z","alert_count":0,"request_count":2,"received_data":899,"sent_data":1111,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ccpb.ma","ip":{"addr":"46.105.59.3","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-01-17","domain_rank":0,"first_seen":"2026-08-11T23:02:51.280643Z","last_seen":"2026-08-23T15:23:30.380014Z","alert_count":4,"request_count":4,"received_data":594306,"sent_data":1963,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"t1.gstatic.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T22:57:20Z","last_seen":"2026-08-20T21:41:35.450182Z","alert_count":0,"request_count":1,"received_data":1510,"sent_data":582,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"ccpb.ma/internal/docshared/","fqdn":"ccpb.ma","domain":"ccpb.ma","tld":"ma"},"ip":{"addr":"46.105.59.3","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a23e7113c0745d129e2644f68659a1f","sha1":"d64e785ef8eef8864fed37947c6194aa33aae50a","sha256":"bfb558ba04ace6008bf402386ceeec35cfa53f4bcdbdeb8a46b60934e63b2d19","sha512":"7133d688c9703be2a8b20674026762bbf191316fe89bfb59b1b289610128038a571b3a5bf68b11f7006768999ba3b450f4c6e83d8d9d9f4577b084c503ee32fd","ssdeep":"","tlshash":"ad01f2a55ef1153286aa50b71b0b6079292de41713a8cbe4fdcc83188f9f4515372b4f","size":706,"data":"","first_seen":"2026-08-23T15:23:31.57863Z","last_seen":"2026-08-23T15:55:25.274864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ccpb.ma/internal/docshared/","fqdn":"ccpb.ma","domain":"ccpb.ma","tld":"ma"},"ip":{"addr":"46.105.59.3","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"e66eae7ccbb78b67b3b1464ce8fb31fe","sha1":"664fbf6d0e01a52f87129630ac301f0359bcf9b9","sha256":"54f3ccb327783204893c1b457e009c090fb901fca8c23bedc562022ae6dcc758","sha512":"3ebba47056b2b2c3bdd19d3ebfd2607ed9a7a8e4f126f6b340ebe6325b8d16e541835928ea22a5a5b4564245c06fce11ff39e35af22cc1a573b3e469b41e5525","ssdeep":"","tlshash":"89e01d5418e7e830117b50264b47660336467e370305b530778d4f7b9fd85abc9b66ed","size":324,"data":"","first_seen":"2026-08-23T15:23:31.579739Z","last_seen":"2026-08-23T15:55:25.276635Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ccpb.ma/internal/docshared/","fqdn":"ccpb.ma","domain":"ccpb.ma","tld":"ma"},"ip":{"addr":"46.105.59.3","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"e111087ef7fd9217af2cbdfb469edc62","sha1":"b898234db5f37336b2ac1f5c7c10748f3325f7b8","sha256":"cb00de630d2b617c7f27cfe6f39d10c3ac2e89ab14ca8a9dca6d431a984c3863","sha512":"604f6a259b26005505854319f4b9d55e1332192e4e986c5cabd7ed7d4bc0eb96575c5d6a479fa10ea24aa210ceed347fa5a17e8e537af0c902f9120b062a6a48","ssdeep":"1536:ggWVo3pwht+AaoZFP08VKSVQhvY8XO3zGlBw01fwuSTMuXQm2CIqXsg035Ro1e2K:JwfzQdXXODGlBw0HSnJIqhIRUR6dtXXt","tlshash":"daf3cf392aba20378923753a274f6a457f30f4472188ec247e5e53409fe5d10966bfee","size":166200,"data":"","first_seen":"2026-08-23T15:23:31.580678Z","last_seen":"2026-08-23T15:55:25.278054Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"DOM Content Loaded - Initializing button handlers","filename":"https://ccpb.ma/internal/docshared/","line_number":3400,"column_number":17},{"level":"log","text":"Found buttons:1","filename":"https://ccpb.ma/internal/docshared/","line_number":3403,"column_number":17},{"level":"log","text":"?? Initializing application...","filename":"https://ccpb.ma/internal/docshared/","line_number":3338,"column_number":15},{"level":"log","text":"Raw User Agent:mozilla/5.0 (windows nt 10.0; win64; x64; rv:134.0) gecko/20100101 firefox/134.0","filename":"https://ccpb.ma/internal/docshared/","line_number":2951,"column_number":15},{"level":"log","text":"? Detected Browser: Mozilla Firefox (Class: browser-firefox)","filename":"https://ccpb.ma/internal/docshared/","line_number":3084,"column_number":15},{"level":"log","text":"?? Applied browser