{"report_id":"ff2735a9-3280-49f4-8058-b4b1d73fd026","version":6,"status":"done","tags":["interac","financial","phishing"],"date":"2026-02-11T12:43:38Z","url":{"schema":"http","addr":"mon-espace-securise-interac.com","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":0,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"final":{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"title":"INTERAC e-Transfer","dom":{"size":887,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (887), with no line terminators","md5":"4f094b4aa00a9ada237aaa00a176aed7","sha1":"478f0b6b070524b7f9d28f9ca9148ad555cbbe1a","sha256":"698b090da71b572ba13d8037d13b727d147b2e4ec07b9d242c6d1b55849ef72f","sha512":"c9881fcc0d8dc9de03827fd1c2f1fc1d0c50cf9e039f182943fecb96d530a9614c7612befcf793f5ed59bc873f46d66b7b374d9f5bf3d5d51aba29be86ae8659","ssdeep":"","tlshash":"3b119cbaacdb91929c20f5c0b43196d5498e970ab360ddd4b5f41380b38cd839d520ea","dom_hash":"domhash39233ef72f209ff6034bc8827fd3b71e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mon-espace-securise-interac.com","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":0,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T12:43:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"content.etransfer.interac.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]},"summary":[{"fqdn":"mon-espace-securise-interac.com","ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"domain_registered":"2026-02-10","domain_rank":0,"first_seen":"2026-02-11T12:21:24.930115Z","last_seen":"2026-02-11T12:21:24.930115Z","alert_count":184,"request_count":92,"received_data":2396180,"sent_data":59038,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Pure CSS","description":"Pure CSS is a set of small, responsive CSS modules that can be used in web projects.","website":"https://purecss.io","common_platform_enumeration":"","icon":"Pure CSS.png","categories":["UI frameworks"]}]},{"fqdn":"content.etransfer.interac.ca","ip":{"addr":"91.235.133.9","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"domain_registered":"2000-10-31","domain_rank":2261734,"first_seen":"2017-04-07T11:21:54Z","last_seen":"2026-02-11T12:21:25.649082Z","alert_count":8,"request_count":8,"received_data":2551,"sent_data":13713,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"gc.kis.v2.scr.kaspersky-labs.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"1999-09-13","domain_rank":247122,"first_seen":"2017-01-30T08:41:57Z","last_seen":"2026-02-11T12:21:25.434083Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1661,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-08T22:20:44.026892Z","alert_count":0,"request_count":1,"received_data":453178,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.interac.ca","ip":{"addr":"45.60.87.208","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"domain_registered":"2000-10-31","domain_rank":1284515,"first_seen":"2012-11-19T06:26:43Z","last_seen":"2026-02-11T12:21:25.682282Z","alert_count":0,"request_count":1,"received_data":1337,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/vendorJS.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a5877ca34034008d7f643254180fd0e","sha1":"a858a6c60ad07fc7fe6ca14d24eb2091e8e1c8c3","sha256":"a3ee664b3de72360fba0c99ad23ab06aa48a477a4735f01c48ba1ff62d0f77f0","sha512":"f594428f127e85bcffc23af1bc97ca80ea7663aeb5a0076358261e1e963fa939fcb231be20568765ef0a6ab931f59c872b65bc7f2852eb57dae355b030b10d63","ssdeep":"3072:fNM0qhJvN32cBQ7M6Whca98Hr8GJt0x5C0eN:fqz7hbBca98Hr8GJt0x5C0eN","tlshash":"91f31ad9b7c2b06297b7607890bf410bb139a8a9780c4864f168d8e47e78e4d517bf3d","size":158802,"data":"","first_seen":"2023-03-07T15:26:31Z","last_seen":"2026-05-23T17:52:21.37493Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"b546be59b004610c935e99e078411e35","sha1":"325bce2c32148fa27d5c5aa6fdb39a434904e884","sha256":"415b725d1581173f75b0a176547de9b3bee02137e07627e7520d8ca4ab5e1ce9","sha512":"0201964f232e4a4ce6a55ee96f9579a5f1b6f495e921161771445a4335b5fc40e3fda61d031be2c3e7df0b57aece8250b66f3fec9922e92c37dc3512acdb84e0","ssdeep":"384:j4AGaVi2ZYn0Mn1ag6GV9GYj3rXXmkbq7Pj/KqXZZFc/fdbL0jVBK4j40PTbSB5K:qj3rXjbqlWfpNZm","tlshash":"b0938cdb0c909167c06d6c41068d248b6cacb1bac7e1155bc1083ee9f4fa366a7fb9f5","size":93321,"data":"","first_seen":"2023-03-07T23:28:17Z","last_seen":"2026-02-12T12:56:06.765366Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"451fa8b89402651538c969d6a0037fff","sha1":"85e385a7ec47ea6072402cae81a34ab23cd4f758","sha256":"ed8aee4206e9eb798927e810a146d871cf1cbe69ca4ec27b55bb46af92a80c8f","sha512":"0473f8d8bdac95a8a6c9ec17eceb77a224035fe1d0b01274cf038ff33aac26cfea8ffc29478d9c94fddbb521f5cfb71321c9f7fe88cf24674560405f51ce2736","ssdeep":"","tlshash":"30a002c692f4884312d2b55a8d94102e403b04df8ca9594b6495aac165657ec163255c","size":63,"data":"","first_seen":"2023-03-07T15:26:31Z","last_seen":"2026-05-31T12:33:54.632235Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/gtm.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"45e0d7abdb7cfcff095f11d602f82bb5","sha1":"21e9bd43a86618dea168c86beb4495214d5b287a","sha256":"89e511924d64609333539d2efd4e5b9f02683a24abfe807afb5b977a3ef6d1b8","sha512":"451da7b6bf8ae33eca79ef080337afbd09826dfef6656debced88adbea576240f4c95acf6b853e4901fb81d62d4249670e00d6b390cf41f50beac3dbb6a7645d","ssdeep":"3072:YXdZ279+h04Q1opIEFi2NgjDnyYqOeMPp:sdZO+c2pBFNgj7qXA","tlshash":"9af32addf386753682a37074943f400ba27a6de2f84cdc90e18ad8d42e786a91177f6d","size":163898,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.788055Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"41f81204e67788685cdd138245fd667e","sha1":"8dff3628d2262e9d5c2bd274f1eebfe11fd8edc1","sha256":"520901acc43b7c9c1f8faeb9fd56073c62a58d3e0b99f7b30082fa595639e2e4","sha512":"20c053d3bb93388443c2017b7f6d85458f9bf654afe7e7ff6bcd5d18d56911b5f6706b638c5c338bca32857e095c10e5cbca5b3e0bbea96a020d67984eded2ee","ssdeep":"","tlshash":"acd05203b80094abe09fd2152bddad4eafb3037609c1c88b2e0ec1101b4238a40c0bfc","size":270,"data":"","first_seen":"2025-04-18T14:07:07.733992Z","last_seen":"2026-02-12T12:56:06.779608Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f(2).txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a783fe79546564cf975aaa0cb4d404b","sha1":"95bf54f297c19b0e16f7594337ce9532a7db4c99","sha256":"58b0e837a076dc756bdfab00586a95c7e0d83f836146665cfb5d60b06c456afc","sha512":"714d724f5bdd1e2751726a67cc8c702bb3f3ced97a8de421c0d40516b4726c775ce3e178f910897711b35b24905c6c4d570f9a892eb1691f51fdcf14d80ae9e1","ssdeep":"","tlshash":"0f41b5e1f720745302e156703b7d790fb52abdd38ac4e640fa20c8448adde4320cbb94","size":2158,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.721222Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/main.js(1).download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"77d17803adb61852f507ecaa6a5f87d1","sha1":"9a96ffbc439f96869eed08a910981ddb90a4009b","sha256":"970188560f2e5afd072ee006c54cf249992c651de9536b67bef628b7493c0463","sha512":"ab9cdde5b52246d80bd37f42ba815576c08fdcaeace6fef694d4a0a88935300e4229e80581f6b24baa4afd0f9707958644536dfd4989a404a1845cf85cc547a5","ssdeep":"1536:YQy8SVA+9c4+Yw7P07zh7aE7aabFXcGR/zoIU3dhLew/LywkvbSjpRvdnmNa:YVEmNa","tlshash":"45b3960ea9512163c973f33edfab4609f9376163242a91127e6cd2d46f7086883a5fdc","size":108244,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.732511Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"4bdafa7de67370ab4535eb21c7b0922e","sha1":"ef218801d993877c406ea4f63d6b4f91b761e12d","sha256":"d31f8347ea0db022d4499ab6ae6cf3a2a4195a2b138683cd7931be37d1b5b727","sha512":"556dced6b25b591459085621380155cf1cd26cad2c5792f2564f5d3cb1ec03b4c80431e2c54770d218f8fae7356623091b04248c58ae8544d243d27dceb95b0d","ssdeep":"","tlshash":"d5e02dcdb0121cb2b6ef08b623b09225b0835308b4091c32cefecd243a78ac788134ec","size":336,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-07-01T01:20:22.809525Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f.txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a839478b897dc46cbd3e8f10728cfabf","sha1":"f5ede0208a8078b36fddac4c8e4e37e1daf39548","sha256":"067d7eec7321f8b947e16f7808bc46be7ba0c2998bbab10809ef101692b8f598","sha512":"1713f9bc8279daa20a5232d046ce55ec69ec9f7603e711cfdc4a6b31b989ce66d1beeb615a5294602081a7b89027f2c297ca49adf50d625f49d332a09b9097ef","ssdeep":"384:oI/fi2DS+4Nj2nwUD2XCNhSgxKkQHAtKKcPZHSfTD2tEa/51HNAjXCxkPACcCY9f:oIS2DJ4Cnwe5KkCe91VaPtAmxEabpv","tlshash":"3d130acaba91b06bc3a350a4103f090bf37e9a99a88cd4d0d645d5d46d34bdd02b7fad","size":44292,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.751113Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/gatewayInitJS.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d72a7d66db7e24139713cd2b482d441a","sha1":"28d3aa6485c08d7835ba36bd00db8694508d091b","sha256":"f23444cb0a7f9ae863b289830b759da93f92730a5615b2bc1bd49021d6a65d65","sha512":"03486387c08bbe832f5af6a05de85a7a83c70e8fa0f38adcfac52d9fc1e2e0d1fe0fa16d6c4dbbfd678fb903ec44e46f2feecd73e5c2b3abc4a70cd3cc5fa373","ssdeep":"","tlshash":"dd216338a2747447c0bbb8f9562f013aa26f4b354e27c58d324be29c0a68d04c217e6e","size":1122,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.764859Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"eval","is_inline":false,"md5":"ce3ddefdfa993eff10cce12bad0f161d","sha1":"f1455008ca9dcb80747f474d900994ec2cba7254","sha256":"5825930e400f3c0b303a930b890dd589e3fefeb58b7a2819919a0bfbd43a958f","sha512":"f4264f4a799a148f84a2b6197e3bc982496851cb2ff6e89c0d500a3baecbe59a2c9ba82e678a2eb3df41b18aab764d068cc11f9c901bf2b63fc5a274611a09a8","ssdeep":"","tlshash":"7ba002d536a1701df51b6132649f136d386e0505927019fc133d29bd3531cd4725bc7c","size":74,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-07-04T12:21:07.222384Z","times_seen":1624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d29a00092f94c81939e53f78d8cadeb","sha1":"023c0e163cfe16eea5547bdbae934760c5c9d404","sha256":"9ea0989ac52ef3ac8346bccf00ba31fe3616d0767b6cf28819ea2bfdf45fa72b","sha512":"87d0776efced0882de224e9a6908ba59ff057c727a4ad6e829e18b6ca42c7c1ce96f391096c69f794f22b45d85d5a16713b8beb7d1488f5b491cda3f952020ab","ssdeep":"","tlshash":"48a0240dd44c15004c40f5f7dc731c5140d30307c455cc50c45100f07304d0d7d51444","size":83,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.781957Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd1df9b425fd41eaba288a23321b13d9","sha1":"1563b1e28d339359e3d2f24da7e0649d76a1f704","sha256":"3eaf61bdd784d4c8b49fe2076c5ba63ce57a880b9035bb37f2da3b8b86eb38cf","sha512":"30dd008af0aa1daef54cc9b10d4e6b326eb6291f36da9d116d3377ec7f25157b1837286369467d93c62ea20414353372ce0652b5c1cf13c2a4ec528eed520eb5","ssdeep":"","tlshash":"7f41f04af16d2152247f723caf4b5d4c3932705799c9cc84aba90cf1ae1626a2283b09","size":2089,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.783172Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/main.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"77d17803adb61852f507ecaa6a5f87d1","sha1":"9a96ffbc439f96869eed08a910981ddb90a4009b","sha256":"970188560f2e5afd072ee006c54cf249992c651de9536b67bef628b7493c0463","sha512":"ab9cdde5b52246d80bd37f42ba815576c08fdcaeace6fef694d4a0a88935300e4229e80581f6b24baa4afd0f9707958644536dfd4989a404a1845cf85cc547a5","ssdeep":"1536:YQy8SVA+9c4+Yw7P07zh7aE7aabFXcGR/zoIU3dhLew/LywkvbSjpRvdnmNa:YVEmNa","tlshash":"45b3960ea9512163c973f33edfab4609f9376163242a91127e6cd2d46f7086883a5fdc","size":108244,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.732511Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/linkid.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cc3a63fe10060af4a349e5df666eefe","sha1":"3e8d3925b550345123f2cab26568221fd4154f9c","sha256":"92fca55833f48b4289ac8f1cedd48752b580fce4ec4b5d81670b8193d6e51b54","sha512":"5801c9db98c4998480772ca5ad71f0e400c4756ae713aab0358ca6593b3a3426499d6dec81a768c861cbbcd8394dd8c6d647628a13f124ff3a1119f9b7793e8c","ssdeep":"","tlshash":"80319575b348749e8776e6308bbf490794b92695ac1dec88b409e4e02d74acf04b2b77","size":1569,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-18T18:05:33.154089Z","times_seen":688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/jquery-ui.min.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"f01666ac29a79065d56050f33a52f049","sha1":"08882f5b26a67060cb1199ea7fc84423d7c20ff7","sha256":"dc3d535926f878f06e73076f0df2d3a7216096108ae40bb9ef8cc2e95270b138","sha512":"d27177b6742dc5bd2cdc9dacc98e1ed1ce7ebbd6dddb5c66fa95f32ce23140735c18f8ecc8dfe13a7dd0d2559388fdc103e448c1566540db4ddbd3e5fb433cd0","ssdeep":"192:GHvrNB4CnJoM+f33hvMZfNl7y/xyemxwtdfuaDcMV:GHvrNB4Cz+/xvMZll7yJRDZu0V","tlshash":"784260dcb491f4a997a3b570502f990ab1bead1d600e8a00f06ac4e67cbc64d5137f7e","size":13097,"data":"","first_seen":"2023-03-07T15:26:31Z","last_seen":"2026-05-30T18:26:18.696045Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"a43d80f17be46638ecfdf6b4f51c6ad1","sha1":"59da4eb938e55fb72cfcab96744de53d868388c5","sha256":"8749b7c74f1328f8b89f14c526ce28f704be38a9b9ce6569f791b30320ff680a","sha512":"c08d060d1f5ffdcb2d0840d67b414cd85b55b73d209080887998ddce93c80fb943c128b1c5705bd0c7471e63be436091d6b48ce4015fb193610caa8076715bc4","ssdeep":"","tlshash":"d1212526d45592386b373b82cc2c737c3a295e32a0eebca53c1cdc8d165c8477928af0","size":1198,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.784581Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"a43d80f17be46638ecfdf6b4f51c6ad1","sha1":"59da4eb938e55fb72cfcab96744de53d868388c5","sha256":"8749b7c74f1328f8b89f14c526ce28f704be38a9b9ce6569f791b30320ff680a","sha512":"c08d060d1f5ffdcb2d0840d67b414cd85b55b73d209080887998ddce93c80fb943c128b1c5705bd0c7471e63be436091d6b48ce4015fb193610caa8076715bc4","ssdeep":"","tlshash":"d1212526d45592386b373b82cc2c737c3a295e32a0eebca53c1cdc8d165c8477928af0","size":1198,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.784581Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f.txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a839478b897dc46cbd3e8f10728cfabf","sha1":"f5ede0208a8078b36fddac4c8e4e37e1daf39548","sha256":"067d7eec7321f8b947e16f7808bc46be7ba0c2998bbab10809ef101692b8f598","sha512":"1713f9bc8279daa20a5232d046ce55ec69ec9f7603e711cfdc4a6b31b989ce66d1beeb615a5294602081a7b89027f2c297ca49adf50d625f49d332a09b9097ef","ssdeep":"384:oI/fi2DS+4Nj2nwUD2XCNhSgxKkQHAtKKcPZHSfTD2tEa/51HNAjXCxkPACcCY9f:oIS2DJ4Cnwe5KkCe91VaPtAmxEabpv","tlshash":"3d130acaba91b06bc3a350a4103f090bf37e9a99a88cd4d0d645d5d46d34bdd02b7fad","size":44292,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.751113Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee6489d9b047784f933c3770bac9dacb","sha1":"94e0d221fc59e3fb5e3fb53dd25eb095e214df1b","sha256":"c93996253718b57c7fb98fb6082dd148e0dd9d44a35000811554b2b73452aae4","sha512":"17d7c3d92782fd4bc5e2208d80efac963f23d371f1b0c6806871a81fa13e8ee86e88d6288867bd825ae6c1de29d77ef459e8b31779111cf2ccd681bb7ba345c6","ssdeep":"","tlshash":"15600000f3fc0cfc0000300c0c000c00000c0c003c0c00003c0000000000f0fc0f0030","size":15,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-07-23T12:07:38.335095Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"16eff409565ed1d22c17d73ce417bd15","sha1":"ae526f9ce16489f0ca53977b7722f56806555342","sha256":"d7d8adcd29f47bcccb73dcfc9c2135200465d57df689f842a49311a5b000d7a3","sha512":"505ce0ccebf07887dab601f952ee07414468a5d4e822ecd45303ff24ae8793ede9c917e0c863a3756e5c214eb82df576b178397c5113a00ff8a42692f7b2c0a2","ssdeep":"","tlshash":"fb8000c20ca2c0b0b0a20c2e00283a008c0e0b38a22033a320a0a002a008003c0302ca","size":32,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-07-26T01:19:36.304513Z","times_seen":17881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/analytics.