francerelooking.fr/
82.165.202.51301 Moved Permanently 0 B IP 82.165.202.51:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 26 Nov 2022 11:06:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Redirect-By: WordPress
Location: https://francerelooking.fr/
X-Cache-Status: HIT
X-Powered-By: PHP/7.4.33, PleskLin
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a9f1d4d98705c281fed3b60343463200
db6f8aa98d2eda4e5473b116a222c3055568bb78
164d11173045b569cafb32e300e4c1ec6d6ab177fd34d0414cc40c541268779f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5108
Expires: Sat, 26 Nov 2022 12:32:02 GMT
Date: Sat, 26 Nov 2022 11:06:54 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 10730f388c028d64e19b8a48d414768f
e43b104e57e5ea7ff8568835776858cf2ede6f00
f3c30c6d139288f1bfe13fce85c6ddc1514e1639fcf4d31a6012a3309ed1d50d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5201
Cache-Control: max-age=89461
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 11:06:54 GMT
Etag: "63809972-1d7"
Expires: Sun, 27 Nov 2022 11:57:55 GMT
Last-Modified: Fri, 25 Nov 2022 10:31:14 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4d7e4eed097b9c4e5d509419f1cfc85a
290bb3d428a7c6330e2e3d73a952b16f820896c8
0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 10:17:32 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2962
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7772
Expires: Sat, 26 Nov 2022 13:16:26 GMT
Date: Sat, 26 Nov 2022 11:06:54 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: lNwKzluaVttp3N9diLPBrPa2g2lyRf6DVEmwpjcoqeNvagc8i8xJRhRKHI7nX+8wnlilwE5MmMw=
x-amz-request-id: 5KWHY941HHB2SJ5J
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 10:44:12 GMT
age: 1362
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 46693aecbe45db647fe7dcbc738ce9ed
37a4290bf211a50303c34f6965cdd36da4ab62a4
906dc51242ae91d32bfb0f8db3481949d343cd564f61b79e63ec15b02f08d8c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "906DC51242AE91D32BFB0F8DB3481949D343CD564F61B79E63EC15B02F08D8C2"
Last-Modified: Fri, 25 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3574
Expires: Sat, 26 Nov 2022 12:06:28 GMT
Date: Sat, 26 Nov 2022 11:06:54 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:54 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 11:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4dedb6f45af63be68f09d51217f71e6d
2224e61aec07dfcdea89621d0d426cc1e0e5cec0
67b5ad33fa21ccd6b14e5f64eada04ef0d9c20d8714624d66cb6ea5ba3a28ed8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3186
Cache-Control: max-age=140738
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 11:06:55 GMT
Etag: "6381699f-1d7"
Expires: Mon, 28 Nov 2022 02:12:33 GMT
Last-Modified: Sat, 26 Nov 2022 01:19:27 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 619fa0039b94697fc8a5bd24f57e8aa2
53a366391a51d625029cc6d32fb4e8b6060990fd
dff604305831a0399aa44b2fac806e43512afa846569ba6e5685eca6495d9fa5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 11:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
polyfill.io/v2/polyfill.js?features=Intl.%7Elocale.en&ver=7cc720ea35884a84ed274ab902452129
151.101.1.26200 OK 126 B URL HTTP/2 polyfill.io/v2/polyfill.js?features=Intl.%7Elocale.en&ver=7cc720ea35884a84ed274ab902452129
IP 151.101.1.26:0
Hash 73facef13260d15915b31c39a22317b8
2e0d6642d943b6bba33c14ed89db6ca0d98e7844
fe0e7a42051b9bde30f5d3f6679756e2aad5814be1914d6606d961f6e15f07f7
GET /v2/polyfill.js?features=Intl.%7Elocale.en&ver=7cc720ea35884a84ed274ab902452129 HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=utf-8
last-modified: Wed, 09 Nov 2022 06:55:17 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/105.0.0
date: Sat, 26 Nov 2022 11:06:55 GMT
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1657, PASS, fastly;desc="Edge time";dur=13
content-length: 126
X-Firefox-Spdy: h2
blog.protur-hotels.com/wp-content/uploads/2015/09/Ahora-en-web-protur-hotels-puede-pagar-con-Paypal.jpg
185.156.219.145301 Moved Permanently 707 B URL HTTP/1.1 blog.protur-hotels.com/wp-content/uploads/2015/09/Ahora-en-web-protur-hotels-puede-pagar-con-Paypal.jpg
IP 185.156.219.145:0
ASN #60458 Xtudio Networks S.L.U.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/uploads/2015/09/Ahora-en-web-protur-hotels-puede-pagar-con-Paypal.jpg HTTP/1.1