class:browser-firefox","filename":"https://ccpb.ma/internal/docshared/","line_number":3383,"column_number":17},{"level":"log","text":"?? Detected Color Scheme: Light Mode (Class: light-theme)","filename":"https://ccpb.ma/internal/docshared/","line_number":3125,"column_number":15},{"level":"log","text":"?? Applied theme class:light-theme","filename":"https://ccpb.ma/internal/docshared/","line_number":3387,"column_number":17},{"level":"log","text":"?? Browser window classes:modal-content browser-firefox dark-theme light-theme","filename":"https://ccpb.ma/internal/docshared/","line_number":3389,"column_number":17},{"level":"log","text":"? Theme change listeners activated","filename":"https://ccpb.ma/internal/docshared/","line_number":3151,"column_number":19},{"level":"log","text":"? Application initialized successfully","filename":"https://ccpb.ma/internal/docshared/","line_number":3392,"column_number":17},{"level":"log","text":"? PDF viewer elements found, initializing...","filename":"https://ccpb.ma/internal/docshared/","line_number":3759,"column_number":17},{"level":"log","text":"?? Initializing PDF viewer with3base64 images...","filename":"https://ccpb.ma/internal/docshared/","line_number":3807,"column_number":19},{"level":"log","text":"?? Creating3thumbnails...","filename":"https://ccpb.ma/internal/docshared/","line_number":3832,"column_number":19},{"level":"log","text":"?? Sidebar populated","filename":"https://ccpb.ma/internal/docshared/","line_number":3814,"column_number":19},{"level":"log","text":"? Preloading images...","filename":"https://ccpb.ma/internal/docshared/","line_number":3817,"column_number":19},{"level":"log","text":"? PDF viewer initialized with3images","filename":"https://ccpb.ma/internal/docshared/","line_number":3821,"column_number":21},{"level":"log","text":"?? Started automatic slideshow (4s interval)","filename":"https://ccpb.ma/internal/docshared/","line_number":3824,"column_number":23},{"level":"log","text":"? Thumbnail1loaded successfully","filename":"https://ccpb.ma/internal/docshared/","line_number":3854,"column_number":23},{"level":"log","text":"? Thumbnail2loaded successfully","filename":"https://ccpb.ma/internal/docshared/","line_number":3854,"column_number":23},{"level":"log","text":"? Thumbnail3loaded successfully","filename":"https://ccpb.ma/internal/docshared/","line_number":3854,"column_number":23},{"level":"log","text":"? Loading screen hidden","filename":"https://ccpb.ma/internal/docshared/","line_number":3345,"column_number":19}]},"http":[{"url":{"schema":"https","addr":"ccpb.ma/internal/docshared/m/js/utils.js","fqdn":"ccpb.ma","domain":"ccpb.ma","tld":"ma"},"ip":{"addr":"46.105.59.3","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ccpb.ma/internal/docshared/","date":"2026-08-23T15:54:55.589Z","timestamp":1787500495589,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ccpb.ma","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 08:18:48 GMT","end":"Sun, 27 Sep 2026 08:18:47 GMT"},"fingerprint":{"sha1":"DF:7A:B9:0C:8B:3C:CC:12:45:B2:C9:69:AF:34:3D:B2:6A:AA:52:7E","sha256":"5F:31:26:51:00:2D:D8:0A:85:1D:87:90:E6:52:A2:82:20:46:6A:2D:E3:C2:92:C0:34:2C:EE:A6:E4:A6:A0:F3"}}},"request":{"raw":"GET /internal/docshared/m/js/utils.js HTTP/1.1\r\nHost: ccpb.ma\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ccpb.ma/internal/docshared/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 23 Aug 2026 15:54:54 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-23T18:09:52.186606Z","times_seen":58950,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"t1.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=google.com\u0026size=32","fqdn":"t1.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ccpb.ma/internal/docshared/","date":"2026-08-23T15:54:55.958Z","timestamp":1787500495958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://google.com\u0026size=32 HTTP/1.1\r\nHost: t1.