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d40531c5e99a6f84e42535859476fe35","sha1":"a901817d77b2fe5259c298c91bc65c54d7f8a1a9","sha256":"a1925038db769477ab74b4df34350c35688a795bb718727b0f4292a4a78a6210","sha512":"0a0272b56df74d6cad69f3c56392e0eefae0516839bc487c1dc9f7bba922c9e29f942e95bd280b14c2f21f1f264392b68b47fe379eec7375ddad3c107fcf9afb","ssdeep":"768:Yan91xe8BCwsN7sP5XqYskqYyPnHOlTjY3SoavbVvKHmCgYUD0ZTXEwyVfZs6:Yanxx1r5hsvlHO9Y3So37UwyV9","tlshash":"09331af9b7427456c2a271e4403f1007a07eedc5f449d8e4a54ad6d46d38eab02fbf68","size":50205,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-21T12:49:34.770599Z","times_seen":434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"02dcd4bf5e58ca299326ed99e14da599","sha1":"fef19d4a3f5b01ddbc3be5237bb83f55fa081bf4","sha256":"ee03e7d9a6854f893b3df1b048af7c0dd9c1592c7649f33c79436a3cb7d97dea","sha512":"3ed2b5aec251b92f49569d24792149ca7dfecfc9d6102479163f1b83229f473b897e62497d8ad855d50d017703145a1d1920ea408ac6408e1146c4fb58efbe45","ssdeep":"","tlshash":"0cd01282878e1621c03c31040155a0fca1bfa3323a41c6303c2ed26400d9895c1b8cc4","size":196,"data":"","first_seen":"2023-03-07T15:26:31Z","last_seen":"2026-05-31T12:33:54.639281Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/navJS.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"631e72fb8cd59bf6af2bb409cb868d60","sha1":"dc0170c257df3e5b9053c7ae7b521b64b2e1b84e","sha256":"3faf4f8a3a1c739bbfbf4cbf963d8c87bd3e3348d18fe5380ade2360b6522ad2","sha512":"b02939a105cc60099ae325f6987d2a66c9a9d7c1f7a63056461745ab9594d79596be6147e3c52e600c3361c6402749dc35115784c1d6e181a3b14bd5c749b15d","ssdeep":"","tlshash":"810188e7761834760dfb1a7623bb5ba8372192461c851822366cc8880672c1280bbef4","size":826,"data":"","first_seen":"2023-03-07T15:26:31Z","last_seen":"2026-05-23T17:52:21.41714Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f(3).txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d23912aa5e4ad997be9d32a7c00c6e73","sha1":"c82195223f01ee0101e1772e7462b184178cf391","sha256":"bb754885c67a31a825509dee5935d948f3f816608adfd31bf7b16b04b89df0a5","sha512":"6dafd482f233a2a9c9c561918bc5a99677da13647e85dd3ee48cf620f3cd5d5a9620a60f7bdede1c0494b002be0268b8dddff97b6be577b9737d22892e9b8e3c","ssdeep":"","tlshash":"5541b5e1b730644742e216b07b7d790fb42abdd28ac4e251fa21c8848add95710cbb94","size":2159,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.769785Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/main.js(2).download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"77d17803adb61852f507ecaa6a5f87d1","sha1":"9a96ffbc439f96869eed08a910981ddb90a4009b","sha256":"970188560f2e5afd072ee006c54cf249992c651de9536b67bef628b7493c0463","sha512":"ab9cdde5b52246d80bd37f42ba815576c08fdcaeace6fef694d4a0a88935300e4229e80581f6b24baa4afd0f9707958644536dfd4989a404a1845cf85cc547a5","ssdeep":"1536:YQy8SVA+9c4+Yw7P07zh7aE7aabFXcGR/zoIU3dhLew/LywkvbSjpRvdnmNa:YVEmNa","tlshash":"45b3960ea9512163c973f33edfab4609f9376163242a91127e6cd2d46f7086883a5fdc","size":108244,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.732511Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/jquery.mobile-1.4.5.min.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"d140ae612cb9b8244a1587a57b4fc5b4","sha1":"ad8f70d65efb2d4360b9c184cefa56d50e7a1586","sha256":"8b566be194d8bccfc0a15032c75598fa8f96065c72d293316c25fd920d7cc019","sha512":"476c45b55b4f8c5d2521e293441d5e7d04145827e0efee9937aafff9727082cd5158f4484e79c471548491fb441a200bacba82c1b1030f70707e9105ced0fffd","ssdeep":"3072:MECZgGiRTumVYKNpGU3Utf//GABVIkBE5Rf1nB:ME6oumVYk73wG4WRf1nB","tlshash":"99140a48b2813253b8af14aa307b1507e13765add508486db079cdde9ebde482277f3e","size":199950,"data":"","first_seen":"2023-03-07T16:02:58Z","last_seen":"2026-05-23T17:52:21.419679Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"5edab247d7f4d7e3ba1b02e9572be174","sha1":"27305678667a2e2dca1a0a8677b4129d809c75c2","sha256":"2b16bf5eb47d4f9955fb2084f104fb96b53c89a65b4bd73b147eabc1fdb4bd4c","sha512":"892e86dd1d173a1cf4d324c0d23c93e4fff1abfb654327954b9cdfe197cafffca42dbbb8cd2045d17f2f82aa486395741811a27cbca7509fb67b89c52bbdacc2","ssdeep":"","tlshash":"3dd09e02b800d06b909f96656bdcdd4d9ff3426a05d0cd8b6e0dd1505b5278a40d1bec","size":270,"data":"","first_seen":"2025-04-18T14:07:07.746348Z","last_seen":"2026-05-23T17:52:21.445373Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"84e3edef21f2e56bb6f8d95bc2b62f9b","sha1":"3955b0f994da2029c0629f42eceb75340de40918","sha256":"807f60e05113f477adbd07e7d31970b946eaea966240b277779924d14fb272e6","sha512":"395a0b1f8fc862c2cc4a013dff8462f4cbce572ae50b38c3ac8d4d7471c14fa118cbba18d17cd86b55a275e62742aa6e095e4e566a5db4c19f0f102553ac2c44","ssdeep":"","tlshash":"d8f02b55f7ae5050017326545f574941d435741b3446d801b90d0bf13fa5b1cc683a34","size":440,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.787471Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"eval","is_inline":false,"md5":"55daaa2a73fd1b971676f324be974497","sha1":"f2e39789d9b5daa42d0e044577957b799e620b32","sha256":"107abd1d4c412c9df04a22eea7a81d0ace815adf4ca7b8c2e3d6ea6c459423b5","sha512":"cac6ec026e2d90d81fa9164a7d492d9e64f9c2e292767180392a5418ebf86d91d1c4a335cab2b2510402fbee5f2edba68347189c841043f34921a9d28541f926","ssdeep":"","tlshash":"0f900298b8f1764547123254896f5135655e188072454881430c119138329c9c419529","size":50,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-07-04T12:21:07.233973Z","times_seen":1626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f(1).txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"9576b39c96ed92359662d941ad58deef","sha1":"b6eeecea12c1c638f08d410b66dbf9c7231392f9","sha256":"2ed5433ccc82d0a263a7cccf5bc3492e8486e6d9060a2c4451d5680e7fba250f","sha512":"de6f0ff24353654270a513fe52a9f0b9b3fe828951f672f6ba899f251fbccea335e64d5eacfac12d86dc01f28a92a266f5bf279e7457c8cc03c7db0999c9461b","ssdeep":"","tlshash":"e041b4e1f370240702e156703b7e3d0fb529add28ac4e280ba21c8448adea5720cbb94","size":2159,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.739493Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc79798199d96cceed0f56d698ce4721","sha1":"46982dfd80e093310ed86f9c562573d6082df862","sha256":"602c9e24df17558267a8e0984a53468f1a7daaab549f181affa4d9d3b6f3922c","sha512":"e152fb41db7e916da675238a5b3a6e37948ced5922200919b8e5cff837fbd8c4d28a30e019ee746c4c35f771c2e81a381bd66f03f30492a8156593655baaa697","ssdeep":"","tlshash":"d521dc2aa2cba2ffe4f19449cf1691601d20b40b2a08844df38dc7546fb539834e8d6e","size":1401,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.7894Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f.txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"a839478b897dc46cbd3e8f10728cfabf","sha1":"f5ede0208a8078b36fddac4c8e4e37e1daf39548","sha256":"067d7eec7321f8b947e16f7808bc46be7ba0c2998bbab10809ef101692b8f598","sha512":"1713f9bc8279daa20a5232d046ce55ec69ec9f7603e711cfdc4a6b31b989ce66d1beeb615a5294602081a7b89027f2c297ca49adf50d625f49d332a09b9097ef","ssdeep":"384:oI/fi2DS+4Nj2nwUD2XCNhSgxKkQHAtKKcPZHSfTD2tEa/51HNAjXCxkPACcCY9f:oIS2DJ4Cnwe5KkCe91VaPtAmxEabpv","tlshash":"3d130acaba91b06bc3a350a4103f090bf37e9a99a88cd4d0d645d5d46d34bdd02b7fad","size":44292,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.751113Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/sandbox%20eval%20code","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/check.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"307fc61d9d0866fb7377118aacce1458","sha1":"511c2b575377831f606272077672bb55f607a95f","sha256":"14f80718e5005902a04ec2a6f235e849f2da7108ba844747730ef8beb667b301","sha512":"77eee25bfe82b44a3f0c8affde745ab8b25313d23f8a40834292a93984f93f328fc80ae079c5ee6bbe712bbbcc0671d4c9381ec22d4b6782baf43114d5fdb86c","ssdeep":"1536:3rnd3DAm6FDKTP5bWQlWQKWQIWQ7WQQWQzqV87Gaf0nxuLu17nmnumdUTwNrQq:3rd3K7GFxSz","tlshash":"8a5463ea29e2d062403f1c91174f4acf602cd4b38784d32af5807da86cb5659dbb7dad","size":283759,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.747451Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/sid_fp.html","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"020e86c9f1f54844252f5b3fefaf9dd0","sha1":"3d66d488ecde8bdf890e659a6c2b30e5c71b02b5","sha256":"aeb209057ef723424c7dc36c5121726fbc5ceeab9bc76eba852420677225778d","sha512":"e4bbef0afefbcfb2331f1f63a87732f11af5776d0169e0af3fafd2f8bf30c8f40d0eef77cb993396894e94c0bd8b5e6d262e3b585c29329fc3ad0497e35a53f2","ssdeep":"768:RQewtjs6XG0ee1lVZlVllVcZlVJXklV1lVllVBlVplVXlV+lVKlVWlVWqlVWlVCI:R0RezUv6RFi","tlshash":"2ca3bdd716d7511362b90ca0590f2cefb46e547b43c911b881827ff8eaf4a5b8b82c5b","size":104533,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.780155Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"eval","is_inline":false,"md5":"90eb5565a909cfb23910404b9543ac4f","sha1":"43956ffd9c2b0dbec81e659e6692a0cfb279d743","sha256":"4c7434541d1c4e35e47fa7017129597be4de29d8520f8d28324360e68ee147bb","sha512":"06a96098fd8262ff74ecfb5279054e224843f02c13c2ac3e106f84d3dd32f8f8e20b645f7e05d09de97d8b3b54aba5d7c802c4d326151311743c038559e752b6","ssdeep":"","tlshash":"a8a002d93654b019c41a3112544f215d386e0551917455e8135c5d5a3531ce5660bc5c","size":61,"data":"","first_seen":"2023-03-07T01:19:58Z","last_seen":"2026-07-04T12:21:07.235269Z","times_seen":1652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/allModuleJS.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":false,"md5":"966f93e2b3cf5167a038641451bf2d67","sha1":"155ffef07f9e3a3c4fe452e5eac9126fb26c43ca","sha256":"d9913e4c0eec70e19ba6e6ac369c0c2e9b5af76c0e2e6e842cf668ca54ca120c","sha512":"db733840ddff803230b37e294f90f90ec2ca7946b7d06b1afbce2047b081cbd0a61e6b280a9f1951b83bde3c8158d2aa94eb7978e77be5610a8641b2355e4867","ssdeep":"192:cz65aSmJF81ZrKKex1bzN3dwGt4qaQ7prlUpgITtlomlPJTt6EOz89TQ:cz65raF83Kzx1JdwGtiQ7prl41JTt6h","tlshash":"3ca2970ef2505bf982fb26ff65879964d07a5ee58e12c4dad30289d02d18f81d42bc2f","size":23252,"data":"","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.725177Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5SR238","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36225c297fc74e9adc7826612586106e","sha1":"467d82f837ae10c08f11ce7c6ec7c5fa33dd39e2","sha256":"e37443fbd1829f1bb230ae6bf596d671c11fd475cf92dd4494df5d8ebf5e105e","sha512":"dd998bca51838e27f5686c263b566c7d3a126c2c96624230f65af144ab655c85d78c6f8aee803ae6b8f0ab288d6cc33e367f740d1a4c1144ca7ac5b805cb06a6","ssdeep":"6144:95VmOygdh3cUIEBU8EVnbzeBe19vgMU0tQ3JLf2Ab+i:9mZgdR2EBU8+3e0tQ5Lh+i","tlshash":"f5a419cdb3d6742683a3a078903f014ba17b69e2b44cd895f189dce42e709aa5173f7d","size":452528,"data":"","first_seen":"2026-02-11T12:43:43.697424Z","last_seen":"2026-02-11T16:07:56.097833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4d2c7722d8c942860eac61311ae2064","sha1":"78b9506e7822c07d8b776c41d585e3c29e3ce3ad","sha256":"c2ea7f74ea0a77183d521161af3d40571abbc6a23e1a2c8312f0d45367889105","sha512":"a9f2e13f503a720de131ec838c339d33862b384ca868b144e02a85b615a45cb04aa61ff73d712ddc51f23076ac31244031cb25ed71861496be1460fd5729a269","ssdeep":"","tlshash":"39d09e0678449067e06f921517dced5d9fb3533a45c0c59b6f0dd1515b8238945c2bfd","size":270,"data":"","first_seen":"2025-10-14T02:31:44.30496Z","last_seen":"2026-05-23T17:52:21.446483Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"ea8b9765b859ec87f2be88a8f84d6f2f","sha1":"4d1659afc3864cdcb07bd09ae377ac88963376c3","sha256":"6f24f9d7d3a1de1a4178e99646da22b316b73b2a41f1f1a2f245eda1230dc273","sha512":"a37f96f08212aa4b81511b7176f98f23c10d6b4c93b6589184a185ef251eb6933e57c6357e13ef80200b630af29612b4f2ad7f673aee6dda8a1b17cad621b505","ssdeep":"","tlshash":"f170000202002200c2e000828a8220000008800000202002b8000208a0220200a200a0","size":19,"data":"","first_seen":"2026-02-11T12:21:34.766221Z","last_seen":"2026-02-11T16:07:56.174398Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c92a10324374fac681719d63979d00fe","sha1":"aee655773d856fb038536adcfd6472fc7543463e","sha256":"158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab","sha512":"d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f","ssdeep":"","tlshash":"8430000000000000000c0000000000000000000003000000c000003000000000000c00","size":4,"data":"","first_seen":"2024-08-20T00:14:53.541497Z","last_seen":"2026-07-23T01:39:44.874962Z","times_seen":27518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/etransfer_logo.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/etransfer_logo.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3483\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-d9b\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3483,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"039abb1715208aabbfd733097697c70a","sha1":"cb74dc2666f278d03017a091c427f43d06ef3a3c","sha256":"2cc0d2da3df362a41c529546ec109192feee1c804ba930c85b0977f1224a7eea","sha512":"60a9c660100a673b6ce77f3ae1bc0254d5f7d9f602111b097d1b22afd464aaa1fce42dbcce97b4cd81300fddaff91a980702fda19c94cba833479db073ffdcea","ssdeep":"","tlshash":"61719404c37e62bebe618b0002911ad272e8249a7039d3fceb668653d96e5f08174a79","first_seen":"2023-05-03T22:51:10Z","last_seen":"2026-07-22T12:17:52.14481Z","times_seen":365,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000003_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000003_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5370\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-14fa\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5370,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1ee251f868c6eb7184d795d62c3eb8a","sha1":"f2b8ec28647076273a8cef3f8506e8fa60dff596","sha256":"9e787eb9727523cc7aa0efa3c0c3debdd36ed2e59503b9b59881d7e5e0b8fc7d","sha512":"f75bc82b6da6d2b4127c081b24e95373024373a5961d177edc5bd324f6e81bfb76fbe996f9679d664f0a9bd19e7805efb6027ee96ad4cab5ac4287db79c0c1e9","ssdeep":"96:A+fu2omLnkVgdeW5fst0csKJ4+0k1VQMCAFNhjR/V8E+FEyX5qH6eYmrJNOtPD9:hu2omLnkVcpN/gJsdMCAFnjR/w2yXIRC","tlshash":"05b1ed074344c7baeee8452c5a393cc5b5f0eccae170e1d4aaaf2416d14d8d462ac6ee","first_seen":"2023-05-13T03:46:21Z","last_seen":"2026-05-30T18:26:18.737526Z","times_seen":91,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/sbi.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/sbi.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 7285\r\nlast-modified: Mon, 25 Jul 2022 14:00:28 GMT\r\netag: \"62dea1fc-1c75\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7285,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 249 x 29, 8-bit/color RGBA, non-interlaced","md5":"277e6a3daaadab87b0da309037c3d2f0","sha1":"45efa2d634ec743deb333978102966a42352c026","sha256":"23f5f022bd89861a7ecb8d17e5c0b46d4c5bbdb6995463856181d466c976db70","sha512":"c123de28b61fe55c8dfe4437d7b1f731691ce0fedfcb5571a4491dd3174a5239a0c9c1feee693f2bab076347605b66cc8455044e3484285311c221bf93bcf6ea","ssdeep":"192:qG79Yz8wTp6hcH022E9F3Al77DICdi3T4YCRlELiXQ:qygHTpu+i/DDdi3TTCALiXQ","tlshash":"5ee1af80b9990cf9e45dba2f90d061a32a67e6906b51406df01ec53224fffe40d96292","first_seen":"2023-04-16T21:32:09Z","last_seen":"2026-02-12T12:56:06.738929Z","times_seen":13,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/Wyth.