{"report_id":"fe5b614c-e640-4276-875b-adef1d9541b1","version":0,"status":"done","tags":["societe_generale","financial","phishing"],"date":"2026-08-08T01:06:22Z","url":{"schema":"http","addr":"optinfs.optimalinfos.com/pbfr","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":0,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"title":"SG | Connexion","dom":{"size":34702,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2652)","md5":"0d88d244072f276d64ec9efd569c6f1d","sha1":"dd960bcf8a31f0f298a4ec1f9290669ac52e06e3","sha256":"10938711b2b86b22ffb908247c937506690fc78b2e2f26bd6fb10facbcaa0590","sha512":"630a4d9d2ca6ea2582ff00d86d76081b532cacd4caa29e87727562e56960b814a007479faecde592ba8ef57b74b4f186eb25ecfe83d987f0f64278491d52f291","ssdeep":"768:TQhamE4QRPi3eVmzFDCaM6yvX+AWVd9EL79ai:khamE4QRnqFDSPcVd9EL79ai","tlshash":"4ff2ea60a5e1043391a397d5ba676f1e7ea2c21bd3070542b17c5ad99fe3cd0cd87e28","dom_hash":"domhash4a0211238adf2b03341461dcf0fc5788","first_seen":"2026-08-07T23:58:39.74586Z","last_seen":"2026-08-08T01:06:25.925195Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"optinfs.optimalinfos.com/pbfr","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":0,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-12T01:06:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]},"summary":[{"fqdn":"optinfs.optimalinfos.com","ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-08-07T23:58:31.950485Z","last_seen":"2026-08-07T23:58:31.950485Z","alert_count":30,"request_count":30,"received_data":3004407,"sent_data":15772,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"Function","is_inline":false,"md5":"56cd57cab9aa2700068ff79bb038a7a5","sha1":"f8a30016cb976300910d908d278a66118c7df2fc","sha256":"73724ae008cf4909631ffebcb26867d9486a7ad898060790619926f9499fc92a","sha512":"9ea47228d0f8eff590f502a81a8cf5f21c9607d7b15552992d557ed0a3ee7b75c1267bb0d7f0aede4a3132bb021d7f0687aca5e4cab01579640fe344ef289b64","ssdeep":"","tlshash":"b2f081704146d6b701f7347036b4a29b11c9c11dddce6c124af995f03bc6fd0e458744","size":601,"data":"","first_seen":"2023-04-13T09:04:01Z","last_seen":"2026-08-08T01:06:25.955611Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"eval","is_inline":false,"md5":"81506f6c9b74db893b121a759da430d7","sha1":"2d4226d3b0de0217029bc6113d7489f398b5a4be","sha256":"a49959becff3155c2f2c2ba4684dfecdf77e055678880cbddac3c81eba11fe3c","sha512":"51f7ffaab6bf0e18ad92df0ce5e5e9e3e3c3fcc5310353d7765f2077026b437a6eb8f9e21bfd42f39ce7de0a81adec459cff7ed8a3ff3d7369e0c3943134a796","ssdeep":"","tlshash":"9a11ef03b061d0f044b6b36bae7bd284d02272332d42d27eb5114890673285375eef8d","size":1016,"data":"","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-08-08T01:06:25.956286Z","times_seen":542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf5a9e917e6ac6d2532bb17ea53ce577","sha1":"5dee44edab04a9720eea1b7a4baf6800291d8ff8","sha256":"93f0cb906a2e6d80da326620c8571733bdcc1c8160416e023764c977be408bfa","sha512":"b93a636cfdac1083c1653565fa3ec2d032750131cf3fc130e4d7abbf28818efa55f198286483dc099333229e08722037423ab55bc755520347ffcce16ef38f47","ssdeep":"","tlshash":"6ad0a708b3f555d040a331e70e7b8146fa6a529262081d1431bc29c47fa4fd411bb95d","size":239,"data":"","first_seen":"2026-06-17T12:13:46.229271Z","last_seen":"2026-08-08T01:06:25.957013Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e33999eb3fb250ab1153a12d16d03b3","sha1":"5c00c7f0663f0e7a0359e5fe0296f54b000feec5","sha256":"59cefabf9d52d14418716e66562584004ad3945ad912dbf658ac7cee349030eb","sha512":"9ad235c360362b396530d9faf3deeead631ad96858266e40039cc66fea853c96d6f92aa34039a0643042cd8c57c73b73714475540ec62d01cb8d8a3ee352a5e3","ssdeep":"","tlshash":"97f0276afa218b3712b523bc637df897c095545114ca0e1b21b000c4dafbf6010bd680","size":480,"data":"","first_seen":"2026-06-17T12:13:46.249662Z","last_seen":"2026-08-08T01:06:25.957773Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"b7f1d8967fea5ff3935ea08fd4be8229","sha1":"d41c2b5ef4e63e1cf3eed3b1612fe52de079b6f4","sha256":"3b4548b006ff847a4f446bd7b0f8ecfb94d7cbe9201c9e514a2f0146fcb5f6fc","sha512":"0b25217ec6c42cc331e33b60fafe896e2386cf7e31933016a580d3d41555833d6f006bcfe307ab9d0d628ccb38a8669650681cf8a8bb8dd5fc0ab9c6c9d1b0d4","ssdeep":"","tlshash":"b1e0c2d3bba3043547de29ba0d7e875eb8bcc4021d0d654da81880a0a0b4dbe817b994","size":297,"data":"","first_seen":"2026-06-17T12:13:46.278256Z","last_seen":"2026-08-08T01:06:25.958525Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"Function","is_inline":false,"md5":"7f439c6c2a49cdb2f74f78ba119ce489","sha1":"8beb3121045e0506df9a71c51b0c6a4d76701c68","sha256":"e140fb816df49620a4efeb