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ccpb.ma/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-location: https://www.google.com/images/branding/product/1x/gsa_android_144dp.png\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 639\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 12:30:17 GMT\r\nexpires: Thu, 27 Aug 2026 12:30:17 GMT\r\ncache-control: public, max-age=604800\r\nage: 271479\r\nlast-modified: Sat, 04 Jul 2026 23:16:08 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":639,"size_decoded":1510,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"5a6fd7b92e134a10bc9101c94fc866ee","sha1":"cca67cc699afd301ad9064b44f3593e1fc9221bd","sha256":"0504d5e09ee20d436e733ae1d5f545a3e4fcad66889cf98670512ea908a9ad8c","sha512":"94e2910594f69d7af86309d2a71d9c23160b895e35b70530134faba8914d131e21f8eb4ece43e0fd7d47a0edce64a4687575769d9cd8cb7d06806cdefda04aa5","ssdeep":"","tlshash":"8cf02398d9d0b476dcfd433f82924a8ef99a0c552a1b2da9c60888345900112e4e2613","first_seen":"2026-04-22T08:57:47.536393Z","last_seen":"2026-08-23T15:55:25.265416Z","times_seen":161,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":16,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=firefox.com\u0026size=32","fqdn":"t3.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ccpb.ma/internal/docshared/","date":"2026-08-23T15:54:55.968Z","timestamp":1787500495968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://firefox.com\u0026size=32 HTTP/1.1\r\nHost: t3.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ccpb.ma/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-location: https://www.firefox.com/media/img/favicons/firefox/browser/favicon.f093404c0135.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 2120\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Aug 2026 04:27:35 GMT\r\nexpires: Fri, 28 Aug 2026 04:27:35 GMT\r\ncache-control: public, max-age=604800\r\nage: 214041\r\nlast-modified: Mon, 21 Oct 2019 21:24:53 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2120,"size_decoded":3004,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e67fc1084abebeebc0b022264ad39a12","sha1":"ca7893888d27c6bd8b666bd8363bc77612854f90","sha256":"9008abbdc6ebe0a8b9f92c79f32c76db036c55e20b7dd10269a061e9b6221fef","sha512":"69d755f56454566e3a0f6599a6fb0f957636052b018b60575269c5587cda2c7833b2e844424650779c54e006e001e680c3267b0ae5280f3ba3e9a370edfa1d63","ssdeep":"","tlshash":"8a41e996be792c9034ce60e9d3a1079479fd6ce056226464886bdc2b2eff81021c1b87","first_seen":"2026-02-22T08:42:21.453196Z","last_seen":"2026-08-23T15:55:25.266341Z","times_seen":182,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":16,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ccpb.ma/internal/docshared","fqdn":"ccpb.ma","domain":"ccpb.ma","tld":"ma"},"ip":{"addr":"46.105.59.3","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T15:54:55.226Z","timestamp":1787500495226,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ccpb.ma","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 08:18:48 GMT","end":"Sun, 27 Sep 2026 08:18:47 GMT"},"fingerprint":{"sha1":"DF:7A:B9:0C:8B:3C:CC:12:45:B2:C9:69:AF:34:3D:B2:6A:AA:52:7E","sha256":"5F:31:26:51:00:2D:D8:0A:85:1D:87:90:E6:52:A2:82:20:46:6A:2D:E3:C2:92:C0:34:2C:EE:A6:E4:A6:A0:F3"}}},"request":{"raw":"GET /internal/docshared HTTP/1.1\r\nHost: ccpb.ma\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sun, 23 Aug 2026 15:54:54 GMT\r\nServer: Apache\r\nLocation: https://ccpb.ma/internal/docshared/\r\nContent-Length: 