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/Wyth.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 119213\r\nlast-modified: Mon, 25 Jul 2022 14:19:48 GMT\r\netag: \"62dea684-1d1ad\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119213,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 130, 8-bit/color RGBA, non-interlaced","md5":"b6e83aa71cf309a9139c3a2b25586123","sha1":"312fdd7abf3710c3534a1eb439e71f158cf479ef","sha256":"b4c3d350c3162f53b8f3130e665d6354e4f9665969638a9539b6582cd6c97ae7","sha512":"c457b71a38b6e69e06fae4ca71f39b0ebd832e614272c0e4d77b62e62b363cc712ea603ab8eeef6520e0f3bcc1f4dddcfd0da80a6a5aca18c58c374752f7ef1a","ssdeep":"1536:P5Kch6LudTmQqxOMJh2ABu2QAFphj/MneYoEqEEweUjW6SaJ/vC9T4WMFvEbt:kcUtddOABsWj0eD6Eay6XJs496t","tlshash":"aac38cd5d58a0eb9ead2a37bec427fcdb7a011574605070ce33de3f4ae8264c618b985","first_seen":"2023-04-16T21:32:09Z","last_seen":"2026-02-12T12:56:06.750505Z","times_seen":16,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/dc_pre=CKOPjOurw_gCFTTA9gIdw7sILA","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","date":"2026-02-11T12:43:14.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/dc_pre=CKOPjOurw_gCFTTA9gIdw7sILA HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42\r\nlast-modified: Wed, 22 Jun 2022 05:16:30 GMT\r\netag: \"62b2a5ae-2a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/octet-stream","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-26T01:24:34.452229Z","times_seen":1009066,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery-mobile-theme/themes/jquery.mobile.icons.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery-mobile-theme/themes/jquery.mobile.icons.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/sid_fp.html","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/sid_fp.html HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jun 2022 05:16:48 GMT\r\netag: W/\"62b2a5c0-19a0a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104970,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (10444)","md5":"e952f9fee37d3bcca10da9248eae4b47","sha1":"44f981d29ad328b7347571b384dba23719cdfee4","sha256":"16994cd2390a989b59c214f1f08391d1a98666dd205c9b2c28bb379a6db5a478","sha512":"5fa7631930a5c4b02052cd2e5dec9ebe7a9ccadda9c8f731a179e8aef2395c868a0a62d02e3cd1035bab2174378d23cbe6751877cc8d2ae7cdf16e856013e054","ssdeep":"768:GtQewtjs6XG0ee1lVZlVllVcZlVJXklV1lVllVBlVplVXlV+lVKlVWlVWqlVWlVI:Gt0RezUv6RF5","tlshash":"1aa3bdd716d7511362b90ca0590f6cefb46e547b43c811b881827ff8eaf4a5b8b82c5b","first_seen":"2023-04-16T20:26:12Z","last_seen":"2026-02-12T12:56:06.755138Z","times_seen":10,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/main.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/HP.html","date":"2026-02-11T12:43:15.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/main.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/HP.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 108244\r\nlast-modified: Wed, 22 Jun 2022 05:16:48 GMT\r\netag: \"62b2a5c0-1a6d4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108244,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (390), with CRLF, LF line terminators","md5":"77d17803adb61852f507ecaa6a5f87d1","sha1":"9a96ffbc439f96869eed08a910981ddb90a4009b","sha256":"970188560f2e5afd072ee006c54cf249992c651de9536b67bef628b7493c0463","sha512":"ab9cdde5b52246d80bd37f42ba815576c08fdcaeace6fef694d4a0a88935300e4229e80581f6b24baa4afd0f9707958644536dfd4989a404a1845cf85cc547a5","ssdeep":"1536:YQy8SVA+9c4+Yw7P07zh7aE7aabFXcGR/zoIU3dhLew/LywkvbSjpRvdnmNa:YVEmNa","tlshash":"45b3960ea9512163c973f33edfab4609f9376163242a91127e6cd2d46f7086883a5fdc","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.732511Z","times_seen":10,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/allModuleJS.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/allModuleJS.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 23252\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-5ad4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":23252,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (2136)","md5":"966f93e2b3cf5167a038641451bf2d67","sha1":"155ffef07f9e3a3c4fe452e5eac9126fb26c43ca","sha256":"d9913e4c0eec70e19ba6e6ac369c0c2e9b5af76c0e2e6e842cf668ca54ca120c","sha512":"db733840ddff803230b37e294f90f90ec2ca7946b7d06b1afbce2047b081cbd0a61e6b280a9f1951b83bde3c8158d2aa94eb7978e77be5610a8641b2355e4867","ssdeep":"192:cz65aSmJF81ZrKKex1bzN3dwGt4qaQ7prlUpgITtlomlPJTt6EOz89TQ:cz65raF83Kzx1JdwGtiQ7prl41JTt6h","tlshash":"3ca2970ef2505bf982fb26ff65879964d07a5ee58e12c4dad30289d02d18f81d42bc2f","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.725177Z","times_seen":26,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"content.etransfer.interac.ca/fp/ls_fp.html;CIS3SID=8D862450AB75E1BA5B022D71165C9FE6?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59","fqdn":"content.etransfer.interac.ca","domain":"interac.ca","tld":"ca"},"ip":{"addr":"91.235.133.9","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:16.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content.etransfer.interac.ca","organization":"Interac Corp."},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Feb 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:D4:63:FD:BE:64:FD:36:CB:AF:61:06:42:7C:63:0A:D5:5D:3E:D0","sha256":"78:73:4C:9F:73:DF:D1:8D:E1:6B:23:2B:EE:60:81:18:70:55:56:97:4A:CF:31:7D:7B:91:5B:6C:63:33:4D:7D"}}},"request":{"raw":"GET /fp/ls_fp.html;CIS3SID=8D862450AB75E1BA5B022D71165C9FE6?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59 HTTP/1.1\r\nHost: content.etransfer.interac.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/\r\nCookie: visid_incap_1659541=8gXZwFy6SrGiZQd/pl4eQGN5jGkAAAAAQUIPAAAAAADKlIKI0t8zCyLWY3D1MEel; incap_ses_721_1659541=+ew8I3WVUUeU80p6KYIBCmN5jGkAAAAA8K+1ipRjlS1vObS7q2wdkA==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Wed, 11 Feb 2026 12:43:16 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Type: text/html;charset=UTF-8\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"content.etransfer.interac.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f(2).txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","date":"2026-02-11T12:43:14.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/f(2).txt HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/plain\r\nlast-modified: Wed, 22 Jun 2022 05:16:30 GMT\r\netag: W/\"62b2a5ae-86e\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2158,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (2158), with no line terminators","md5":"6a783fe79546564cf975aaa0cb4d404b","sha1":"95bf54f297c19b0e16f7594337ce9532a7db4c99","sha256":"58b0e837a076dc756bdfab00586a95c7e0d83f836146665cfb5d60b06c456afc","sha512":"714d724f5bdd1e2751726a67cc8c702bb3f3ced97a8de421c0d40516b4726c775ce3e178f910897711b35b24905c6c4d570f9a892eb1691f51fdcf14d80ae9e1","ssdeep":"","tlshash":"0f41b5e1f720745302e156703b7d790fb52abdd38ac4e640fa20c8448adde4320cbb94","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.721222Z","times_seen":10,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/jquery-ui.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/jquery-ui.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: W/\"62b2a5b0-87\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"afeb58f81025db3c4c458053ee90f1d5","sha1":"365ed2a145eb0f798b7d594eef477ecc285a9a53","sha256":"e11049e59ca2f627b228848ae53684a258f986bba99a1ea36234787fde7e114a","sha512":"f7063ecefb6368a8f038a67e5512da966cae9f63dc1b3d5370ec3f4f6f526efc5b8aca892ce6c8ea7daa81bf9622604ec2538b6ea3c81922c0d6fa6d53a5165a","ssdeep":"","tlshash":"6bc02b8c048d008c8df84923e0f0d3b0d00012f2f0063cfba01579e445120202297139","first_seen":"2023-04-07T07:46:22Z","last_seen":"2026-05-30T18:26:18.754113Z","times_seen":101,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/central1-logo.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/central1-logo.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 5394\r\nlast-modified: Mon, 25 Jul 2022 13:22:14 GMT\r\netag: \"62de9906-1512\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 375 x 68, 8-bit/color RGB, non-interlaced","md5":"e742fd86388414920f5f24033527cead","sha1":"f6566bf3f7613bba71fe6dbf0afc010d19b5b952","sha256":"58e6c88d1d2325cb837208ee973406348ae315086a6716fbfcfea7b03862fb9c","sha512":"fb607410c63932b7592393f265c5a1ac2a5399331181d33f3d7bc219d1e4479003273bbc2af14aa883b997c10a6847f9325c2f1ddcbe5a31e8aa8f2f6c72aaa1","ssdeep":"96:5SeknmWIFrvJ/D8sHFHBD8n5Hz2hA2hBVLUto2C6KEm5XpHDnGSHbnr/eH7:5SeknkvJvlhy5SG2PVAuB9EkZHDGSHbS","tlshash":"a8b15b2be9d63c09479e680c36a5502f4eef87454ac1ac11bddd962318b05bec98e7cb","first_seen":"2023-04-16T21:32:09Z","last_seen":"2026-05-08T00:20:13.510737Z","times_seen":14,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/getAllFisandCus.do?lang=en\u0026fiListOption=null","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /getAllFisandCus.do?lang=en\u0026fiListOption=null HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/tags.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 93321\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-16c89\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93321,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (15504)","md5":"b546be59b004610c935e99e078411e35","sha1":"325bce2c32148fa27d5c5aa6fdb39a434904e884","sha256":"415b725d1581173f75b0a176547de9b3bee02137e07627e7520d8ca4ab5e1ce9","sha512":"0201964f232e4a4ce6a55ee96f9579a5f1b6f495e921161771445a4335b5fc40e3fda61d031be2c3e7df0b57aece8250b66f3fec9922e92c37dc3512acdb84e0","ssdeep":"384:j4AGaVi2ZYn0Mn1ag6GV9GYj3rXXmkbq7Pj/KqXZZFc/fdbL0jVBK4j40PTbSB5K:qj3rXjbqlWfpNZm","tlshash":"b0938cdb0c909167c06d6c41068d248b6cacb1bac7e1155bc1083ee9f4fa366a7fb9f5","first_seen":"2023-03-07T23:28:17Z","last_seen":"2026-02-12T12:56:06.765366Z","times_seen":10,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/Logo02207250105.gif","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/Logo02207250105.gif HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4489\r\nlast-modified: Mon, 25 Jul 2022 12:44:10 GMT\r\netag: \"62de901a-1189\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4489,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 225 x 111","md5":"7c728809736296b426a3c6d26f66d90d","sha1":"f3343a3083aa6290ea6aeaa7055f24082b27a254","sha256":"a86a5b8a8ec285cb00ec6b1d2323abd45d3210811e52c426564715eedb82e5ff","sha512":"02814243e487282dc80e1d67d05937c920300f023c710ed7370fd6a5c23d9acc139da9c6e7b6611ab535bd91289ff93eb6ee404dae93c97e9ea3a86fdd141153","ssdeep":"96:BLAKONZP2/Sx4Ghc8Ta+jE54xTR+u3Q5zmZw3s6o:VUZ6GhXu+1r+KQGN","tlshash":"9c919d9fa9b18e009a0075ce17c734662a8524849ae4f263dc0ec85757b377dd06eaff","first_seen":"2023-04-16T21:32:09Z","last_seen":"2026-02-12T12:56:06.720036Z","times_seen":13,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/navJS.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/navJS.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 826\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-33a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":826,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (422)","md5":"631e72fb8cd59bf6af2bb409cb868d60","sha1":"dc0170c257df3e5b9053c7ae7b521b64b2e1b84e","sha256":"3faf4f8a3a1c739bbfbf4cbf963d8c87bd3e3348d18fe5380ade2360b6522ad2","sha512":"b02939a105cc60099ae325f6987d2a66c9a9d7c1f7a63056461745ab9594d79596be6147e3c52e600c3361c6402749dc35115784c1d6e181a3b14bd5c749b15d","ssdeep":"","tlshash":"810188e7761834760dfb1a7623bb5ba8372192461c851822366cc8880672c1280bbef4","first_seen":"2023-03-07T15:26:31Z","last_seen":"2026-05-23T17:52:21.41714Z","times_seen":71,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/clear(1).png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/clear(1).png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 0\r\nlast-modified: Wed, 22 Jun 2022 05:16:36 GMT\r\netag: \"62b2a5b4-0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/interac-jqm.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/interac-jqm.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jun 2022 05:16:30 GMT\r\netag: W/\"62b2a5ae-2b9\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":697,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (697), with no line terminators","md5":"745235c26c54c8d8dfe842eae0f81c22","sha1":"ada1c6f02af1481a7c7254a3e612e56ee8f78e56","sha256":"9990c44b20b507ba7382cfdd553b0a56d10871147a09bc8e42903b92d0c12e10","sha512":"c0a8397def5f3fb4cee7efb40b56f3838471a5f31be30e876bcd9de80c43f276bd325c7acdb403e51559bbd85a6b4aa60119473219600283f3769026e734f24f","ssdeep":"","tlshash":"52014b99b0417ba53d4dc50cdf16a9f7b1071d99d50008b2e88be11b727389bb0de823","first_seen":"2023-04-07T07:46:22Z","last_seen":"2026-05-30T18:26:18.687023Z","times_seen":108,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery-mobile-theme/themes/interac-jqm.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery-mobile-theme/themes/interac-jqm.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery-mobile-theme/themes/jquery.mobile.icons.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery-mobile-theme/themes/jquery.mobile.icons.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"content.etransfer.interac.ca/fp/clear.png?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59\u0026jb=3134246e7b613f3f3f3b3638386c313930353f363a663a31343867643566373064356363643733","fqdn":"content.etransfer.interac.ca","domain":"interac.ca","tld":"ca"},"ip":{"addr":"91.235.133.9","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:16.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content.etransfer.interac.ca","organization":"Interac Corp."},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Feb 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:D4:63:FD:BE:64:FD:36:CB:AF:61:06:42:7C:63:0A:D5:5D:3E:D0","sha256":"78:73:4C:9F:73:DF:D1:8D:E1:6B:23:2B:EE:60:81:18:70:55:56:97:4A:CF:31:7D:7B:91:5B:6C:63:33:4D:7D"}}},"request":{"raw":"GET /fp/clear.png?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59\u0026jb=3134246e7b613f3f3f3b3638386c313930353f363a663a31343867643566373064356363643733 HTTP/1.1\r\nHost: content.etransfer.interac.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/\r\nCookie: visid_incap_1659541=8gXZwFy6SrGiZQd/pl4eQGN5jGkAAAAAQUIPAAAAAADKlIKI0t8zCyLWY3D1MEel; incap_ses_721_1659541=+ew8I3WVUUeU80p6KYIBCmN5jGkAAAAA8K+1ipRjlS1vObS7q2wdkA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 12:43:16 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"content.etransfer.interac.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/close-icon.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/close-icon.