7c9ee66c30b4f76fd0cf6e248c3cc3997ef6fbe693","sha512":"7042f08536efef46bbaf24c280ec3c00e31a6269e5b05ba111c85deca93ecde34efc8b7027beb3526dc3017e5969443af88b1e39c3c3ab59d2f21aad00e4861d","ssdeep":"","tlshash":"ffe026f132827a3381d77171180b812bb8364c938ec85800afb624e03ba9cd50b4fe5c","size":348,"data":"","first_seen":"2023-04-13T09:04:01Z","last_seen":"2026-08-08T01:06:25.959527Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/jquery2.js.download","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f86b7a0e560edb5951576cf8884153e6","sha1":"e5b4c5b95c79e6e42ef676ed77986db3f85223ab","sha256":"74a340d2c31205e840515065e739e3d08fa169bc8fa52c66db838dbf749103c1","sha512":"cd59cfb0971dd9f675ddfe8bcd4a18d8960fb1041b6453c6c77a1f30478753f4e12c9b1576049c87a419e3edadb16bb243f5a5abfc6e8e58f028b49802e54748","ssdeep":"1536:7AcNhEyjjTikEJO4edXXe9J578go6MWXqcVhzLyB4Lw13sh2bTQKmPNsvDU8Cur:bxcq0hzLZwpsYbIyvDU8Cur","tlshash":"8f63c5d9b2d67052db7b30b850bf510bf07a98dab84c8d60e058c8e47d78a89417bf2d","size":70472,"data":"","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-08-08T01:06:25.954803Z","times_seen":529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/jquery.js.download","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-08T15:12:45.864762Z","times_seen":138587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/js.js.download","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e6c70c409456c23a09d9adbce8d2e80","sha1":"0f50b6f4f4555c31e8f832b446cda4996acb4460","sha256":"3957ed7a4d5b5f5c36fe0872fbc2f619b8d2d0094b134dd65d1ebd6f3352847b","sha512":"b7aaa7a6579775699cee8dc616fed6a96c508dee589cea514d84ab4a56c9a8ca4ebe8b825ea27900d64aa8c681551571be599cca755c533fad981a9b3e8d2578","ssdeep":"12288:Sp3lWGEqpc6BqqTJj9gbOALoYtU4GpVmFkha27y6QVKAxeHk9Tr+ozpVFYotBUIi:5U4G+FT/FYNV6HeBQldhjoy06DjAZN","tlshash":"8e45824fba902466c173f33aa96bd805f976072f11944a077d7c41d91f328a493bafe8","size":1264576,"data":"","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-08-08T01:06:25.960638Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-08-08T16:42:47.079853Z","times_seen":804942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"Function","is_inline":false,"md5":"17d527f0bf9fc871c030bdd3baa73f72","sha1":"e53ccb8d239a7286525b686f3da6d65b462e6ea2","sha256":"93998249270c96f5c32ba2c8c0baffc43032b571e0684ec9c55d8d7d01f64bc9","sha512":"05b0a5b305bcbab57a67120fb27a2f15dbe4812c7917b4c1aef7c70cde03f237639c65b92a84e1ddced8f0eca1f6f06085ab1e32f708a79a023f7b7deafd4f6a","ssdeep":"","tlshash":"0dc080f431867532415775600407556bb4794d534c885800d9ba54e02b55ce5171ee1c","size":171,"data":"","first_seen":"2023-04-13T09:04:01Z","last_seen":"2026-08-08T01:06:25.962272Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/rules.js.download","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd884ffdf1f759fbdeaae54b636288d4","sha1":"450ea313a0b4b250024abd0935c1f59617841134","sha256":"f0f8ce50e148b374b7b9b29180824007970478e81ce52669d531a669d9c4c34d","sha512":"5f1a25efe428205ea2a0091fbd80c6b43ac19e84b59cc67f37e011b49782b9ee30281ea947a60a15b0bf261d5f54297209982e2fa7d67c09964ae1e1747a7647","ssdeep":"","tlshash":"f8f09e1eb4132234af7b1ed77ffa06c4ba642e01145151d4baf958425c31e40013badc","size":488,"data":"","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-08-08T01:06:25.927035Z","times_seen":542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/rules.js.download","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.186Z","timestamp":1786151154186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/rules.js.download HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 248\r\nlast-modified: Tue, 18 Aug 2020 22:43:14 GMT\r\netag: \"1e8-5ad2e9cc7e480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":488,"size_decoded":602,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"cd884ffdf1f759fbdeaae54b636288d4","sha1":"450ea313a0b4b250024abd0935c1f59617841134","sha256":"f0f8ce50e148b374b7b9b29180824007970478e81ce52669d531a669d9c4c34d","sha512":"5f1a25efe428205ea2a0091fbd80c6b43ac19e84b59cc67f37e011b49782b9ee30281ea947a60a15b0bf261d5f54297209982e2fa7d67c09964ae1e1747a7647","ssdeep":"","tlshash":"f8f09e1eb4132234af7b1ed77ffa06c4ba642e01145151d4baf958425c31e40013badc","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-08-08T01:06:25.927035Z","times_seen":542,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/img/spriteV4.png","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.028Z","timestamp":1786151155028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/img/spriteV4.png HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 