283\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":4,"connect":31,"send":0,"wait":31,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ccpb.ma/internal/docshared/","fqdn":"ccpb.ma","domain":"ccpb.ma","tld":"ma"},"ip":{"addr":"46.105.59.3","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T15:54:55.374Z","timestamp":1787500495374,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ccpb.ma","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 08:18:48 GMT","end":"Sun, 27 Sep 2026 08:18:47 GMT"},"fingerprint":{"sha1":"DF:7A:B9:0C:8B:3C:CC:12:45:B2:C9:69:AF:34:3D:B2:6A:AA:52:7E","sha256":"5F:31:26:51:00:2D:D8:0A:85:1D:87:90:E6:52:A2:82:20:46:6A:2D:E3:C2:92:C0:34:2C:EE:A6:E4:A6:A0:F3"}}},"request":{"raw":"GET /internal/docshared/ HTTP/1.1\r\nHost: ccpb.ma\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 23 Aug 2026 15:54:54 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 18 Aug 2026 16:13:53 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: br\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":592647,"size_decoded":332504,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (31997)","md5":"d3deecb9881367c4b89123572eea67ee","sha1":"fa3002c4363994f9630cd288ba9b2356d09102e5","sha256":"63cf5eac4a00bb484946ee7885d9f140e9cee6b6264e17194fa8a213b45e2081","sha512":"cc35e87787c97b8e0d58a8520f7f235eef03c0d3942c70a77d0beb310342c1a9b0555d79b2db409980823bc211f8bf20d0448eacff691ecd2a846bb894171b3c","ssdeep":"6144:Rcr63P7yVtTdyLkH7jVgEH1Tszg2rWS4wAB3sGnGf8d97MuIVtj3X658MwDEBwrF:0gLk/VgEH1TWfOLnxAVZ3CzoJs4","tlshash":"bac4e07699bb24326e53906a6b6f32143f34e053c184ec5c394ca3a4cfe6b148977b9d","first_seen":"2026-08-23T15:23:31.577021Z","last_seen":"2026-08-23T15:55:25.268896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/8/87/Adobe_logo.jpg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ccpb.ma/internal/docshared/","date":"2026-08-23T15:54:55.787Z","timestamp":1787500495787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 05:19:15 GMT","end":"Mon, 09 Nov 2026 05:19:14 GMT"},"fingerprint":{"sha1":"52:17:30:E7:B5:4D:78:C3:1A:27:27:36:2B:27:EF:C7:29:CE:9C:13","sha256":"AE:63:EF:37:2A:14:17:F8:1E:87:39:CA:5F:A2:71:13:FE:DF:F3:0E:88:8C:B9:2F:7D:A4:27:15:B3:2F:A8:CE"}}},"request":{"raw":"GET /wikipedia/commons/8/87/Adobe_logo.jpg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ccpb.ma/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\nx-object-meta-sha1base36: 6cgx5xlv79w3gqs51oxdj1hgt2ddcwf\r\nlast-modified: Thu, 06 Jun 2019 14:28:05 GMT\r\ncontent-length: 13011\r\ndate: Sun, 23 Aug 2026 04:38:48 GMT\r\nx-ratelimit-limit: 600000, 600000;w=60\r\nx-ratelimit-remaining: 599999\r\nx-ratelimit-reset: 12\r\nserver: envoy\r\netag: e911dc879e3c0297b050d9bc5e58336d\r\nage: 40568\r\naccept-ranges: bytes\r\nx-cache: cp3077 hit, cp3077 hit/2\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3077\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 195.64.118.152\r\nx-content-type-options: nosniff\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=kLvkf2C4sFBadWb4MPcQ-wPFAAAAAFvdfhc_8sqjWP_uCmrXMOKINWFiWOj8BGly;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 23 Aug 2027 00:00:00 GMT\r\nx-request-id: 53afe1ec-c332-45aa-93dd-f611e38f87d8\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"WMF-Uniq","value":"kLvkf2C4sFBadWb4MPcQ-wPFAAAAAFvdfhc_8sqjWP_uCmrXMOKINWFiWOj8BGly","quoted":false,"path":"/","domain":"upload.wikimedia.org","expires":"2027-08-23T00:00:00Z","raw_expires":"Mon, 23 Aug 2027 00:00:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"WMF-Uniq=kLvkf2C4sFBadWb4MPcQ-wPFAAAAAFvdfhc_8sqjWP_uCmrXMOKINWFiWOj8BGly;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 23 Aug 2027 00:00:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13011,"size_decoded":15051,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 242x221, components 