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1274\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-4fa\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1274,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text","md5":"a39a394bbf426efb59f5f66eba132b84","sha1":"b36e7f387e7bd3e7e05b72c884517825370f9137","sha256":"c541e0a558eff64db78b5c4971fd5c677ac7a7fb6dea644f41130da34a333a9c","sha512":"48433ddec33088bcb78dd3a56cb7e2ccd12d75bc397ade13d7a250c1a59eaf253de2306f06fe9e78bb505234401f4f3236d1a891d3453c91274d21e129b564d1","ssdeep":"","tlshash":"a421b150c7c5966e6c12815a21f0ac4a14715a96a4d8e275fccf263b731f8c06621dd8","first_seen":"2023-05-13T03:46:21Z","last_seen":"2026-05-30T18:26:18.761396Z","times_seen":85,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000219_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000219_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3289\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-cd9\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66a0b0ecd28bc75ed2d4ef124bed2ce9","sha1":"1ed04bf04a16d5b5a77b394c0d788d67ddf68cbe","sha256":"f20957245ccf4ae9c38287fad8f482c27a44d0ea75033d9527c759956d3c824f","sha512":"80153538a9ce8f89046ad45988b6f738cd0bb3dbc5d39ab3eca960340ec5508f9fbbf581c2e76fb98f86fdaebbe61b94b6a5cdd519c1e75bb03a20e285953d10","ssdeep":"","tlshash":"8561756283a2c6796de8863426742ce034f1ec99e03196c8b5bf112ff18d8d4d5bc6bc","first_seen":"2023-05-13T03:46:21Z","last_seen":"2026-05-30T18:26:18.716332Z","times_seen":84,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000621_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000621_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6950\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-1b26\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6950,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c737c6b75206ba8318ac6728124fd297","sha1":"8e73dec9c0d1a8fb8693d4e2f8b73e2dc6f84630","sha256":"2d23c857b93d59d59f9e035586f39121795d09e9c08161d7784e2e18e4683b2d","sha512":"76158f0ad2bd6debabf6c7d6aa12fc8ef8fa019ef497ac20c55f4c7347008cf51a3f1c08e149caea251344c0c59626a34bc40e20c899c4bb51a4880934f6f5d7","ssdeep":"96:nvfhN2cxcBeiOyAuOqGkeKbi0UD3uScUiQMOpFJIp4Bs1UWwUShgocj2QWmZ0TwG:XhN2cxladvEKxUpirmvC1gSoy2QWmZu","tlshash":"74e1a90b4309dbeabef8042cdd54149976d8dda694b4f1c0bb6b280bd45c4e0e69cbed","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-05-30T18:26:18.699709Z","times_seen":70,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/clear3.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/clear3.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 0\r\nlast-modified: Wed, 22 Jun 2022 05:16:36 GMT\r\netag: \"62b2a5b4-0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery.mobile-1.4.5.min.js","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery.mobile-1.4.5.min.js HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/jquery-ui.min.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/jquery-ui.min.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 13097\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: \"62b2a5b0-3329\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":13097,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (13097), with no line terminators","md5":"f01666ac29a79065d56050f33a52f049","sha1":"08882f5b26a67060cb1199ea7fc84423d7c20ff7","sha256":"dc3d535926f878f06e73076f0df2d3a7216096108ae40bb9ef8cc2e95270b138","sha512":"d27177b6742dc5bd2cdc9dacc98e1ed1ce7ebbd6dddb5c66fa95f32ce23140735c18f8ecc8dfe13a7dd0d2559388fdc103e448c1566540db4ddbd3e5fb433cd0","ssdeep":"192:GHvrNB4CnJoM+f33hvMZfNl7y/xyemxwtdfuaDcMV:GHvrNB4Cz+/xvMZll7yJRDZu0V","tlshash":"784260dcb491f4a997a3b570502f990ab1bead1d600e8a00f06ac4e67cbc64d5137f7e","first_seen":"2023-03-07T15:26:31Z","last_seen":"2026-05-30T18:26:18.696045Z","times_seen":107,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/wealth.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/wealth.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 5287\r\nlast-modified: Mon, 25 Jul 2022 14:11:32 GMT\r\netag: \"62dea494-14a7\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 49, 8-bit/color RGBA, non-interlaced","md5":"37ed0c35f45335f606bee52f956d194b","sha1":"8b7a1ea4337f047f2c1ec54752f0ece39817ecda","sha256":"be91bfd28a2d330d5a564fdc4cc31878f451caca09ff29a5b1f4e0bf62a37fbe","sha512":"0e9e8058f2a643cfba808f5162bd5b155544eaa148f407a5d14a374dff3ba63ec5124484e10096702eabf9e6de53abdd61f933b5c2ae135109a6a0e904df9452","ssdeep":"96:BMMKHwiMTsMRJxJfwziEkGX/KxEVP09OXnOLKtAnfJJ3PL+n/zsCrz:yMKQiSlRJxJfwOhGX/KK0d7fJJ3Tq/g8","tlshash":"a0b16d7a6b8d797db5a40e4b32682f2a8515c59c7d873429424ac13448f3b3fc8b41ab","first_seen":"2023-04-16T21:32:09Z","last_seen":"2026-02-12T12:56:06.76889Z","times_seen":13,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000837_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000837_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3487\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-d9f\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3487,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb51ada0dc8ef769a5d39399c5c27649","sha1":"bd5e723ff34e0782e7ada013d97375e52917ddf7","sha256":"fe790203d627713953e9e50255fee1feb140e12f31c40ec392bca4a3446030a9","sha512":"55e0bce386fdf7873a87f08c8c30740b0922b663de38985eb9628aaa615a2878ce31b91ad581146566246a81f4515da9bf692f521bbc3dc17a832b2c3331a3d2","ssdeep":"","tlshash":"f0712193034cebad7dd909b89a2524c4b2d5edebf174f0c4b2ab5801d05c8d0a98cbe9","first_seen":"2023-06-18T02:36:45Z","last_seen":"2026-02-12T12:56:06.767147Z","times_seen":82,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000374_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000374_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4081\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-ff1\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4081,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8662830e6a88ada2e6a97148d49abb84","sha1":"49356bb0575a4713c14024dcee35456ae6cea450","sha256":"23c114e3ec79756211bcce3b84bd8840ab443e2221cf903002dfb563af40f257","sha512":"ff60be9cb0375a21dd1494184cc3654ac2f208bf125bae83b459122694bfeb7d7eb41282cceae5f9d39c7822548b9e19a22e6d372ff8f8bec15e5ae14a515d2a","ssdeep":"","tlshash":"a18185568345bb739ac542b8827834b672d095e3f930d3c8667b366fe90ecc024ac759","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-02-12T12:56:06.749673Z","times_seen":72,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/tags.html HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jun 2022 05:16:48 GMT\r\netag: W/\"62b2a5c0-98b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2443,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1043)","md5":"c21a39da49f019f0db5038830067b823","sha1":"db2a03bee20351a5bf5454def6d0523eb302ef51","sha256":"724dfcb489999930651365d3078a0424a72158bfb86bd18d75f44ee4084b561e","sha512":"99513160b06eeaf1e46d564a08e8a918fc027914ea1cfc889debdda69e910764c78dc3ea2c856bda4f2ba952e89af63b0ea9731bda6382a8bf5896a05e9f281e","ssdeep":"","tlshash":"745120625c6ec7449419c1ccf0b9ea690745c10adb008e7462ffa3f8fb4d6c69d1b9ac","first_seen":"2023-04-16T21:09:19Z","last_seen":"2026-02-12T12:56:06.727507Z","times_seen":9,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"content.etransfer.interac.ca/fp/clear.png","fqdn":"content.etransfer.interac.ca","domain":"interac.ca","tld":"ca"},"ip":{"addr":"91.235.133.9","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:16.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content.etransfer.interac.ca","organization":"Interac Corp."},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Feb 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:D4:63:FD:BE:64:FD:36:CB:AF:61:06:42:7C:63:0A:D5:5D:3E:D0","sha256":"78:73:4C:9F:73:DF:D1:8D:E1:6B:23:2B:EE:60:81:18:70:55:56:97:4A:CF:31:7D:7B:91:5B:6C:63:33:4D:7D"}}},"request":{"raw":"GET /fp/clear.png HTTP/1.1\r\nHost: content.etransfer.interac.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*, bzmgl3t1/3979f3a89c62db597cbc90b8-90a4-45bb-bbd7-2d2077d12370\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mon-espace-securise-interac.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 12:43:16 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nLast-Modified: Wed, 11 Feb 2026 12:43:16 GMT\r\nExpires: Mon, 10 Feb 2031 12:43:16 GMT\r\nEtag: 5be871547cd14f139fa471cf137d327a\r\nCache-Control: private, must-revalidate, max-age=0\r\nAccess-Control-Allow-Origin: https://mon-espace-securise-interac.com\r\nContent-Length: 81\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":81,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-07-26T01:19:36.280536Z","times_seen":22281,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":110,"dns":35,"connect":16,"send":0,"wait":15,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"content.etransfer.interac.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.js","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:25.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.js HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:25 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000002_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000002_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3619\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-e23\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3619,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"688dd6b18573cd34f452b63b3efb856e","sha1":"67b243c7d20f247cb095d9d333b71bd704cca4e5","sha256":"53efae3b084ec3d78ffd09836a8a518385398c8ec2427b5413574ac26472674d","sha512":"356d5992a286a4283a1ef3a490c990be8c0763631496918f78739b0e7d38ef033b69031401327e885da9cd075d6853de3491c915c742d08fb8e2ac9fad9ab003","ssdeep":"","tlshash":"847153830314e7fa6c16865c9b7501d171d69caae43062c83ab71077f28c8e496ed7fa","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-02-12T12:56:06.741229Z","times_seen":73,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/clear1(1).png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/clear1(1).png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 0\r\nlast-modified: Wed, 22 Jun 2022 05:16:36 GMT\r\netag: \"62b2a5b4-0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/vendorJS.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/vendorJS.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 158802\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: \"62b2a5b0-26c52\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":158802,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5a5877ca34034008d7f643254180fd0e","sha1":"a858a6c60ad07fc7fe6ca14d24eb2091e8e1c8c3","sha256":"a3ee664b3de72360fba0c99ad23ab06aa48a477a4735f01c48ba1ff62d0f77f0","sha512":"f594428f127e85bcffc23af1bc97ca80ea7663aeb5a0076358261e1e963fa939fcb231be20568765ef0a6ab931f59c872b65bc7f2852eb57dae355b030b10d63","ssdeep":"3072:fNM0qhJvN32cBQ7M6Whca98Hr8GJt0x5C0eN:fqz7hbBca98Hr8GJt0x5C0eN","tlshash":"91f31ad9b7c2b06297b7607890bf410bb139a8a9780c4864f168d8e47e78e4d517bf3d","first_seen":"2023-03-07T15:26:31Z","last_seen":"2026-05-23T17:52:21.37493Z","times_seen":361,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000004_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000004_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 964\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-3c4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":964,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6dbd95cf8a336ada55aa66884829bd5a","sha1":"e699d784042dc501df68268d6c8168ae54286ec6","sha256":"2d70de35d8125369775a01fb1f1e58ab5f937843dc024eaeb5c2ff42dd5b9ac3","sha512":"c5bb2799ba2e9557b6b9349b7aa38541fe36414909bdbf9c3cc1ad5f294970066ca3445d9b6a620cf22a97857863ade4d83b04cc522458b5318b79232cfeccdf","ssdeep":"","tlshash":"f611214943c57d3baa3243a9a3b4aac322f2a94a83650878c166387ff24485101788ad","first_seen":"2023-05-13T03:46:21Z","last_seen":"2026-05-30T18:26:18.685908Z","times_seen":85,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000001_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000001_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5178\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-143a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5178,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bcc1700517e379a6595af20b5eb258a","sha1":"a5650b9076432d53aca473dc62fe5de3d7e637c5","sha256":"db09fc1f3c7b0968d63c6a084b54917225fc17f172eee60a3086ce9ea51fa9b7","sha512":"902fff871a4abc611c98493b6fda20c291267d4237ae812b23f1b7aaab7385c163a07ec6a157c164665efc3c1199942ba7a5271015c5624380b622374deb08bc","ssdeep":"96:A+fq3acq6ZeDQevkj7q9l2Y9MqM4DFdhISXTAbEUAbNAbMcAb0i:hq3acq6sDpkHq/2YI4fTXUbEFbqbMNbf","tlshash":"08b1e047135877a9eb1e9567a2780dde75f1e8cb81a0f0c0bb573823e6184e4fa9c318","first_seen":"2023-05-13T03:46:21Z","last_seen":"2026-05-30T18:26:18.709853Z","times_seen":145,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/clear(4).png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/clear(4).png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 0\r\nlast-modified: Wed, 22 Jun 2022 05:16:38 GMT\r\netag: \"62b2a5b6-0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/GTIe8CSS.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/GTIe8CSS.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: W/\"62b2a5b0-78e1\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30945,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30945), with no line terminators","md5":"83b2d971ad3b86a740c1fd93580152c9","sha1":"131bda9adff5885135d1fc7082153b8475905239","sha256":"bdd0a4202435b25d87dc39fd9c1c923681e78254151e3625da123fde677d6947","sha512":"241d8e92436c2b3ba1837d2618df154719b585100c6f70207a903f59c70955d69821c6e06602a6c654d046a725bc9f3747d000a0174b149a4813a89fb295171e","ssdeep":"768:ItUPuzFe/Edwa6b4xo8JwzS1244uFg8x7XjH5LOQ+m:HuFg8dXj3","tlshash":"cdd21ede6b23301dd8fa8e06e4f1bfdd3325102be76716efaa166c12cb566e90171904","first_seen":"2023-04-16T20:26:13Z","last_seen":"2026-02-12T12:56:06.734566Z","times_seen":46,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000010_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000010_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2053\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-805\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2053,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58327582d81c1f3d7cd39e1194fa5fb2","sha1":"7c2cca3e89e0fd7493df48a847f09cce5e26d3a6","sha256":"a61c1d3e6748d60d00bd9a6c8b97e43a3c6c353d7bce861d1a83a6e730bdc85d","sha512":"3156cc4502fa0c69342371a7d199dfbe6cabd41b6f715347e7c48c1b5db4cb61eda5dbdf8be7ed7b36c287dc646b229e2f5da2a87857cb7c31a3f6e8ff9858f4","ssdeep":"","tlshash":"fd417362d32c6cfeb912070463753c5317b66047b1a0e6fcfaa7968abd098f040a997c","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-05-30T18:26:18.726633Z","times_seen":85,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000006_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000006_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3875\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-f23\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3875,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c3e381e1612af2735140be1a1354157","sha1":"4eecf5ce7eb5f587afb5ad1205cdd2396d29e59d","sha256":"7ed4383e1732ec505b094b3856dc7375fef1bf351eea96775758ffc5461f1074","sha512":"69e6642c13816ce297fbaa7f9508e5abe9592e1301f642610423fe30c91a5dd091831831587b57af690701047ab3359f541182f9fa3c0d3e335123d45ce25f51","ssdeep":"","tlshash":"1d81f166a395fab75aa5c5589331147270e5c487d2a0c3c0a47f353fe59e8c080adf99","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-02-12T12:56:06.753513Z","times_seen":42,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo-login.323e98b8.