Host: blog.protur-hotels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sat, 26 Nov 2022 11:06:55 GMT
server: LiteSpeed
location: https://blog.protur-hotels.com/wp-content/uploads/2015/09/Ahora-en-web-protur-hotels-puede-pagar-con-Paypal.jpg
vary: User-Agent,Accept-Encoding,Accept-Encoding
francerelooking.fr/wp-content/uploads/2020/01/cropped-FranceRelooking.jpg
82.165.202.51200 OK 22 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2020/01/cropped-FranceRelooking.jpg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS6 (Windows), datetime=2020:01:02 11:36:32], baseline, precision 8, 513x199, components 3\012- data
Hash 74cdfd44e1d725b7bd694447f9339b95
ee55a593df3ff5d94a03c6a66f2f3c9b52e9420a
1f781e43f1200d9711baf223c48604faad0ace62b1bd34dfca44b469513a46ab
GET /wp-content/uploads/2020/01/cropped-FranceRelooking.jpg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: image/jpeg
content-length: 21971
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-55d3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/js/functions.js?ver=1.0.1
82.165.202.51200 OK 2.3 kB URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/js/functions.js?ver=1.0.1
IP 82.165.202.51:0
Hash 2d17f0125501615b5e44393171fe59c5
f38ad4a554bdba25dbd499a134df6aae13cc7e0b
ef3f412efd9c1684aa4426046c27c44f96192d9cf35ae46348dcf9488343d514
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/js/functions.js?ver=1.0.1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-1c11"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/revslider/admin/assets/images/transparent.png
82.165.202.51200 OK 71 B URL HTTP/2 francerelooking.fr/wp-content/plugins/revslider/admin/assets/images/transparent.png
IP 82.165.202.51:0
File type PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced\012- data
Hash 753f6c59bbe7913f21576b58b193bc5a
b3e3885f69e401b3a320010ff7a40dd19768fe3b
8ea078292393a14a8e44be139a7fa6ed09d9c650e210eccca587045239b71cab
GET /wp-content/plugins/revslider/admin/assets/images/transparent.png HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: image/png
content-length: 71
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: "62fa63b0-47"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/hearts-couple-2-75x75.png
82.165.202.51200 OK 1.5 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/hearts-couple-2-75x75.png
IP 82.165.202.51:0
File type PNG image data, 75 x 75, 8-bit gray+alpha, non-interlaced\012- data
Hash 2de1cf1c5b8e873f6f70c870e8d66ba4
7c73bdd6980beb0c5cdee892cd39a1d792ea8a93
32ddb80c6434bd1a082275e84510d77a233c420034e395bce09f501c78693597
GET /wp-content/uploads/2019/03/hearts-couple-2-75x75.png HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: image/png
content-length: 1517
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-5ed"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/css/owl.carousel.min.css?ver=7cc720ea35884a84ed274ab902452129
82.165.202.51200 OK 1.3 kB URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/css/owl.carousel.min.css?ver=7cc720ea35884a84ed274ab902452129
IP 82.165.202.51:0
File type ASCII text, with very long lines (2863)
Hash 9e7a1d92ab4bc230940eac3a2db8ca45
cdf36cd02b6ea26ba764a7a406049f8d8a31d712
4fd546ad5d0064b4c3f67d1c6755fda7bc026330e814b1d5d7725b74ac41dc3c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/css/owl.carousel.min.css?ver=7cc720ea35884a84ed274ab902452129 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-bcc"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/lightcase/lightcase.js?ver=1.0.0
82.165.202.51200 OK 9.8 kB URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/lightcase/lightcase.js?ver=1.0.0
IP 82.165.202.51:0
File type HTML document, ASCII text
Hash 7d1965870335c65bd6d30d86dfc0be56
64715b8c842ca937aa5f7b4dde75ddf686209352
f85c6a55f9b9986fdc0c7eef8dd1f2ed51899ea65a81c10dc482f61d5a5f5284
GET /wp-content/themes/freeman/framework/lightcase/lightcase.js?ver=1.0.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-bb5f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
brand.mastercard.com/content/dam/mccom/brandcenter/thumbnails/mastercard_vrt_pos_92px_2x.png