3","md5":"e911dc879e3c0297b050d9bc5e58336d","sha1":"36549135e895318a7f5560131025b960f7f9c78f","sha256":"3fb18c2400a483ec9842b194dc61db8a2b2ec3a0137d08c39dd0f31c09607465","sha512":"07b2969a11dae412d81f74f5fb21e6d9f2389ac9d4d536aef81a884c62f4d779a4f23033b84c3e8e945fa0296d2209390642fdb1a27f1aef11156886c5940aa1","ssdeep":"192:0kBk0O65HAa7jtZYUFe86BpDvd1UedBwaGH/q:Xa/65f/HcXjvj5daaGHC","tlshash":"15423a1b28055dc0d89f6cb12d7a46cda00a5f46f4902e1f31acbda3bb6c6431d9e682","first_seen":"2026-08-23T15:23:31.574961Z","last_seen":"2026-08-23T15:55:25.272719Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":2,"connect":21,"send":0,"wait":37,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=firefox.com\u0026sz=32","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ccpb.ma/internal/docshared/","date":"2026-08-23T15:54:55.789Z","timestamp":1787500495789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:14 GMT","end":"Wed, 28 Oct 2026 20:42:13 GMT"},"fingerprint":{"sha1":"9E:E4:0B:D8:22:18:95:CA:F3:60:D0:A9:F5:51:6A:A9:AA:64:B5:C2","sha256":"04:A2:FD:09:AF:5F:A4:87:31:AC:C8:12:2A:13:F3:C5:AD:27:8F:5B:96:8F:50:1C:BA:45:10:A3:9D:C8:20:42"}}},"request":{"raw":"GET /s2/favicons?domain=firefox.com\u0026sz=32 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ccpb.ma/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nlocation: https://t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://firefox.com\u0026size=32\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Sun, 23 Aug 2026 15:54:55 GMT\r\nexpires: Sun, 23 Aug 2026 16:24:55 GMT\r\ncache-control: public, max-age=1800\r\nserver: sffe\r\ncontent-length: 331\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ccpb.ma/favicon.ico","fqdn":"ccpb.ma","domain":"ccpb.ma","tld":"ma"},"ip":{"addr":"46.105.59.3","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ccpb.ma/internal/docshared/","date":"2026-08-23T15:54:55.912Z","timestamp":1787500495912,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ccpb.ma","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Jun 2026 08:18:48 GMT","end":"Sun, 27 Sep 2026 08:18:47 GMT"},"fingerprint":{"sha1":"DF:7A:B9:0C:8B:3C:CC:12:45:B2:C9:69:AF:34:3D:B2:6A:AA:52:7E","sha256":"5F:31:26:51:00:2D:D8:0A:85:1D:87:90:E6:52:A2:82:20:46:6A:2D:E3:C2:92:C0:34:2C:EE:A6:E4:A6:A0:F3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ccpb.ma\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ccpb.ma/internal/docshared/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 23 Aug 2026 15:54:55 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":555,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-23T18:09:52.186606Z","times_seen":58950,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=google.com\u0026sz=32","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.153.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ccpb.ma/internal/docshared/","date":"2026-08-23T15:54:55.790Z","timestamp":1787500495790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:14 GMT","end":"Wed, 28 Oct 2026 20:42:13 GMT"},"fingerprint":{"sha1":"9E:E4:0B:D8:22:18:95:CA:F3:60:D0:A9:F5:51:6A:A9:AA:64:B5:C2","sha256":"04:A2:FD:09:AF:5F:A4:87:31:AC:C8:12:2A:13:F3:C5:AD:27:8F:5B:96:8F:50:1C:BA:45:10:A3:9D:C8:20:42"}}},"request":{"raw":"GET /s2/favicons?domain=google.com\u0026sz=32 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ccpb.ma/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nlocation: https://t1.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://google.com\u0026size=32\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 330\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 15:44:41 GMT\r\nexpires: Sun, 23 Aug 2026 16:14:41 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 614\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T18:40:35.8811Z","times_seen":18059623,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}