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo-login.323e98b8.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7133\r\nlast-modified: Mon, 25 Jul 2022 13:33:38 GMT\r\netag: \"62de9bb2-1bdd\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7133,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"323e98b8c39b13b982b8ff8048e53b3e","sha1":"36a17491868ae545fe262a895490948f640c30e6","sha256":"39c0ea9d7e8a33b5233d668720894bbb7618582d6ee24ccfeee04fc63d731171","sha512":"ec402c1c9d3876ba33c1fde1ba47dcd92d5d03e4c4bce7bfc576cc57b46c7adcc0a018db87cbeea9c62e428c5e89cb2fb6c748e73eda40211f9cdee00f5bb55d","ssdeep":"96:0KXTTKz3JlxfbjinNErCYs3oZVmA0UbmaEy5nCQK5A1BTPWnB5shYVsqZmprqaJ:0eqPmYZd0UbuyRCfO2sCZm5p","tlshash":"12e1933a53992eb5a5c707a06bec559a31f360d8f36883fce7a275531601ff68034e62","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-02-12T12:56:06.736466Z","times_seen":12,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/clear.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/clear.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 0\r\nlast-modified: Wed, 22 Jun 2022 05:16:36 GMT\r\netag: \"62b2a5b4-0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f.txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","date":"2026-02-11T12:43:15.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/f.txt HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/plain\r\nlast-modified: Wed, 22 Jun 2022 05:16:28 GMT\r\netag: W/\"62b2a5ac-ad04\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44292,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1575)","md5":"a839478b897dc46cbd3e8f10728cfabf","sha1":"f5ede0208a8078b36fddac4c8e4e37e1daf39548","sha256":"067d7eec7321f8b947e16f7808bc46be7ba0c2998bbab10809ef101692b8f598","sha512":"1713f9bc8279daa20a5232d046ce55ec69ec9f7603e711cfdc4a6b31b989ce66d1beeb615a5294602081a7b89027f2c297ca49adf50d625f49d332a09b9097ef","ssdeep":"384:oI/fi2DS+4Nj2nwUD2XCNhSgxKkQHAtKKcPZHSfTD2tEa/51HNAjXCxkPACcCY9f:oIS2DJ4Cnwe5KkCe91VaPtAmxEabpv","tlshash":"3d130acaba91b06bc3a350a4103f090bf37e9a99a88cd4d0d645d5d46d34bdd02b7fad","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.751113Z","times_seen":10,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/top_fp.html","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/top_fp.html HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jun 2022 05:16:48 GMT\r\netag: W/\"62b2a5c0-19b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":411,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e6bbd7727b64b0c7558fc5a5949428b4","sha1":"176503fc4669391d0fad4bb64b66d7152a11d865","sha256":"1d2c1c2895e0ed394e5b316df7b84ac9a63e5b91159895294fc12367e9e622d9","sha512":"78c68fe512570c394e88cf7393c2e9b91c145788eb67d9aa345dfde99159ba98abacb01ca1c20ec3fd8c3e252f9d33b72fdb49969df22c4d0cc7ecf08ced55c6","ssdeep":"","tlshash":"2fe055aa1c07445a4020e2d0b0eaf5a916c8c226b584d920e6b821a8fdecb59dcd2a80","first_seen":"2023-04-16T20:26:12Z","last_seen":"2026-02-12T12:56:06.763929Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"content.etransfer.interac.ca/fp/HP?session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026org_id=bzmgl3t1\u0026nonce=3979f3a89c62db59\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx","fqdn":"content.etransfer.interac.ca","domain":"interac.ca","tld":"ca"},"ip":{"addr":"91.235.133.9","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content.etransfer.interac.ca","organization":"Interac Corp."},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Feb 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:D4:63:FD:BE:64:FD:36:CB:AF:61:06:42:7C:63:0A:D5:5D:3E:D0","sha256":"78:73:4C:9F:73:DF:D1:8D:E1:6B:23:2B:EE:60:81:18:70:55:56:97:4A:CF:31:7D:7B:91:5B:6C:63:33:4D:7D"}}},"request":{"raw":"GET /fp/HP?session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026org_id=bzmgl3t1\u0026nonce=3979f3a89c62db59\u0026mode=2\u0026hp=.co-operativebank.co.uk/CBIBSWeb/login.do.co-operativebank.co.uk/CBIBSWeb/start.do.de/portal/portal/x.entropay.com/basemenu/prot/x.facebook.comx.nationet.com/x.netbank.commbank.com.au/netbank/bankmainx.npbs.co.uk/netmastergoldbanking/x.nwolb.xlogin.aspx?refereridentx.rbsdigital.xAccountSummaryx.smile.co.uk/SmileWeb/login.do.smile.co.uk/SmileWeb/start.do.yandex.rux/CapitalOne_Consumer/x/easypay.by/x/sbank.ru/x53.com/servlet/efsonlinex://online.wellsfargo.com/x://secure.assist.ru/assistid/protected/main.doxabbeynational.co.uk/EBAN_ENS/BtoChannelDriverxalliance-leicesterxaltergold.com/login.phpxamericanexpress.com/myca/intl/acctsumm/emea/accountSummaryxbancaintesa.it/xbankcardservices.co.ukxbankofamerica.com/xbanquepopulaire.fr/xbnpparibas.net/xcahoot.comxcapitaloneonline.co.uk/CapitalOne_Consumer/Transactionsxcbonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagexcibc.comxPreSignOnxcibc.comxSignOnxcitibank.ru/xclient.uralsibbank.ruxco-operativebank.co.uk/CBIBSWeb/loginSpixcommerceonlinebanking.comxcoventrybuildingsociety.co.ukxdeutsche-bank.dexdiscovercard.com/cardmembersvcs/strongauth/app/sa_mainxebanking.bawag.comxebc_ebc1961xegg.com/customer/movemoneyxegg.com/customer/yourmoneyxfacebook.com/xhalifax-online.co.ukxMyAccountsxhalifax-online.co.uk/x/Mhalifax-online.co.uk/personalxhsbc.co.uk/1/2/personal/internet-banking/xhsbc.comxhttps://banking.postbank.de/app/finanzstatus.init.do;jsessionidxib.fineco.it/FinecoWeb/BonificiServletxib.fineco.it/FinecoWeb/jsp/Main/HBFineco.jspxib.fineco.it/FinecoWeb/jsp/Main/Principale.jspxibank.alfabank.ruxin-biz.it/xipko.plxlibertyreserve.com/x/historylibertyreserve.com/x/loginwww.libertyreserve.com/x/Core.jswww.libertyreserve.com/x/transfer.libertyreserve.com/x/commonscript.jslloydstsb.co.uk/personal/a/account_overview/xmbna.co.ukxmenyala.ruxmoney.yandex.ruxmoneybookers.com/app/login.plxmoneymail.ruxmy.ebay.co.uk/ws/eBayISAPI.dll?MyEbayxmy.ebay.com/ws/eBayISAPI.dll?MyEbayxmy.ebay.fr/ws/eBayISAPI.dll?MyEbayxmybusinessbank.co.ukxnationet.com/AppServices/SignOn/SignOnProcess/RcaSignOnxnpbs.co.ukxnwolb.com/AccountSummaryxnwolb.com/Statementsxnwolb.com/TransfersLandingPagexoltx.fidelity.com/x/x/ofsummary/summaryxonline.lloydstsb.co.ukxonlinebanking.mandtbank.com/summary/AccountSummaryxpassport.yandex.ruxpaypal.com/x/cgi-bin/webscr?cmd=_accountxpaypal.com/x/cgi-bin/webscr?cmd=_login-done\u0026login_access=xpaypal.com/us/cgi-bin/webscr?cmd=_login-done\u0026login_access=xposte.it/xpsk.co.at/xsecure.lloydstsb.co.uk/personal/a/account_overviewxsmile.co.uk/SmileWeb/passcodexusaa.com/xusbank.com/internetBanking/RequestRouter?requestCmdId=Gxwachovia.comxybonline.co.uk/ralu/reglm-web/setupSecurityQuestionPagex.amazon.fr/xhistory/orders/view.htmlx.banquepopulaire.frxShowPortal.dox.bnpparibasfortis.bexHome_Logon.aspx.cdiscount.com/Account/Home.aspxx.cmb.frxaccueil.jspx.credit-agricole.frxentreeBam?sessionSAGx.labanquepostale.fr/xreleveCPP-releve_ccp.eax.secure.bnpparibas.net/NSFR?Actionx.secure.lcl.frxAccueilxcredem.it/OneToOne/ebank/functionsxmijn.ing.nl/xonline.ybs.co.ukxwww.discover.com/xorder.cdiscount.comxCustomer.aspxxsealinfo.verisign.com/splash?form_filexvos-comptes.credit-du-nord.fr/CDC_TableauDeBord_0.asp?xvoscomptesenligne.labanquepostale.frxwww.x.caisse-epargne.fr/Portail.aspxxwww.exabanque.netxonglet.phpxdeutsche-bank.de/xnorisbank.de/xpostbank.de/xtargobank.de/x.x.de/portal/x.bankofamerica.com/x/commonscript.js.bmo.com/OLB?id=x.bmo.com/RMC?id=x.chase.com/x.aspxx.chase.com/js/Reporting.jsx.koodomobile.com/account/selfserve/x/xaccountId=x.payment.ru/x.scotiabank.com/portal/index.jsp?xbancopopular.es/empresasxcreval.it/login2007/loginSiciliano.aspxfirst-direct.com/xipko.plxmybusinessbank.co.ukxsanpaoloimi.com/xulsterbankanytimebanking.x/login.aspxx HTTP/1.1\r\nHost: content.etransfer.interac.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Wed, 11 Feb 2026 12:43:16 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Type: text/html;charset=UTF-8\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":190,"dns":97,"connect":20,"send":0,"wait":17,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"content.etransfer.interac.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f.txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","date":"2026-02-11T12:43:14.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/f.txt HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/plain\r\nlast-modified: Wed, 22 Jun 2022 05:16:28 GMT\r\netag: W/\"62b2a5ac-ad04\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44292,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1575)","md5":"a839478b897dc46cbd3e8f10728cfabf","sha1":"f5ede0208a8078b36fddac4c8e4e37e1daf39548","sha256":"067d7eec7321f8b947e16f7808bc46be7ba0c2998bbab10809ef101692b8f598","sha512":"1713f9bc8279daa20a5232d046ce55ec69ec9f7603e711cfdc4a6b31b989ce66d1beeb615a5294602081a7b89027f2c297ca49adf50d625f49d332a09b9097ef","ssdeep":"384:oI/fi2DS+4Nj2nwUD2XCNhSgxKkQHAtKKcPZHSfTD2tEa/51HNAjXCxkPACcCY9f:oIS2DJ4Cnwe5KkCe91VaPtAmxEabpv","tlshash":"3d130acaba91b06bc3a350a4103f090bf37e9a99a88cd4d0d645d5d46d34bdd02b7fad","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.751113Z","times_seen":10,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"wss","addr":"gc.kis.v2.scr.kaspersky-labs.com/7D8B79A2-8974-4D7B-A76A-F4F29624C06BAbB305sJmTtnsmg-e5CCiHDJ3uPo6_Jfb2ZM7EYAeZbR-wiJ4WhJkmNTnccsAeH1lv1XNocXPdntnuGBBR9pEA/websocket?url=https%3A%2F%2Fmon-espace-securise-interac.com%2FUpdateVerifyPrss!%2Ffiles%2FHP.html\u0026nocache=1770813795711","fqdn":"gc.kis.v2.scr.kaspersky-labs.com","domain":"kaspersky-labs.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/HP.html","date":"2026-02-11T12:43:15.755Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /7D8B79A2-8974-4D7B-A76A-F4F29624C06BAbB305sJmTtnsmg-e5CCiHDJ3uPo6_Jfb2ZM7EYAeZbR-wiJ4WhJkmNTnccsAeH1lv1XNocXPdntnuGBBR9pEA/websocket?url=https%3A%2F%2Fmon-espace-securise-interac.com%2FUpdateVerifyPrss!%2Ffiles%2FHP.html\u0026nocache=1770813795711 HTTP/1.1\r\nHost: gc.kis.v2.scr.kaspersky-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mon-espace-securise-interac.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 5Ll2vAw0sBg2CduJBif0nQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/clear(6).png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/clear(6).png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 81\r\nlast-modified: Wed, 22 Jun 2022 05:16:40 GMT\r\netag: \"62b2a5b8-51\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-07-26T01:19:36.280536Z","times_seen":22281,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/clear1.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/sid_fp.html","date":"2026-02-11T12:43:15.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/clear1.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/sid_fp.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 0\r\nlast-modified: Wed, 22 Jun 2022 05:16:28 GMT\r\netag: \"62b2a5ac-0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f(1).txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","date":"2026-02-11T12:43:14.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/f(1).txt HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/plain\r\nlast-modified: Wed, 22 Jun 2022 05:16:30 GMT\r\netag: W/\"62b2a5ae-86f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2159,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (2159), with no line terminators","md5":"9576b39c96ed92359662d941ad58deef","sha1":"b6eeecea12c1c638f08d410b66dbf9c7231392f9","sha256":"2ed5433ccc82d0a263a7cccf5bc3492e8486e6d9060a2c4451d5680e7fba250f","sha512":"de6f0ff24353654270a513fe52a9f0b9b3fe828951f672f6ba899f251fbccea335e64d5eacfac12d86dc01f28a92a266f5bf279e7457c8cc03c7db0999c9461b","ssdeep":"","tlshash":"e041b4e1f370240702e156703b7e3d0fb529add28ac4e280ba21c8448adea5720cbb94","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.739493Z","times_seen":10,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5SR238","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:36:59 GMT","end":"Mon, 13 Apr 2026 08:36:58 GMT"},"fingerprint":{"sha1":"37:54:14:A5:9E:4F:27:5F:F2:97:D2:04:B1:AA:A1:65:D1:2C:ED:13","sha256":"92:82:66:19:78:D1:42:C8:D6:E0:6B:CE:1E:2A:0E:F2:F5:B0:F5:8E:3E:BD:65:EC:49:BE:4C:5F:6A:29:27:D2"}}},"request":{"raw":"GET /gtm.js?id=GTM-5SR238 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\nexpires: Wed, 11 Feb 2026 12:43:15 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 11 Feb 2026 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 151745\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":452528,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14367)","md5":"36225c297fc74e9adc7826612586106e","sha1":"467d82f837ae10c08f11ce7c6ec7c5fa33dd39e2","sha256":"e37443fbd1829f1bb230ae6bf596d671c11fd475cf92dd4494df5d8ebf5e105e","sha512":"dd998bca51838e27f5686c263b566c7d3a126c2c96624230f65af144ab655c85d78c6f8aee803ae6b8f0ab288d6cc33e367f740d1a4c1144ca7ac5b805cb06a6","ssdeep":"6144:95VmOygdh3cUIEBU8EVnbzeBe19vgMU0tQ3JLf2Ab+i:9mZgdR2EBU8+3e0tQ5Lh+i","tlshash":"f5a419cdb3d6742683a3a078903f014ba17b69e2b44cd895f189dce42e709aa5173f7d","first_seen":"2026-02-11T12:43:43.697424Z","last_seen":"2026-02-11T16:07:56.097833Z","times_seen":2,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":136,"dns":6,"connect":21,"send":0,"wait":47,"receive":61,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.interac.ca/favicon-16x16.png","fqdn":"www.interac.ca","domain":"interac.ca","tld":"ca"},"ip":{"addr":"45.60.87.208","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.interac.ca","organization":"Interac Corp."},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 10 Apr 2025 00:00:00 GMT","end":"Tue, 21 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:D2:82:91:65:21:AC:20:C4:BF:95:05:91:AE:16:B5:6B:7E:E6:AF","sha256":"87:58:9F:B0:44:F8:DD:A7:7B:54:74:E8:15:F6:6B:24:EB:9C:6D:56:CF:01:23:A9:A6:75:A3:B6:A0:E6:5A:C1"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: www.interac.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"67337457-377\"\r\nlast-modified: Tue, 12 Nov 2024 15:29:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 590\r\ncache-control: max-age=31002176, public\r\nexpires: Fri, 05 Feb 2027 08:26:11 GMT\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\nset-cookie: visid_incap_1659541=8gXZwFy6SrGiZQd/pl4eQGN5jGkAAAAAQUIPAAAAAADKlIKI0t8zCyLWY3D1MEel; expires=Thu, 11 Feb 2027 01:45:55 GMT; HttpOnly; path=/; Domain=.interac.ca; Secure; SameSite=None\nincap_ses_721_1659541=+ew8I3WVUUeU80p6KYIBCmN5jGkAAAAA8K+1ipRjlS1vObS7q2wdkA==; path=/; Domain=.interac.ca; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-cdn: Imperva\r\nx-iinfo: 10-1448042-0 0CNN RT(1770813795907 30) q(0 -1 -1 0) r(0 -1)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"f51c9a0a9cfb1a5423f05a968ac52aea","sha1":"04d2cb4ccf8fbc384b1d37b6b0458700c75b359e","sha256":"31983ed94336de683ede81b0103b0dd56edf80ebe8e770349a2db9ef0d16b749","sha512":"398c6f9f52b246910637ef3e79c3ddd9a8b519df40a27e69a1001d479836cbdd33604a77239a4dcc2e72716a657273905d9e0e7e2145d56070cfd9ca176da819","ssdeep":"","tlshash":"4cf0e1c1f356782a975f127198d3b5d21c74205be57c08976c2cbc647ca5a42a2f278e","first_seen":"2025-01-02T15:47:04.37122Z","last_seen":"2026-06-04T03:14:34.200836Z","times_seen":29,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":107,"connect":21,"send":0,"wait":23,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/analytics.