56012\r\nlast-modified: Tue, 18 Aug 2020 23:27:14 GMT\r\netag: \"5f3c63d2-dacc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56012,"size_decoded":56358,"mime_type":"image/png","magic":"PNG image data, 880 x 650, 8-bit/color RGBA, non-interlaced","md5":"2489b1de4b742de1d025c2751296143e","sha1":"ca790ae20b4603ce6595ab1a0384dd217105306c","sha256":"fdffcd1a92a88cf374901faf2ec466c6d16c0baa8b1f92426a24424743b65ab4","sha512":"4097d07c2fde17c91234907e948bb809edf50bf1baa292144a6bf8b52981e88822bfb412800d52d854cb84210f80251a69ac474d7d4fbf7b94113cd5a3caf87e","ssdeep":"1536:X7bLuYkUivAHae/agJmt5LQOm527heiMiEnevJ96QeC/:X7+Rnvqt/Tk0O3hfEevL6M","tlshash":"fd43f1c6cb2ad9bbc8d7c5f0929d33298ae650424bd99608e308f0394c74fa0751d7d9","first_seen":"2023-05-02T14:33:14Z","last_seen":"2026-08-08T01:06:25.930469Z","times_seen":541,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-08T01:05:53.835Z","timestamp":1786151153835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/ HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 8700\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":35430,"size_decoded":8942,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2652), with CRLF line terminators","md5":"2a9ff6e8f7e313b77a7f7db64332c46e","sha1":"01326378daabe1707649934ec0aa45458068a676","sha256":"5b37e6f4974f9d4fbadbf6967096c15350e098682e45fafb961e64fff92fa3a9","sha512":"851ab5b796b7a537b6ad4f1f607afc3c14e7c9e3a3a18c76657cf1001ca9009a44d1f9b282131c7ad88855699be94dc682ca3e172a7e8936dc1a23ec47b01ad1","ssdeep":"768:MIruKi3ekmDyg2HaNLv1cTLhVd9EL79aE:lruTm5226BVd9EL79aE","tlshash":"9bf29661a9c10427917387d5fa366f1dfea2c21bd3070542717c67ab6ff2c909e87a28","first_seen":"2026-08-08T01:06:25.9318Z","last_seen":"2026-08-08T01:06:25.9318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/gen_ui.png","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.198Z","timestamp":1786151154198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/gen_ui.png HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 6380\r\nlast-modified: Tue, 18 Aug 2020 22:43:14 GMT\r\netag: \"5f3c5982-18ec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6380,"size_decoded":6725,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"f5f55947733314117f1109f93f826b5f","sha1":"394e87fcb82200b9c108182bdc761dc6aa016467","sha256":"c4763204659e2a150da0e4f784da55eff7c77ae08b0c4fe9156a832093fb90fb","sha512":"a254a89f0ce6adc780c7fec6cd2d2e72977bdc995eccb73e0b2de1a46fb50feaf1e1a0f4610d890b16a9c13f3c6c6a930e2d121c6cbd611a0a552df5b5c7db6c","ssdeep":"192:mLbZdHwQIr7YVwA7Cc+iTNp83bHs6D30dbBTEOCAHH8VpPtZp:m/ZVOr7WwA7Cc+ippZ6T0d1TEhAGpx","tlshash":"63d17ee87be608413ca250e18dcf9c4d849e16426f1f8a10a18aa367b93e57fa466375","first_seen":"2023-05-02T14:33:13Z","last_seen":"2026-08-08T01:06:25.935083Z","times_seen":532,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/print_20190320190559.min.css","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.656Z","timestamp":1786151154656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/print_20190320190559.min.css HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2020 22:43:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f3c5982-bfb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3067,"size_decoded":1222,"mime_type":"text/css","magic":"ASCII text, with very long lines (3067), with no line terminators","md5":"e4d358e525d052a0377f57af7a5f5a82","sha1":"f1dc2890a644a2bd2daba774933381739698c036","sha256":"cbf2f9788fa5b22dd4c4428843fdd3ea68595db536cf347517da7d048d3bedcf","sha512":"37a91842671342b11624792a76c8d710f431d0f9ff2a0d1607b20204982bff05673f1f9d3e2de8e696093e76bd87fefe0fa7b5370b234d8c81ef1be9ec595cbb","ssdeep":"","tlshash":"f551df59b1ea622b14cb853e7877e1ea1279c33601d6048a85f28d4f9710cf41bdbc1a","first_seen":"2023-04-06T19:55:51Z","last_seen":"2026-08-08T01:06:25.936775Z","times_seen":605,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/fonts/sourcesanspro-regular.eot","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.024Z","timestamp":1786151155024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/fonts/sourcesanspro-regular.eot HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 05 Aug 2026 12:49:52 GMT\r\netag: W/\"b52-6584c35230d44\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2898,"size_decoded":1633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-08T11:31:43.778737Z","times_seen":7451,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/index_pri_20201013141424.min.css","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.177Z","timestamp":1786151154177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/index_pri_20201013141424.min.css HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 05 Jun 2021 23:52:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60bc0e36-3655e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":222558,"size_decoded":33985,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"23ca09657029cb02397aa2af5b812bb8","sha1":"2dbf5d4fd91d979b3d26e65e064f155b17cb4ff5","sha256":"ffb0158cdc267512932acd22b13aa4f0df1652290faa987148d69f923b6cb797","sha512":"0b44b684592dda37475dc135164b2efe7a1657496921700d13a69656613f97ff88bd0682cdc7924e96ace89610696c33d6e02d269278af2576834a9c0c00e57a","ssdeep":"768:tgNPqzzpCjaRYFMDEsrh2SiH4i+pq4QnUBE/ah7OHFL+gC/haCj9uquEVfbnVW1G:rDFHkq8URed5CSuH21SP","tlshash":"4b24831b9d51211ca027870aeae397dd03348367b2924fafe257bd559bcb2ca1072f49","first_seen":"2023-04-10T20:04:27Z","last_seen":"2026-08-08T01:06:25.940116Z","times_seen":327,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/logo-sg-seul.svg","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.201Z","timestamp":1786151154201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/logo-sg-seul.svg HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 18 Aug 2020 22:43:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f3c5982-be2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3042,"size_decoded":1797,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4905efc552b898322c256cb4d4f55c3","sha1":"6ca6d615b2ebe329819a0338879c1d206ad0b90b","sha256":"4d5f7f9cf24e66420cd0f39be3d181b4566ff8dcc8e699731c88787e511befd3","sha512":"db608235b2a73286066e0540300a8356f636142f167fc97a5065d5579b241730681c6bbcefc460171464c4427cac92b39deb40d99accfe3e684c552fcf639109","ssdeep":"","tlshash":"d85153d166a147d494b90fa8fb3e54d95b1b30f75d8281c4f23caa256bd2e883946e04","first_seen":"2023-05-02T14:33:13Z","last_seen":"2026-08-08T01:06:25.941647Z","times_seen":1175,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/img/new_sprite.png","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.027Z","timestamp":1786151155027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/img/new_sprite.png HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 9961\r\nlast-modified: Tue, 18 Aug 2020 23:28:26 GMT\r\netag: \"5f3c641a-26e9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9961,"size_decoded":10306,"mime_type":"image/png","magic":"PNG image data, 312 x 104, 8-bit/color RGBA, non-interlaced","md5":"675d3d69bb78ed155d9d443bef4cccd8","sha1":"8266846da238de6218a75a11744f35f821baff74","sha256":"0d477834d11f75ff989d2b6bfbcbaaed80a8e4f8efe65569f4cee2ad603a73af","sha512":"c2bb8a576d779c3778bb928607d4e9aef820a3201b2cfc7babd5532ece9b0cfb231e99a941f10f95cc813955f052633c90bac730338458a58887e0208b9f2121","ssdeep":"192:c/zR4FEOSePjuQH+bk2QV9KiD8x625qcnag5W8koxHBJ4syhwBdcht:cbRUzNtCuEiIx6YnZZVGs4Odcht","tlshash":"f522b08477052602d1a9ddf2a8982479d7a07b67cc939c2f36cf944815f52d05c359df","first_seen":"2023-05-02T14:33:14Z","last_seen":"2026-08-08T01:06:25.942532Z","times_seen":717,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/fonts/sourcesanspro-semibold.eot","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.043Z","timestamp":1786151155043,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/fonts/sourcesanspro-semibold.eot HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 05 Aug 2026 12:49:52 GMT\r\netag: W/\"b52-6584c35230d44\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":1633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-08T11:31:43.778737Z","times_seen":7451,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/spec56_btn_gsm_all_gcd_20190320190559.min.css","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.179Z","timestamp":1786151154179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/spec56_btn_gsm_all_gcd_20190320190559.min.css HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 924\r\nlast-modified: Tue, 18 Aug 2020 22:43:14 GMT\r\netag: \"5f3c5982-39c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":924,"size_decoded":1266,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"eabaf0aaf10e39b24e4bc7c25d2e7ec8","sha1":"d0e48a9cdb4d870b510d88cdfc325a2614071327","sha256":"31525381d30528a71a4c4419b0ee495b4053428b061e75ac0e9556b00d56d1e4","sha512":"62e0e9ec572c5e7c8a3116d3cb0acf30cd9a66a68efaf46eedfaef96504a55bf725996cb7a01f6c9f89e601f11e844a0bce3af2e8082dcd696f68717818366a0","ssdeep":"","tlshash":"b2110a123612a93a4bb1ce6f93d1c183f0154fef0a8a933b378213190fa05351e22ebd","first_seen":"2023-04-13T09:04:02Z","last_seen":"2026-08-08T01:06:25.943846Z","times_seen":578,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/js.js.download","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.189Z","timestamp":1786151154189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/js.js.download HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 18 Aug 2020 22:43:14 GMT\r\netag: \"134bc0-5ad2e9cc7e480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1264576,"size_decoded":229181,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (805), with CRLF line terminators","md5":"b0c69833e5af1c78a80c606aec2cde55","sha1":"c48cbe54bbefe44cc3b08241154c854807aaa84b","sha256":"73eb5d5a40c3f8b3b8839746897aecc6afe193fed453c8f72edb8fb55d30b7b2","sha512":"1c72e199571184485b1cd199eceab99fe402f4117fb3aa5f2df9e81c30e0e366c6861962a2a9605989370ee8b117f4c4a5276c27665e2034eb496ab6db7f62f7","ssdeep":"12288:Sp3lWGEqpc6BqqTJj9gbOALoYtU4GpVmFkha27y6QVKAxeHk9Tr+ozpVFYotBUIA:5U4G+FT/FYNV6HeBQldhjI","tlshash":"2c25934fba906466c173b33aa96bd405f976072f22548a137d7c41d91f328a483b6fec","first_seen":"2025-08-25T08:20:41.909378Z","last_seen":"2026-08-08T01:06:25.945167Z","times_seen":25,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/fonts/sourcesanspro-regular.woff","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.185Z","timestamp":1786151155185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/fonts/sourcesanspro-regular.woff HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: font/woff\r\ncontent-length: 29936\r\nlast-modified: Tue, 18 Aug 2020 23:22:28 GMT\r\netag: \"5f3c62b4-74f0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29936,"size_decoded":30282,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 29936, version 1.0","md5":"ee8fb2f1d98caedf1822bd94ac49592a","sha1":"78342ab4847d4794808b9f1ef361c8845139cd5b","sha256":"b2bd7e62939ac983fd01971920b44c1313a0d00b6f81ef80ae7a4b8ba5f20311","sha512":"3bd7983197354712d7ed1d7043482228b150039aea07d4c309c63b111e2001ae045fc221db9471d7d6fd3d3fb2ea89f7962049876ace01f16a44df81a4f82a43","ssdeep":"384:rOjrlkXHfjlxDrxA8I9AbEC2/jKunJR+IwpgCUvEpEh2dW2d1vDpqjCII0a14K9D:SjWbf/xA8I9A4C8jKunJdxCrrnKa1R6y","tlshash":"72d2f1ebca3de089d86506d2b189579d9f716f3f0848938b4b38cd2e0856b645f2ddb0","first_seen":"2023-04-10T20:04:27Z","last_seen":"2026-08-08T01:06:25.946015Z","times_seen":362,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/awt-front-BDDF.css","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.180Z","timestamp":1786151154180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/awt-front-BDDF.css HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 06 Jun 2021 00:12:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60bc12e2-1891e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100638,"size_decoded":12718,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d8d07b2eee0de2299f9472f923cd736c","sha1":"c305b5152ac4720e22a161529e9fc7c519fda6b0","sha256":"064cdaef709bff99e6ad7775891f4e2a0979ede5cbc1e8e60a7ccea5d1885879","sha512":"aa7fb660674b3f02e735dd1953fa105ac22d02d3244e5212bd041002e78754f708ff7e3a67263d579ed2a21bef6c0187825ce0134c165febb049c63f0d0a2e65","ssdeep":"768:pgcA9smX2o0yuJ8bhboYzhTqGbRKLPcauiX/qS:DmXNA+zZK7XP","tlshash":"94a3a931ba836814b4fb7996e5adf6465313ac2288ee17dad8f3d420c7d30e256ed704","first_seen":"2023-04-10T20:04:27Z","last_seen":"2026-08-08T01:06:25.946745Z","times_seen":328,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/inbenta.css","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.181Z","timestamp":1786151154181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/inbenta.css HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2020 22:43:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f3c5982-2268a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140938,"size_decoded":17641,"mime_type":"text/css","magic":"ASCII text, with very long lines (65307)","md5":"24b79f19be4d1c57be83a9bb799615cc","sha1":"12c70f9acbee3bfc0daf608798d3185dfeac8761","sha256":"7a0960947283e10fd527c3b96b64ab4781f68c3c7f820cd0f1e9a42b96bae233","sha512":"4ab8d4c5a96f8072d020d35f21991be05169816c0700208d5f36d2addffa5b7c9f5aab95b9de358d910ead47f4638c02c6ae150612c08e4c78f6eba628ea2d3f","ssdeep":"1536:3ZFRPBVED4Jz3oGN9JSUQ1fZPyaMIIZ+/AP2V:b7SUQ1fZPyaMII6","tlshash":"a3d3a4535f12384153b68702e0725ee6fd98503197b379a9e026e99762c3bc3862df8f","first_seen":"2023-04-07T14:55:51Z","last_seen":"2026-08-08T01:06:25.947501Z","times_seen":641,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/jquery.js.download","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.188Z","timestamp":1786151154188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/jquery.js.download HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30677\r\nlast-modified: Tue, 18 Aug 2020 22:43:14 GMT\r\netag: \"15851-5ad2e9cc7e480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88145,"size_decoded":31035,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-08-08T15:12:45.864762Z","times_seen":138587,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/img/pictos-fonctionnels_20200629183129.svg","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.012Z","timestamp":1786151155012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/img/pictos-fonctionnels_20200629183129.svg HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 06 Jun 2021 00:07:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60bc11ae-504e9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328937,"size_decoded":91976,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da558b838d28b3ad56202aa0a4e848eb","sha1":"0e91544bf95c232d558db1e57119d5fc5c0aeb74","sha256":"3deb480b7998aca8fb7d8a3e6b07e356daf97d9d1120c4204733b15e091eba14","sha512":"ce771434786bad76b7321ffc3b65f54fdad6f813edf8c535ae49e548d2daf31710615697597c1ade7e9b704d7d0f11f37ffc27e0a0b7e2adfb02b479d0188a29","ssdeep":"3072:ZeAO0VHoYodNmgXSaCY4z3jrq9zFoE5R5R/oWzPJmJFa8:pzyugfBIp","tlshash":"276418e613289a7cb05b0f7cdf203559723fb5eb3a91a0409e2e4630d99115cae7edc9","first_seen":"2023-05-02T14:33:13Z","last_seen":"2026-08-08T01:06:25.949022Z","times_seen":245,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/img/favicon.ico","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.164Z","timestamp":1786151155164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/img/favicon.ico HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 318\r\nlast-modified: Tue, 18 Aug 2020 23:33:46 GMT\r\netag: \"5f3c655a-13e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":318,"size_decoded":664,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 16 colors","md5":"ca10c09aeaf43460d3760f50c608eb51","sha1":"f2ed2a4fe0e1eadb7dd28444ea6b7a04abf0d38e","sha256":"daf58b06a09d467436ee5fd10eefbeadac3cf6ecaef1eca1884ef8330f561642","sha512":"02caf2ce2c2ecda7aabd9adaa2924fd05e89a024127c4cccdb4baca57baf4ac83a95d135f4ce1c91115f755841e50fd4fcb2881a75ac8ed6ae1b9d5621950103","ssdeep":"","tlshash":"75e09b60a150d440c4575135c106cbf40355cd167469de7fc1473c477c290c954191f3","first_seen":"2023-05-02T14:33:14Z","last_seen":"2026-08-08T01:06:25.949746Z","times_seen":2186,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/fonts/sourcesanspro-italic.woff","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.441Z","timestamp":1786151155441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/fonts/sourcesanspro-italic.woff HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/index_pri_20201013141424.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2898\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 05 Aug 2026 12:49:52 GMT\r\netag: \"b52-6584c35230d44\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":3211,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-08T11:31:43.778737Z","times_seen":7451,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/style.css","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.192Z","timestamp":1786151154192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/style.css HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 05 Jun 2021 23:56:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60bc0f1a-2c10f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":180495,"size_decoded":28607,"mime_type":"text/css","magic":"ASCII text, with very long lines (1330), with CRLF line terminators","md5":"77603dc1f154ebf1ce331920d4a899fa","sha1":"07e054367cdbee879d51feea346de422cd1bb4d9","sha256":"2d44928b93b88ed19c681cc9c4a16f00428a70831d3d1933a1c5db9afb33eab5","sha512":"a405e38ec02ce54739ab7922abdb5becc7311b4b60241eaffa01bdf2da32252ced4fa90e33de811332daba9f6f0622a4d6df1dc869995631b4cd3cc26c1fc6dd","ssdeep":"768:0yzcf0dxDOyJT7yk1WsNh+7hnU5b0FH9z8vn7IrTB5hh2T7AErstUvEGGw31yel2:0yYsHlJTF1/Nh+gLpWI17O7vKC4VUoo","tlshash":"97046217d6722942a63b87287b93a649d75892278701452efbfce184cff65e0c021fed","first_seen":"2023-04-10T20:04:27Z","last_seen":"2026-08-08T01:06:25.950463Z","times_seen":322,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/img/41de603c123a04387e8b57c2f2c9897e.svg","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.014Z","timestamp":1786151155014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/img/41de603c123a04387e8b57c2f2c9897e.svg HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 06 Jun 2021 00:15:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60bc13b0-114e5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70885,"size_decoded":20148,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"41de603c123a04387e8b57c2f2c9897e","sha1":"05bde7f0b25c5a1fdf59729b4c158365ed13e43f","sha256":"71b9d7b337580a9913ccf8db7dbd855d042b4ac01f9498b5c43c9ebefc2a2eb2","sha512":"7175df17ac7d3c1fa3c13cf94cf4c423df6bf7c5e48f9ebca3d0efa847c9e375389569ca1350d282c5e7ee3c884515c5e54fbf8f98bf03ca48a1fa28ebed187b","ssdeep":"1536:sdXLPilYq5K3somofBzwTIfTIQjbZbpODHEsbZbp4:agnomofBzyILID6","tlshash":"6963c7d11370839cd4cb8d5eef19a9a83b1eb0eb77764180759e8f286b87988f807d54","first_seen":"2023-05-02T14:33:13Z","last_seen":"2026-08-08T01:06:25.951202Z","times_seen":267,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/fonts/sourcesanspro-it.woff","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.041Z","timestamp":1786151155041,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /fonts/sourcesanspro-it.woff HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/awt-front-BDDF.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2898\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 05 Aug 2026 12:49:52 GMT\r\netag: \"b52-6584c35230d44\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":3211,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-08T11:31:43.778737Z","times_seen":7451,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/fonts/sourcesanspro-bold.eot","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.044Z","timestamp":1786151155044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/fonts/sourcesanspro-bold.eot HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 05 Aug 2026 12:49:52 GMT\r\netag: W/\"b52-6584c35230d44\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2898,"size_decoded":1633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-08T11:31:43.778737Z","times_seen":7451,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/index_20190723161948.min.css","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.176Z","timestamp":1786151154176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/index_20190723161948.min.css HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Aug 2020 22:43:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5f3c5982-41496\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":267414,"size_decoded":34534,"mime_type":"text/css","magic":"ASCII text, with very long lines (310), with CRLF line terminators","md5":"3ceb0fb380c636a6e7849491323d71b0","sha1":"0bc15dd5af9e83955b3d12f8d08e36f7ebf434de","sha256":"f513229e1ccc5679b510e10814c2dcb9431574dfcdf2ad7d0e24a67c8344c9cd","sha512":"a00b02dd90f082e378af8e3b96ed81959b420da753310f3318a3d0bbca99f032576abc1809660e5db2265dc11ef92e4dc9a34fa3c9597ade0e960cb7c7ce1b1f","ssdeep":"1536:eC7lMjBMDFnuThlKRLad/ASearnAVQIzU02oJhAc7:BJiBMDFnuThlWLad/ASeZyIzU02oJh17","tlshash":"eb4442194b01160555378b78efe397ddeb740263aa02495ebbcf69c18ff61e48062f8e","first_seen":"2023-04-07T14:55:51Z","last_seen":"2026-08-08T01:06:25.951896Z","times_seen":611,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/fonts/sourcesanspro-semibold.woff","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.190Z","timestamp":1786151155190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/fonts/sourcesanspro-semibold.woff HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: font/woff\r\ncontent-length: 63896\r\nlast-modified: Tue, 18 Aug 2020 23:19:26 GMT\r\netag: \"5f3c61fe-f998\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63896,"size_decoded":64242,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 63896, version 1.50","md5":"66d6f332d0d93578c726f68d3a9ada3b","sha1":"10ebe50154b114f97ff25d99034ce724116ee47e","sha256":"ecc485cb5434c03a5990728a87f66f6b46635d3bd97fd9fd175df05e37bbb6f9","sha512":"11a13be9276892e116c17fd718145a47b4cdf22f34e67d459e1cb67a8ef573f8349538e692446fa1bebd41382ae1093d414266f11107203ac0df5419a725b039","ssdeep":"1536:p0RoXQNv+CchZ4gnoxlHo0PhqQ0vRfJMw58AqhnE0p:GR2QNmCchZ4gnTef0vRh5It","tlshash":"98530278c5203d10c33ce33ab4a95a42aadc0fa937d424e592ce5a4c9266bfc5d65c8f","first_seen":"2023-04-10T20:04:27Z","last_seen":"2026-08-08T01:06:25.952593Z","times_seen":358,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/fonts/sourcesanspro-bold.woff","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.192Z","timestamp":1786151155192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/fonts/sourcesanspro-bold.woff HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: font/woff\r\ncontent-length: 29688\r\nlast-modified: Tue, 18 Aug 2020 23:21:32 GMT\r\netag: \"5f3c627c-73f8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29688,"size_decoded":30034,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 29688, version 1.0","md5":"8ddef052d66452862e8aef5f63fe6109","sha1":"7432d98ccfc52ff401e3c37439ee2e61722c279b","sha256":"10d5ee3a453be2ea83297c419182d5c32de6f46a530594fa5ec2aea8cd31c626","sha512":"c7185d40b0f939ca492ba4f46dc48207a5979e938d1911817c41493a4939dd46ca673b5398afa69f10022707aeed9e83a0b77e01c2090e0b84379868c2302e5e","ssdeep":"768:8vDrQXnreAkxnFHqPcRdXPNgHyEXHfi4iTm3DaSbZ6M:groreAkRFgKdXPNgHyQ/p3DBl6M","tlshash":"81d201f67760edfed274f9b0b9f0b2595005a8223a73d199801c483f11947aac472aee","first_seen":"2023-04-10T20:04:27Z","last_seen":"2026-08-08T01:06:25.953302Z","times_seen":361,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/fonts/sourcesanspro-italic.otf","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.321Z","timestamp":1786151155321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/fonts/sourcesanspro-italic.otf HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/index_pri_20201013141424.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 05 Aug 2026 12:49:52 GMT\r\netag: W/\"b52-6584c35230d44\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2898,"size_decoded":1633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-08T11:31:43.778737Z","times_seen":7451,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-08T01:05:53.444Z","timestamp":1786151153444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:53 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 286\r\nlocation: https://optinfs.optimalinfos.com/pbfr/\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T16:42:47.069256Z","times_seen":17782290,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":34,"connect":112,"send":0,"wait":113,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/pbfr/index_files/jquery2.js.download","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:54.191Z","timestamp":1786151154191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /pbfr/index_files/jquery2.js.download HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24463\r\nlast-modified: Tue, 18 Aug 2020 22:43:14 GMT\r\netag: \"11348-5ad2e9cc7e480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70472,"size_decoded":24821,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33165)","md5":"f86b7a0e560edb5951576cf8884153e6","sha1":"e5b4c5b95c79e6e42ef676ed77986db3f85223ab","sha256":"74a340d2c31205e840515065e739e3d08fa169bc8fa52c66db838dbf749103c1","sha512":"cd59cfb0971dd9f675ddfe8bcd4a18d8960fb1041b6453c6c77a1f30478753f4e12c9b1576049c87a419e3edadb16bb243f5a5abfc6e8e58f028b49802e54748","ssdeep":"1536:7AcNhEyjjTikEJO4edXXe9J578go6MWXqcVhzLyB4Lw13sh2bTQKmPNsvDU8Cur:bxcq0hzLZwpsYbIyvDU8Cur","tlshash":"8f63c5d9b2d67052db7b30b850bf510bf07a98dab84c8d60e058c8e47d78a89417bf2d","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-08-08T01:06:25.954803Z","times_seen":529,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"optinfs.optimalinfos.com/fonts/sourcesanspro-it.otf","fqdn":"optinfs.optimalinfos.com","domain":"optimalinfos.com","tld":"com"},"ip":{"addr":"104.234.240.139","port":443,"asn":212238,"as":"Datacamp Limited","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://optinfs.optimalinfos.com/pbfr/","date":"2026-08-08T01:05:55.188Z","timestamp":1786151155188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optinfs.optimalinfos.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 11:52:44 GMT","end":"Tue, 03 Nov 2026 11:52:43 GMT"},"fingerprint":{"sha1":"14:DB:90:81:41:C2:77:0E:65:AB:E7:E6:F8:94:B5:0E:9E:96:58:22","sha256":"05:1B:97:E5:70:31:54:B6:8C:38:A8:99:91:11:85:44:44:D5:19:D5:FE:EC:C4:87:66:40:2B:BF:A8:FB:0C:6E"}}},"request":{"raw":"GET /fonts/sourcesanspro-it.otf HTTP/1.1\r\nHost: optinfs.optimalinfos.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://optinfs.optimalinfos.com/pbfr/index_files/awt-front-BDDF.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sat, 08 Aug 2026 01:05:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 05 Aug 2026 12:49:52 GMT\r\netag: W/\"b52-6584c35230d44\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":1633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-08-08T11:31:43.778737Z","times_seen":7451,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Societe Generale","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Societe Generale phishing","tags":["societe_generale","financial","phishing"],"meta":null}]}}]}