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/analytics.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 50205\r\nlast-modified: Wed, 22 Jun 2022 05:16:30 GMT\r\netag: \"62b2a5ae-c41d\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50205,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (1325)","md5":"d40531c5e99a6f84e42535859476fe35","sha1":"a901817d77b2fe5259c298c91bc65c54d7f8a1a9","sha256":"a1925038db769477ab74b4df34350c35688a795bb718727b0f4292a4a78a6210","sha512":"0a0272b56df74d6cad69f3c56392e0eefae0516839bc487c1dc9f7bba922c9e29f942e95bd280b14c2f21f1f264392b68b47fe379eec7375ddad3c107fcf9afb","ssdeep":"768:Yan91xe8BCwsN7sP5XqYskqYyPnHOlTjY3SoavbVvKHmCgYUD0ZTXEwyVfZs6:Yanxx1r5hsvlHO9Y3So37UwyV9","tlshash":"09331af9b7427456c2a271e4403f1007a07eedc5f449d8e4a54ad6d46d38eab02fbf68","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-21T12:49:34.770599Z","times_seen":434,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/TMHeader.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/TMHeader.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: \"62b2a5b0-0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/searchCSS.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/searchCSS.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: W/\"62b2a5b2-1b8a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7050,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7050), with no line terminators","md5":"5daf81157b0f5d3be80d98f01896bf61","sha1":"a21c573b4abe32ce8b725ab5f842417124c98449","sha256":"1910ce190905cd2d7bc3d086866c3428f9582378ccd200cc6d205bce83a56f56","sha512":"059eba185a1fbf0563259496162d40011f03a7e4f10677db37df726538b2d4b4de9cefc9a45e694543e5bda01ea3a696d14735b8b36674d5cf940b3b96ea4c86","ssdeep":"192:cSdT09gjwnt/Z54bWhuq1LKsLLG7aKkFHR:JT09gjUmbWQq1msPuaKkFHR","tlshash":"f9e13e33d484109fb033ef9ae4c2ffe96035c022ea1b06f8aa906560cb47fa55937649","first_seen":"2023-04-07T07:46:23Z","last_seen":"2026-02-12T12:56:06.733268Z","times_seen":27,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000614_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000614_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 7148\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-1bec\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7148,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f93c07fc45ff4b4be039e72da0675c2","sha1":"42204b74fad2757af07aa5cbc11ba69314a097d5","sha256":"da103dbb9c83919e677d0c4de46025b4c4153daadb6e27942a65d5723f3a338f","sha512":"4759e8564bb9ba2442b382c97547d8652db9a1171368cf9fd0137604e9f4558129c4aae6176a514cf3afb0cb4c3a0725164af8e3a2b43c369d2a6230038f5e1c","ssdeep":"192:hTkfqGHIuqcE6vcJOLoFEqpMgHpm+OWFKtP0sW:hYttBvcJOLoFEqpMgHpm5WFKJFW","tlshash":"fee12f1253ad9abb9da6416e72302cd674e9cc4f9370e0a0b4af3437e15e9c0905cfe9","first_seen":"2023-05-13T03:46:21Z","last_seen":"2026-05-30T18:26:18.729563Z","times_seen":93,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"content.etransfer.interac.ca/fp/clear.png?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59\u0026ja=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\u0026jb=3333312464713f456772696c6c692532443726322732322055696c646d75732530324c5427303233382e322d3b4a2532305f696e34362d31402530387a3636253140253232707425314333313c2e32212d3a3047656b6b6f27304e303231323833303325303246697067646f7a2730443933362638","fqdn":"content.etransfer.interac.ca","domain":"interac.ca","tld":"ca"},"ip":{"addr":"91.235.133.9","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:16.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content.etransfer.interac.ca","organization":"Interac Corp."},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Feb 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:D4:63:FD:BE:64:FD:36:CB:AF:61:06:42:7C:63:0A:D5:5D:3E:D0","sha256":"78:73:4C:9F:73:DF:D1:8D:E1:6B:23:2B:EE:60:81:18:70:55:56:97:4A:CF:31:7D:7B:91:5B:6C:63:33:4D:7D"}}},"request":{"raw":"GET /fp/clear.png?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59\u0026ja=3335313b2e266135382e7a3d302e663d333030327a31323a362663663f333238327a33303036247170793f3870382664707a3d312e333a3a322c333830342e31303a302c333230342e33303a382c33383a3c2c313230302c33323a362e302e38246d763d3035663533663131363b67346a663038316a3636626c3338356038636433613c246d6c3d30247363663f3034246e6a3f607476787b2d3341253a46253044656d6c2d677b726161652f71656377706b73672f6b6c7c6570696b26636f6d2d324657726c637665546d706964795270737323273046646b6e677b25304e7c6967732e60746d6e246c703f68767c72732733432732462730446d6d6c2f677b70636b6d257365637d72697167256b6c74677a63632c636d6f253244577264637667546d726b6e715872737329253244273b4469657b2d31443b3461303634643a6635373a606030333b3e3c3a6433336d636132373b3b3562616c32633061643126706e3f3726726a3f673030306c6e6935353539393364366d6067383b3131656034633b39323b3266266a6a3f636933376d3f696538353b323561603b313335336b34656663373334616661302668716d3f5f696c6c677f73253238313024687b603f466b7a67666d78273030313136246a716d773f5f696c6c677f73266e60633d363a2e7678643f5d5643246d637668723f35336637363a673c62313e38306266646e62383b61313b3466646c366635306433326167316636346366643c323b3b3d3e6239663b626334353f603066673a6426723d726e75676b6c5d666e63716a566663647b6d21706c7d67696c5d7f6b6c646d7f715f6f65666b615f726e637967705c64696c716d29786c7567616e5f63666760675f636b706f6061765c66616e716721726e7765616e5d797d61636b74616d655c64696e716523786e7565696c5d73686d6169776374675c6e616e7b6d29706c756f696e5d706d636e706e697b65705e64636c736723726c77656b6c57766e6b57786c61796d725e646364716721726477676b6e5d666576636e74725c64636e7b652378647d67696e577376655d7e6b6777677a5c66636c716721706e7765696c5d68637e615c6e69647365266f6c5f613f7f6760676e5f6762454c273030312c32556560454e273a3045445b442532304d53253032392c324d6d726b6c6e616e6e766d726b7265434c454e4d5f6b667b7c616e636d645f63707a637b73273b40253030475a545f606e676e665d6f6b666d63702d3b422532384558565d6b6d6e6f70576075646667705f68636e645f646e6d637c25314a2d3a3045585c5f666e6d69765d626e6d6c64273340273230475a565f64706365576467787c602533422d3230475a5c5d7168636c67725d74677a747570675d6c6d6627314a2530384d50545f735a474227314a2730304750565f76657a767572675d616f6f7270677b736b6766576270746b253340273a324758565776657a747770655f616d6f7070677171616f6c577a6f7463253b422530324d5a565f766d7a747772675d66696e7667725d636c6b7b6f767a67786963253b422530324747515f6764676d676e765d696e66677a5f776b6c762d33402d3a384f45535766626d5d7a676c64677a5d6d6b706f63702531402732324d475157737669666c617264576465706b7e637669746d712531422730304f47515d74677a76777a655d6e64676174253b422530324747515f766d7a747772675d666c6d63765f6e6b6c676972273b4a2d32304f4d535f76677076777267576a616e665d646c6f6376273340273032474551577c6d7874757a655f6a6364645d666e6763745d6c6b6c6561702731422730324d4d535d7e6d7a7465785761727063715d6d62686d6174273340273230554740474e5d616d646f70576a7d6666657a5f666e6d69762733402d3030554540454c5f616d6f70706771716d645d7c6d707475726d5f6171766b273142273a32574742454e5f636d6f7272677171676c5f766d707c75726557657461273b402732325f4742454c5d616f6d727067737167665d7c657a7c7d7a655f733b746327314a273030554d40474e5f616d6d707067717367665d766d78767d7a6d5f73337c635f71706f602733402d3030554540454c5f66676075655d70676664677a6d7a5f696e6e6f2531402d303257474a454c5d64676075675d716a61666770712d33402d3a385745424f4c5f666778766a5f766d7a74777267273342273032574740454e576470697f576275666e657271273b402732325f4742454c5d6e6f73675d616f6c76677a7c31342e6f645f683d386436366739676165316b353067303a60353730353538333261326e3564696e306134363d376167247f656e763f456773632675656c723f6e6e766f726b726d26616b6c35333336313033\u0026jb=3333312464713f456772696c6c692532443726322732322055696c646d75732530324c5427303233382e322d3b4a2532305f696e34362d31402530387a3636253140253232707425314333313c2e32212d3a3047656b6b6f27304e303231323833303325303246697067646f7a2730443933362638 HTTP/1.1\r\nHost: content.etransfer.interac.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/\r\nCookie: visid_incap_1659541=8gXZwFy6SrGiZQd/pl4eQGN5jGkAAAAAQUIPAAAAAADKlIKI0t8zCyLWY3D1MEel; incap_ses_721_1659541=+ew8I3WVUUeU80p6KYIBCmN5jGkAAAAA8K+1ipRjlS1vObS7q2wdkA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Wed, 11 Feb 2026 12:43:16 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nKeep-Alive: timeout=2, max=95\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"content.etransfer.interac.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T12:43:14.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: ./UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nset-cookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.2.30, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":118762,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":47,"dns":2,"connect":19,"send":0,"wait":199,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/jquery.mobile-1.4.5.min.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/jquery.mobile-1.4.5.min.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 199950\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: \"62b2a5b0-30d0e\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199950,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d140ae612cb9b8244a1587a57b4fc5b4","sha1":"ad8f70d65efb2d4360b9c184cefa56d50e7a1586","sha256":"8b566be194d8bccfc0a15032c75598fa8f96065c72d293316c25fd920d7cc019","sha512":"476c45b55b4f8c5d2521e293441d5e7d04145827e0efee9937aafff9727082cd5158f4484e79c471548491fb441a200bacba82c1b1030f70707e9105ced0fffd","ssdeep":"3072:MECZgGiRTumVYKNpGU3Utf//GABVIkBE5Rf1nB:ME6oumVYk73wG4WRf1nB","tlshash":"99140a48b2813253b8af14aa307b1507e13765add508486db079cdde9ebde482277f3e","first_seen":"2023-03-07T16:02:58Z","last_seen":"2026-05-23T17:52:21.419679Z","times_seen":49,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/generalCSS.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/generalCSS.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: W/\"62b2a5b0-4242\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16962,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16962), with no line terminators","md5":"d534c27e189b0a49e098a6ef33477f73","sha1":"38b00b0851ed7ea9dcde514cd680c599afce7be8","sha256":"169ab263f661ef50eab404e6be618a16523d35822615ebb6d9d29228945ea7d5","sha512":"ee4982c9b327b3d5d482ec0db4b1e129cac99c30a39f3670daae06c14e5f271c725735fb74c91d0f67e0c075f31bff92fe1ef67f32cbde3691a5e354eaf732aa","ssdeep":"192:rCajJRuPUtk+Atwb9C/ULzXC9+fUwyULnd/oiFu:D1RuPUtgwI/ULjC8Pu","tlshash":"c67203a953003119dde68f607af0ef8eb703032d9286366f5417587ccb8e4a91576bde","first_seen":"2023-04-07T07:46:23Z","last_seen":"2026-07-01T01:20:22.778587Z","times_seen":376,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000320_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000320_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 11073\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-2b41\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11073,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e94f356870942470ef28ac237726d31","sha1":"7607f7b2695c9849b7b21a515e85681ca455723b","sha256":"1b8f8a557b59ec01d3db03ab3317224334cd692c7a4ba3f455181f90220795a7","sha512":"60b75bc3c4a2a8d4a13811b86b9b87a3942e7b503e30d39a0cdb217c60308fe91b0b7a17a19d8d391a51e5d3c52014dec72f8575755ff8dcaef39559a0225037","ssdeep":"192:M3LknpgYd4Vqaohd1OuWPQepsVVCQ8ux6oXukLqFtRxhj0Y2:MwpyTohNf0sVVCF03+QSHi/","tlshash":"d6320acd63a406f0a50e83a490905856387664efbb50c27cfa7d6ef4bf13dd886988c3","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-05-30T18:26:18.740404Z","times_seen":99,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"content.etransfer.interac.ca/fp/clear.png?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59\u0026jac=1\u0026je=33313b242e7767613531312e39382e34302c3937362672653f796773246375646a3f6666373660373c303a383d3d6364356d6236323b6b6167646169373635323467633533323463343a37343a38616d316c30393731363631333c323033336c663224657a313d37343166393b3664613c3635316b6b3137626b653367663132606534693062306663326365316434","fqdn":"content.etransfer.interac.ca","domain":"interac.ca","tld":"ca"},"ip":{"addr":"91.235.133.9","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:17.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content.etransfer.interac.ca","organization":"Interac Corp."},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Feb 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:D4:63:FD:BE:64:FD:36:CB:AF:61:06:42:7C:63:0A:D5:5D:3E:D0","sha256":"78:73:4C:9F:73:DF:D1:8D:E1:6B:23:2B:EE:60:81:18:70:55:56:97:4A:CF:31:7D:7B:91:5B:6C:63:33:4D:7D"}}},"request":{"raw":"GET /fp/clear.png?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59\u0026jac=1\u0026je=33313b242e7767613531312e39382e34302c3937362672653f796773246375646a3f6666373660373c303a383d3d6364356d6236323b6b6167646169373635323467633533323463343a37343a38616d316c30393731363631333c323033336c663224657a313d37343166393b3664613c3635316b6b3137626b653367663132606534693062306663326365316434 HTTP/1.1\r\nHost: content.etransfer.interac.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/\r\nCookie: visid_incap_1659541=8gXZwFy6SrGiZQd/pl4eQGN5jGkAAAAAQUIPAAAAAADKlIKI0t8zCyLWY3D1MEel; incap_ses_721_1659541=+ew8I3WVUUeU80p6KYIBCmN5jGkAAAAA8K+1ipRjlS1vObS7q2wdkA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 12:43:17 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"content.etransfer.interac.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/Vancity.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/Vancity.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 4380\r\nlast-modified: Tue, 05 Jul 2022 00:46:18 GMT\r\netag: \"62c389da-111c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4380,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 406 x 124, 8-bit colormap, non-interlaced","md5":"a4687745c721e7ea9863834a33227657","sha1":"1a07e225ed216ec49f3831ecc206e137a000c1b3","sha256":"b152aca67b0971cb7ae8fa3fdb2949fc8538ea26e12901cbd307aa4f1a2d6c7c","sha512":"97ef1dbd7b32ab741e8783fbd8ba53c399ee5fcc4611ef1973f36ab8cb77904678f82fa1b22191d06a097ddfbf7d31c719793125104828d71bd6cf100e8b17a9","ssdeep":"96:wDfjjDc7xCAasgdvfm4XcAIens1bFZR21B+IkKNEp34gt:sjQb9gdHcfv1RZR2NipIgt","tlshash":"1a918ec3c9940d250efd1b77a70c08b10656a21271d9b16e44d8b6ff38d9836a3275e8","first_seen":"2023-04-16T21:32:09Z","last_seen":"2026-04-29T21:48:25.064963Z","times_seen":14,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/clear(3).png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/clear(3).png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 0\r\nlast-modified: Wed, 22 Jun 2022 05:16:36 GMT\r\netag: \"62b2a5b4-0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/HP.html","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/HP.html HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jun 2022 05:16:48 GMT\r\netag: W/\"62b2a5c0-1096\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4246,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3904)","md5":"d4eb3165348626eabb7359363ed8b0bf","sha1":"f07af35101c22986011c718fdfad3b2fe11ad0a6","sha256":"13b06c0eb76174d2d8a742c68c930cc8be7d7d641e282b30e2988bbba9db1500","sha512":"c347ae1f03a7ac897882ab82d940b9e40bea2e5aeb9a7cbe19de7c9e096b5f7526dc070cd2deaa70abacac793d9e76aceee88721c25fb918a68a4c1bfbbd45e9","ssdeep":"96:ZXKD27UHynD+thMbijyD+iioRa0i8LnYzhFtfX:ZqVynD+rMefawFtv","tlshash":"ba91d89358282c196df20e4450acf77d6f58810654d8cecdbbbce4607bc1687f868815","first_seen":"2023-04-16T21:09:19Z","last_seen":"2026-02-12T12:56:06.771082Z","times_seen":10,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/EQ_Bank_logo.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/EQ_Bank_logo.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 4332\r\nlast-modified: Mon, 25 Jul 2022 13:50:56 GMT\r\netag: \"62de9fc0-10ec\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":4332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 78, 8-bit/color RGBA, non-interlaced","md5":"2e03e78781f99104915e1c935d17e894","sha1":"71786cb9238ab957f7dbf9015ea9ae491fd9bbc9","sha256":"59c27ab9305e49c867f53f80c896083d4d4c31e2f27516f47c265da7673f4107","sha512":"fc09a25b8cd4b2fb5b602e4608091922b9d807112e78dccdd1745d07d20c76fe70b40d3813213c83d0bc494386ed0dfd6767102c1cf56c7ceb4ddadf70225009","ssdeep":"96:Jk2SFI8lgVRF7E2UhT0kLw334zq5hke2P9P0l:JHjFVURnZei9P0l","tlshash":"c1913cadf984d014ab4aa9c72cd7f8ab5c2545814cc422173bd79d63041407a898d4f7","first_seen":"2023-04-16T21:32:09Z","last_seen":"2026-02-12T12:56:06.743372Z","times_seen":19,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/check.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/check.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 283759\r\nlast-modified: Wed, 22 Jun 2022 05:16:42 GMT\r\netag: \"62b2a5ba-4546f\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":283759,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (17242)","md5":"307fc61d9d0866fb7377118aacce1458","sha1":"511c2b575377831f606272077672bb55f607a95f","sha256":"14f80718e5005902a04ec2a6f235e849f2da7108ba844747730ef8beb667b301","sha512":"77eee25bfe82b44a3f0c8affde745ab8b25313d23f8a40834292a93984f93f328fc80ae079c5ee6bbe712bbbcc0671d4c9381ec22d4b6782baf43114d5fdb86c","ssdeep":"1536:3rnd3DAm6FDKTP5bWQlWQKWQIWQ7WQQWQzqV87Gaf0nxuLu17nmnumdUTwNrQq:3rd3K7GFxSz","tlshash":"8a5463ea29e2d062403f1c91174f4acf602cd4b38784d32af5807da86cb5659dbb7dad","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.747451Z","times_seen":10,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"wss","addr":"gc.kis.v2.scr.kaspersky-labs.com/7D8B79A2-8974-4D7B-A76A-F4F29624C06BAbB305sJmTtnsmg-e5CCiHDJ3uPo6_Jfb2ZM7EYAeZbR-wiJ4WhJkmNTnccsAeH1lv1XNocXPdntnuGBBR9pEA/websocket?url=https%3A%2F%2Fmon-espace-securise-interac.com%2FUpdateVerifyPrss!%2Ffiles%2Fls_fp.html\u0026nocache=1770813795718","fqdn":"gc.kis.v2.scr.kaspersky-labs.com","domain":"kaspersky-labs.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/ls_fp.html","date":"2026-02-11T12:43:23.568Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /7D8B79A2-8974-4D7B-A76A-F4F29624C06BAbB305sJmTtnsmg-e5CCiHDJ3uPo6_Jfb2ZM7EYAeZbR-wiJ4WhJkmNTnccsAeH1lv1XNocXPdntnuGBBR9pEA/websocket?url=https%3A%2F%2Fmon-espace-securise-interac.com%2FUpdateVerifyPrss!%2Ffiles%2Fls_fp.html\u0026nocache=1770813795718 HTTP/1.1\r\nHost: gc.kis.v2.scr.kaspersky-labs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mon-espace-securise-interac.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /nCftQCqswclKBqgpI6nIg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000010_000030800_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000010_000030800_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8314\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-207a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8314,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9d750fef360c62a3f5367f390aa098c","sha1":"56d8699bb0f3f685c9a971c83db5058180637f77","sha256":"03718ae41439cbc96301b537afde16f0c5a5da254a766f5ab0e968b212957278","sha512":"013db96e779e2959c7744e3f82e40bb9c9b66a2e65f894a023d0d8eab36fc3ea71b3cc5efd1b123605f8561b23ad454254248cacb6e48e93c2b7bb404284962d","ssdeep":"192:WQANygV5r1D44dMCSWi6mNVzBqoInpolgD4zdv9U9OZ:WQANywF44dMCSWYVwYI4DU9OZ","tlshash":"240285d9033d92e07ad61f1479353bcf3775289aad729250e36b69069143fb63a1ce20","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-02-12T12:56:06.738028Z","times_seen":26,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/activityi.html HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jun 2022 05:16:48 GMT\r\netag: W/\"62b2a5c0-eca\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3786,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1166)","md5":"e3e86f9944c46da2915e5374e608cec7","sha1":"08184245302351cc083f88dddca12fc98bc5a738","sha256":"a44d4785fdd309dcb1aec2b49f4401399d232d0820a494226adca54f5751a72d","sha512":"c14adc8920869eec17527d511d741f0a08c22ad55aa11a6f05ad799e7b0f34ab00e64e4efb640485047b29dce05ab2b7be07ace307340eca916d6803888a24f2","ssdeep":"","tlshash":"8671304a7c498047d25f42e49af9f90c5f57ca1986c0c89afad9c429a3c03ce08927fc","first_seen":"2023-04-16T20:26:12Z","last_seen":"2026-02-12T12:56:06.735393Z","times_seen":9,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery.mobile-1.4.5.min.js","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery.mobile-1.4.5.min.js HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"content.etransfer.interac.ca/fp/clear.png?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59\u0026jd=3734242462666c353f2e6a6668356262323569366638633061366032663b656260646037353761646d66346d3831266a667c6e3d32383c373b3a35","fqdn":"content.etransfer.interac.ca","domain":"interac.ca","tld":"ca"},"ip":{"addr":"91.235.133.9","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:16.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content.etransfer.interac.ca","organization":"Interac Corp."},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Feb 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:D4:63:FD:BE:64:FD:36:CB:AF:61:06:42:7C:63:0A:D5:5D:3E:D0","sha256":"78:73:4C:9F:73:DF:D1:8D:E1:6B:23:2B:EE:60:81:18:70:55:56:97:4A:CF:31:7D:7B:91:5B:6C:63:33:4D:7D"}}},"request":{"raw":"GET /fp/clear.png?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59\u0026jd=3734242462666c353f2e6a6668356262323569366638633061366032663b656260646037353761646d66346d3831266a667c6e3d32383c373b3a35 HTTP/1.1\r\nHost: content.etransfer.interac.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/\r\nCookie: visid_incap_1659541=8gXZwFy6SrGiZQd/pl4eQGN5jGkAAAAAQUIPAAAAAADKlIKI0t8zCyLWY3D1MEel; incap_ses_721_1659541=+ew8I3WVUUeU80p6KYIBCmN5jGkAAAAA8K+1ipRjlS1vObS7q2wdkA==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 11 Feb 2026 12:43:16 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nContent-Length: 0\r\nKeep-Alive: timeout=2, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"content.etransfer.interac.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/jquery.mobile.structure-1.4.5.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/jquery.mobile.structure-1.4.5.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: W/\"62b2a5b0-10c68\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68712,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65398)","md5":"1544ca9f803edff31be0577b9f985853","sha1":"12db16f24c602523fe6610221b56928fc090da96","sha256":"e1d94776078325c58b4cd50eedb8a10e8db7860d5d353618934b117057f8db8c","sha512":"c9c6252ea1d35cf46870a155f2dd02e5f5304efba2bfee26e641d64cde63b9490e88610922a96a36d3c2c217ca6859701fe75f41d291c213829c8db376cfdd98","ssdeep":"384:YoRsUjcdJqaj/saFXxCqyFZGCqyFZDCXoOULU/J4cW/GaqhUacdJmaj/scGaTJj6:SUbaFXxCqyFZGCqyFZDOIyWjMueQo/v","tlshash":"b66397b182512218fd7bca07bbd4ddf8d628cb23f52348fef241650a8781ad5137b52a","first_seen":"2023-04-07T07:46:22Z","last_seen":"2026-07-24T12:56:05.4864Z","times_seen":212,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000809_038860000_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000809_038860000_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5076\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-13d4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5076,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d3eb118d9adb15d5076ef3d619f0fbb","sha1":"7ca9a973036b64fc89e334b56543f3a7af6beacf","sha256":"eeee06dc7ba17e58ad4d75cadb3e2ee7964bcd30b6d583c6e99c96d03f4f2c4a","sha512":"ce957f2c12a24e3b253fbb0a13d0781f5d6438e4a994a36cf246ae2f5f357425c0326555e5a1f6e51afcb852dad575d96a2a18f47a63eef4838879002049d7c2","ssdeep":"96:kT+fGVBFYlZbQBdOCZoodNSk/x3rOok7hByAn:36YXbQBd9ZoiNp3FmhByAn","tlshash":"d0a185e39718d6d79a900a99cb7c2b933a31c06d5bb487ec832a8577701b82522489fc","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-02-12T12:56:06.746434Z","times_seen":46,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/main.js(1).download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/ls_fp.html","date":"2026-02-11T12:43:15.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/main.js(1).download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/ls_fp.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 108244\r\nlast-modified: Wed, 22 Jun 2022 05:16:48 GMT\r\netag: \"62b2a5c0-1a6d4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":108244,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (390), with CRLF, LF line terminators","md5":"77d17803adb61852f507ecaa6a5f87d1","sha1":"9a96ffbc439f96869eed08a910981ddb90a4009b","sha256":"970188560f2e5afd072ee006c54cf249992c651de9536b67bef628b7493c0463","sha512":"ab9cdde5b52246d80bd37f42ba815576c08fdcaeace6fef694d4a0a88935300e4229e80581f6b24baa4afd0f9707958644536dfd4989a404a1845cf85cc547a5","ssdeep":"1536:YQy8SVA+9c4+Yw7P07zh7aE7aabFXcGR/zoIU3dhLew/LywkvbSjpRvdnmNa:YVEmNa","tlshash":"45b3960ea9512163c973f33edfab4609f9376163242a91127e6cd2d46f7086883a5fdc","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.732511Z","times_seen":10,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/clear(2).png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/clear(2).png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 81\r\nlast-modified: Wed, 22 Jun 2022 05:16:36 GMT\r\netag: \"62b2a5b4-51\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 1, 8-bit/color RGBA, non-interlaced","md5":"1b6d2de2867a3e11063ba25aa1cd4209","sha1":"bd20b0e089f31f35cba4d0fa7277e73aa74d944c","sha256":"95518cbec0d55a574a9c8ef72a2a7d62ac0d40a4de5dfe67a76a7d214dc8b743","sha512":"d30ac99b9140393cb2ea8eb09f0c69f6107ca5940ddf208b5ec1dd6d5abdab37fc60a892aa397579da75b450965ade6d37ee84c55550b42dd86f7aa26d99ab88","ssdeep":"","tlshash":"39a024f3d3030c35cfd50137c4771100fc34d10d0101c00c0c05713310155444c44707","first_seen":"2023-04-07T14:22:46Z","last_seen":"2026-07-26T01:19:36.280536Z","times_seen":22281,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000815_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000815_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2850\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-b22\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2850,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ff46b531b94d14311e793571203dbe8","sha1":"2c0c159b2cef7bcc50ba8d24a5819cc872fb69f6","sha256":"95f35aa0c2e2585bee1a80fd70e62cd0280f24c1d16f79a2e0fb5913d5885b75","sha512":"6659a43943730a3e6b8acba0c154237179cf39ab7b602eff75734b1e826de705466d255af63fb6305ac4942e4ef0f848ad984364c741a3cf92c8093217b34ac2","ssdeep":"","tlshash":"7a5121bf17286ab6a1564f844d5c30ca7bb849d6f3b8e1d8cb936436ee06977c071c02","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-05-30T18:26:18.704541Z","times_seen":86,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000016_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000016_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3630\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-e2e\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3630,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7adf1bcc117689b8534939d95acc54f9","sha1":"f3a5af04226173dcd8285164aa2e5c536c8ff30d","sha256":"8b8274fc17587fdf0bcd987f90058e19ad3904c397121683a509056b16ca856f","sha512":"24d154422df8cff7fea62d912c41fc90d7c5fff0f8a9c775c70d729ec301eaae6381d6c8f60fea6919ff488311862e5e8d19f5ca5559f4282c51bd52c7bbf1f2","ssdeep":"","tlshash":"6871474a635ce5efb967212ea17038c676aafc85d62094d0777b2033f44d4e051adf6c","first_seen":"2023-05-13T03:46:21Z","last_seen":"2026-02-12T12:56:06.737279Z","times_seen":42,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f.txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","date":"2026-02-11T12:43:15.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/f.txt HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/plain\r\nlast-modified: Wed, 22 Jun 2022 05:16:28 GMT\r\netag: W/\"62b2a5ac-ad04\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44292,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1575)","md5":"a839478b897dc46cbd3e8f10728cfabf","sha1":"f5ede0208a8078b36fddac4c8e4e37e1daf39548","sha256":"067d7eec7321f8b947e16f7808bc46be7ba0c2998bbab10809ef101692b8f598","sha512":"1713f9bc8279daa20a5232d046ce55ec69ec9f7603e711cfdc4a6b31b989ce66d1beeb615a5294602081a7b89027f2c297ca49adf50d625f49d332a09b9097ef","ssdeep":"384:oI/fi2DS+4Nj2nwUD2XCNhSgxKkQHAtKKcPZHSfTD2tEa/51HNAjXCxkPACcCY9f:oIS2DJ4Cnwe5KkCe91VaPtAmxEabpv","tlshash":"3d130acaba91b06bc3a350a4103f090bf37e9a99a88cd4d0d645d5d46d34bdd02b7fad","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.751113Z","times_seen":10,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery.mobile-1.4.5/jquery.mobile.structure-1.4.5.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/f(3).txt","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html","date":"2026-02-11T12:43:14.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/f(3).txt HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/activityi.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/plain\r\nlast-modified: Wed, 22 Jun 2022 05:16:30 GMT\r\netag: W/\"62b2a5ae-86f\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2159,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (2159), with no line terminators","md5":"d23912aa5e4ad997be9d32a7c00c6e73","sha1":"c82195223f01ee0101e1772e7462b184178cf391","sha256":"bb754885c67a31a825509dee5935d948f3f816608adfd31bf7b16b04b89df0a5","sha512":"6dafd482f233a2a9c9c561918bc5a99677da13647e85dd3ee48cf620f3cd5d5a9620a60f7bdede1c0494b002be0268b8dddff97b6be577b9737d22892e9b8e3c","ssdeep":"","tlshash":"5541b5e1b730644742e216b07b7d790fb42abdd28ac4e251fa21c8848add95710cbb94","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.769785Z","times_seen":10,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/linkid.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/linkid.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1569\r\nlast-modified: Wed, 22 Jun 2022 05:16:30 GMT\r\netag: \"62b2a5ae-621\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1569,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (1335)","md5":"0cc3a63fe10060af4a349e5df666eefe","sha1":"3e8d3925b550345123f2cab26568221fd4154f9c","sha256":"92fca55833f48b4289ac8f1cedd48752b580fce4ec4b5d81670b8193d6e51b54","sha512":"5801c9db98c4998480772ca5ad71f0e400c4756ae713aab0358ca6593b3a3426499d6dec81a768c861cbbcd8394dd8c6d647628a13f124ff3a1119f9b7793e8c","ssdeep":"","tlshash":"80319575b348749e8776e6308bbf490794b92695ac1dec88b409e4e02d74acf04b2b77","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-07-18T18:05:33.154089Z","times_seen":688,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/gtm.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/gtm.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 163898\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: \"62b2a5b0-2803a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":163898,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ISO-8859 text, with very long lines (10894)","md5":"6d5e858cdd5fe80c89500659569592ee","sha1":"4c4422952dfd637242345ed34bd9ff838c911a67","sha256":"9da6d78e0c81508366b13cbc8ffb1cec44df9497c2f103c307c354f5fe984f05","sha512":"1dd17fbc3d7fb5893328360ee13570749cfe2727a468b6ff6f31d9d449405e61b1a5dcb7f886a05acebb43fc115564040aedc4c82a149bdff33c869a55304b41","ssdeep":"3072:IXdZ279+h04Q1opIEFi2NgjDnyYqOeMPp:8dZO+c2pBFNgj7qXA","tlshash":"81f32addf386753682a37074943f400ba27a6de2f84cdc90e18ad8d42e786a91177f6d","first_seen":"2026-02-11T12:21:34.703154Z","last_seen":"2026-02-12T12:56:06.730844Z","times_seen":5,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/Citibank.svg.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/Citibank.svg.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 50205\r\nlast-modified: Mon, 25 Jul 2022 13:00:42 GMT\r\netag: \"62de93fa-c41d\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":50205,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 518, 8-bit/color RGBA, non-interlaced","md5":"433aa8ac1caa899af0cd87b8f409d117","sha1":"37a24a2ae3f87ed2eba49b3bae748926c0e2dae2","sha256":"7fc36e4371ad5f605b8888c6d3b175e2c48ad80d4a71dda29ddf1a8f66d50974","sha512":"ee95d7184aaa9a2c28a4c29405310530aad7c9281f17dc80487f31d10b5f0ee1bf5c99ac6226d5d1c7de9bf4f87dab3839aee2b4b201e99bb66cc074e1b6a9fc","ssdeep":"768:R/6J9EGv2oL5oH5F8M4rTwZzv4tRixDU4OULWXcHGE2LkFBBizfHsjdXIV1M+:96L/V5or8zwZzv43MDNOUaXPWUTsjuW+","tlshash":"7c33f2523173cdc1307f1eef29fc3aca0a129779f5212ef5905b64e19968bc264a7ac4","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-02-12T12:56:06.757131Z","times_seen":17,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/ls_fp.html","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/ls_fp.html HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jun 2022 05:16:48 GMT\r\netag: W/\"62b2a5c0-19a\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":410,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7209776eee4a328bf7677dc384ae1d5e","sha1":"349214719de3eec72b8e6972a7c9fdff4d9ff999","sha256":"9d80f6e60178e8a4811b6650a7a16a560e20f3dab01cf839b80b40cadd24ffdf","sha512":"3f5e6dcb3c97e545f98a133b756edd9baabd811e3aaa407f5b71a106ba90850e5b3670a0f627fb0149075d0030fe8328b43fe4a0dd4bce2143f1555a9ad6df91","ssdeep":"","tlshash":"95e0abaa1c07445a4420e2d0b0edf46816dcc366b588ca20f6f821e8fdecb59d8d2981","first_seen":"2023-04-16T20:26:12Z","last_seen":"2026-02-12T12:56:06.728966Z","times_seen":8,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/question-mark.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/question-mark.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1221\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-4c5\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1221,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f79843c3c2445babe5c1ae608ef25845","sha1":"f17bca1dd2df187ab5eb5d0751dc1a42847b4f1d","sha256":"615c1250335dcbfddff71eb876481abfdcbb93014d1b7892fff34b5a11d1f3c1","sha512":"7d4eaad282b2490fa6718440fb2cdf65c9c0c1009f7a15f1ef87db86eee215c30345be538a381f404aafe36095d375ed1447d273c5273957b64217325414ea59","ssdeep":"","tlshash":"832154476319dda874a6487469693bd72335db88d12741ace7453c38d08b2fe3d69888","first_seen":"2023-05-13T03:46:21Z","last_seen":"2026-07-01T01:20:22.783834Z","times_seen":352,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/favicon.ico","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/gatewayInitJS.js.download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/gatewayInitJS.js.download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1122\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: \"62b2a5b0-462\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (428)","md5":"d72a7d66db7e24139713cd2b482d441a","sha1":"28d3aa6485c08d7835ba36bd00db8694508d091b","sha256":"f23444cb0a7f9ae863b289830b759da93f92730a5615b2bc1bd49021d6a65d65","sha512":"03486387c08bbe832f5af6a05de85a7a83c70e8fa0f38adcfac52d9fc1e2e0d1fe0fa16d6c4dbbfd678fb903ec44e46f2feecd73e5c2b3abc4a70cd3cc5fa373","ssdeep":"","tlshash":"dd216338a2747447c0bbb8f9562f013aa26f4b354e27c58d324be29c0a68d04c217e6e","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.764859Z","times_seen":15,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/Logo20220725010.gif","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/Logo20220725010.gif HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2287\r\nlast-modified: Mon, 25 Jul 2022 13:12:40 GMT\r\netag: \"62de96c8-8ef\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2287,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 210 x 70","md5":"23985d5a7a3b782bd1f2d6acf4d60268","sha1":"40a2d658dffb9048bc11f162d083baf194c9817a","sha256":"50d4cb5f3734010c781644b19329b21dfd73b3bf0f85a00d8f0ec141ae5de2fc","sha512":"0bd23a81cdae300b38d8ee048f97383917f975bbd1114c67f39340c11aa35b66d02be0a3c7a33fb9b5250ac6737f47802f114102c7f2e1bc8656521d5a4462da","ssdeep":"","tlshash":"21414c9295a057baeb1142360280d14b9321be1891c3d1a1b1f7f80bfd7a4c1e2707aa","first_seen":"2023-04-16T21:32:09Z","last_seen":"2026-02-12T12:56:06.76799Z","times_seen":13,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/servus.png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/servus.png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 11915\r\nlast-modified: Mon, 25 Jul 2022 14:28:34 GMT\r\netag: \"62dea892-2e8b\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 385 x 104, 8-bit/color RGBA, non-interlaced","md5":"8b6f88ec6c3705084ec14bfd89d2d84c","sha1":"897528203e7290a4b77181c0e725972562a761de","sha256":"89231f2c240f56d81726b9ffbb62f838b926d1e2aeaade0cf1782c50c7bf4446","sha512":"1b170ff986ac4cdcc66f9bf7cfd3ce94a4a0cbbea58ef2dfa22a8db98a6372bbf697df836afa425982a6a1e9ed14c0829915ad9299b4561ce1764698cd732b5d","ssdeep":"192:DP9o1tBOMi1QA7rhqRTAYc2c78sYywShVvqwHeDKYh83kGW:DP9oTkEtAD786LYpqUb","tlshash":"c132be1d917b6e36e14820ceb0a86112c276b980fb60fe9f38d35814adec14851fdac9","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-02-12T12:56:06.759409Z","times_seen":17,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery-mobile-theme/themes/interac-jqm.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery-mobile-theme/themes/interac-jqm.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T12:43:14.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3 HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-powered-by: PHP/8.2.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Pure CSS","description":"Pure CSS is a set of small, responsive CSS modules that can be used in web projects.","website":"https://purecss.io","common_platform_enumeration":"","icon":"Pure CSS.png","categories":["UI frameworks"]}],"data":{"size":118762,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (972), with CRLF line terminators","md5":"228df438b82c67cd7770c6579e1ab947","sha1":"3e6d91c770174277525d329fb76391afca2d7bfc","sha256":"f13456bf01cde0f62ec0a4f25c8fce566c21a4d5a79f5bd944618d71a4314ab2","sha512":"6d62a232ce3c7fc68cbf9400c2c3741d8b349848417ffe96ff1e0c4712816ce1e0b67662b69ba29401fd2b2263b659e374ca8923a9da3ff450d762b1112e4132","ssdeep":"1536:WwivhsA4coBj3JDerRws7/VTo8npT3iei7A1hg:pivhrujJe7/VTo0DY","tlshash":"bac33440b14c8436ecb70ec651b16658f57fedb2c50211a4fcafb77ba766c68a8db210","first_seen":"2026-02-11T12:21:34.635842Z","last_seen":"2026-02-11T16:07:56.15171Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/logo_CA000540_FULL_IMAGE.svg","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/logo_CA000540_FULL_IMAGE.svg HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8514\r\nlast-modified: Wed, 22 Jun 2022 05:16:34 GMT\r\netag: \"62b2a5b2-2142\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8514,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7bf319a4ed20e3d89ac9b18d633a0141","sha1":"f6e4c9af1014ce171032a248ea38a0a765c56263","sha256":"0ac88c8b1336fc9a06690a5f36e632fb0c1a2baa4871e7b4623ffe7765c172d2","sha512":"7fd66c143c770ab339e56a23fb581b3777ccad8f224e08869ff04070a17558a60bee4360651fa14cf7da8dd97afacbf16accaed136a59e6735f27d16d7aa8022","ssdeep":"192:sy4qdD5iDK6GjaUZK55e6bg76diMhcadaqUayi95N8ET68a+:szqdD5CK6GjaUh7tVqUay4Db","tlshash":"ae02d9a583784be9cac0a2e93d13441f08a314e777834279f7fccde45b194e99a19c3a","first_seen":"2023-06-27T09:52:50Z","last_seen":"2026-05-30T18:26:18.762148Z","times_seen":72,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.js","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"object","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:15.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /resources/newgateway/vendor/jquery-ui-1.11.4.custom/jquery-ui.min.js HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1\r\nSec-Fetch-Dest: object\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-26T01:24:27.039024Z","times_seen":543812,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/main.js(2).download","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/top_fp.html","date":"2026-02-11T12:43:15.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/main.js(2).download HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/top_fp.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 108244\r\nlast-modified: Wed, 22 Jun 2022 05:16:48 GMT\r\netag: \"62b2a5c0-1a6d4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108244,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (390), with CRLF, LF line terminators","md5":"77d17803adb61852f507ecaa6a5f87d1","sha1":"9a96ffbc439f96869eed08a910981ddb90a4009b","sha256":"970188560f2e5afd072ee006c54cf249992c651de9536b67bef628b7493c0463","sha512":"ab9cdde5b52246d80bd37f42ba815576c08fdcaeace6fef694d4a0a88935300e4229e80581f6b24baa4afd0f9707958644536dfd4989a404a1845cf85cc547a5","ssdeep":"1536:YQy8SVA+9c4+Yw7P07zh7aE7aabFXcGR/zoIU3dhLew/LywkvbSjpRvdnmNa:YVEmNa","tlshash":"45b3960ea9512163c973f33edfab4609f9376163242a91127e6cd2d46f7086883a5fdc","first_seen":"2023-03-07T23:06:33Z","last_seen":"2026-02-12T12:56:06.732511Z","times_seen":10,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/clear(5).png","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:15.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/clear(5).png HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7; _ga=GA1.2.526468686.1770813795; _gid=GA1.2.237535399.1770813795; _dc_gtm_UA-53324311-1=1; _gat_UA-53324311-1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 0\r\nlast-modified: Wed, 22 Jun 2022 05:16:40 GMT\r\netag: \"62b2a5b8-0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mon-espace-securise-interac.com/UpdateVerifyPrss!/files/jquery.mobile.icons.min.css","fqdn":"mon-espace-securise-interac.com","domain":"mon-espace-securise-interac.com","tld":"com"},"ip":{"addr":"45.74.10.46","port":443,"asn":212238,"as":"Datacamp Limited","country":"Brunei","country_code":"BN"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3","date":"2026-02-11T12:43:14.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mon-espace-securise-interac.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 00:58:08 GMT","end":"Mon, 11 May 2026 00:58:07 GMT"},"fingerprint":{"sha1":"97:A7:26:75:29:03:C8:ED:87:D3:CA:81:DB:5A:8A:33:D8:AE:96:83","sha256":"EA:75:FF:0F:69:34:6B:C4:6E:46:DC:17:50:76:81:5F:D6:12:07:19:91:77:8B:78:41:3D:99:D5:EA:B2:21:06"}}},"request":{"raw":"GET /UpdateVerifyPrss!/files/jquery.mobile.icons.min.css HTTP/1.1\r\nHost: mon-espace-securise-interac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/UpdateVerifyPrss!/?key=94c264f8d558bb839642d33eca05397bcd0c2af3\r\nCookie: PHPSESSID=v49et5kku9r8i37k40hjor0fe7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 11 Feb 2026 12:43:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jun 2022 05:16:32 GMT\r\netag: W/\"62b2a5b0-1eefb\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":126715,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1893d7e94b9833e02105736e46d9a813","sha1":"a1891e1a1645227424eefb8006e02ffd6992a9e1","sha256":"0009c65a64d81cb607a1acadced92e3e4c6bc8a924553fb2ff573a1d5cea9bcb","sha512":"f471ea7ccd9f4f9dda2851927be55a80bcdb5c8b4c78b1830c7e237bafc88d15026baed18397236cc073dac89708c550e62119b0938d8df0bed7a9e4472266cc","ssdeep":"768:+/TkyHqid/Rg+90+/+nkH9FWIB/MGHlMQ9P0B:F2bg/o9kHcPU","tlshash":"46c399dcb1772c197b362067dc566a690421fe5fef502db6eca663222f12b0d30a3674","first_seen":"2023-04-07T07:46:23Z","last_seen":"2026-05-30T18:26:18.69242Z","times_seen":77,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-11","alert":"Phishing Block","trigger":"mon-espace-securise-interac.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Interac e-Transfer","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Interac e-Transfer phishing","tags":["interac","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"content.etransfer.interac.ca/fp/top_fp.html;CIS3SID=8D862450AB75E1BA5B022D71165C9FE6?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59","fqdn":"content.etransfer.interac.ca","domain":"interac.ca","tld":"ca"},"ip":{"addr":"91.235.133.9","port":443,"asn":30286,"as":"THM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mon-espace-securise-interac.com/UpdateVerifyPrss!/files/tags.html","date":"2026-02-11T12:43:16.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content.etransfer.interac.ca","organization":"Interac Corp."},"issuer":{"commonName":"Thawte TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 27 Feb 2025 00:00:00 GMT","end":"Wed, 11 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"48:D4:63:FD:BE:64:FD:36:CB:AF:61:06:42:7C:63:0A:D5:5D:3E:D0","sha256":"78:73:4C:9F:73:DF:D1:8D:E1:6B:23:2B:EE:60:81:18:70:55:56:97:4A:CF:31:7D:7B:91:5B:6C:63:33:4D:7D"}}},"request":{"raw":"GET /fp/top_fp.html;CIS3SID=8D862450AB75E1BA5B022D71165C9FE6?org_id=bzmgl3t1\u0026session_id=7cbc90b8-90a4-45bb-bbd7-2d2077d12370\u0026nonce=3979f3a89c62db59 HTTP/1.1\r\nHost: content.etransfer.interac.ca\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mon-espace-securise-interac.com/\r\nCookie: visid_incap_1659541=8gXZwFy6SrGiZQd/pl4eQGN5jGkAAAAAQUIPAAAAAADKlIKI0t8zCyLWY3D1MEel; incap_ses_721_1659541=+ew8I3WVUUeU80p6KYIBCmN5jGkAAAAA8K+1ipRjlS1vObS7q2wdkA==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 204\r\nDate: Wed, 11 Feb 2026 12:43:16 GMT\r\nServer: Apache\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Type: text/html;charset=UTF-8\r\nKeep-Alive: timeout=2, max=96\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"204","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T01:23:59.53248Z","times_seen":17537268,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"content.etransfer.interac.ca","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}