2.23.135.121200 OK 2.0 kB URL HTTP/2 brand.mastercard.com/content/dam/mccom/brandcenter/thumbnails/mastercard_vrt_pos_92px_2x.png
IP 2.23.135.121:0
ASN #1299 Telia Company AB
File type PNG image data, 185 x 152, 8-bit colormap, non-interlaced\012- data
Hash a22d05a29ee6cc4709c4e82c263a3dcd
62d155bb8ef361125d9e0fc478df6a4f5b7a23bc
7b1463cb3ecf53a64a53f3eee21319b158b4056c378b662bf9bcf98b80ced218
GET /content/dam/mccom/brandcenter/thumbnails/mastercard_vrt_pos_92px_2x.png HTTP/1.1
Host: brand.mastercard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sat, 12 Nov 2022 22:57:59 GMT
etag: "7fb-5ed4df0173c46"
accept-ranges: bytes
content-length: 2043
access-control-allow-origin: https://maps.googleapis.com
content-type: image/png
cache-control: max-age=604800
expires: Sat, 03 Dec 2022 11:06:55 GMT
date: Sat, 26 Nov 2022 11:06:55 GMT
X-Firefox-Spdy: h2
botw-pd.s3.amazonaws.com/styles/logo-thumbnail/s3/0013/4323/brand.gif
52.217.129.169200 OK 4.4 kB URL HTTP/1.1 botw-pd.s3.amazonaws.com/styles/logo-thumbnail/s3/0013/4323/brand.gif
IP 52.217.129.169:0
File type GIF image data, version 87a, 195 x 195\012- data
Hash 9644a35c4ec7b8ac42468bb335f7e500
44f320575173ba2720cd83e4d04ba210bf529d3e
33b5d1012535c01eb9f0487540b8a7fb98bfde54373d0863505cb15b89052c6b
GET /styles/logo-thumbnail/s3/0013/4323/brand.gif HTTP/1.1
Host: botw-pd.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: l5Ti6pMNEWV0GN+tAu5lh/f8DWtwhS8ZjOyUGoDqkWMRdEsxgcuIDtv1ArR1yEXCIMBw2BuL2ig=
x-amz-request-id: 1DCYNSKQQRXTDJJJ
Date: Sat, 26 Nov 2022 11:06:56 GMT
Last-Modified: Thu, 31 Aug 2017 15:28:51 GMT
ETag: "9644a35c4ec7b8ac42468bb335f7e500"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: image/gif
Server: AmazonS3
Content-Length: 4438
francerelooking.fr/wp-content/themes/freeman/framework/js/owl.carousel.min.js?ver=2.1.0
82.165.202.51200 OK 11 kB URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/js/owl.carousel.min.js?ver=2.1.0
IP 82.165.202.51:0
File type ASCII text, with very long lines (32045)
Hash 6b159f0d577059cbc1e66be8982dd4fb
ac12c5ef524046b4c66ad38a75eddd07320ae346
d852711d7eacca5a8c3f3f466a4dbf1a5f25bd7a5792bad24bb4c233cedd8ffa
GET /wp-content/themes/freeman/framework/js/owl.carousel.min.js?ver=2.1.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-a728"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.2
82.165.202.51200 OK 14 kB URL HTTP/2 francerelooking.fr/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.2
IP 82.165.202.51:0
File type ASCII text, with very long lines (23042)
Hash f705723da9e5bd8ca8ea3971dc9564b7
bcce0bed765e1f2f02e42d0697a27195a5b66b16
caa37a12d2e1e05e19d2987f276d46e17d1b7466c8a818e364bfb3d49eb55ac1
GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js?ver=6.2.2 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 03:37:29 GMT
etag: W/"637d9579-5a03"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 11:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 11:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
francerelooking.fr/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=3.19.11
82.165.202.51200 OK 49 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=3.19.11
IP 82.165.202.51:0
File type ASCII text, with very long lines (27639), with no line terminators
Hash c38476807fdd72432260ce492dd6ecc8
d83d1b28073f0097c70f8adb8cb5b958d39b513b
3dbce7e8657c255151220dbaf3031847611a271cfdb0848a72cfdc8631173028
GET /wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=3.19.11 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:10 GMT
etag: W/"62fa63b2-6bf7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
82.165.202.51200 OK 19 kB URL HTTP/2 francerelooking.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 82.165.202.51:0
File type ASCII text, with very long lines (11126)
Hash f446f9892b651c707997eebe40b1f4d1
d7333d0c82c0e5963a92307466851b81f439f306
6c46167106d92d9494b2b1701332906b9673196a1fec3a12b0a06c676def0c0e
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:10 GMT
etag: W/"62fa63b2-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash b05606331c6f88a724d9e404e62974e4
72176bc6b618fbbe567b5746ed54e14d381a9815
7179b3d4ee227d9bf6d768a5fb1a9499f285d5949d21893c9a6997da8ea7b026
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 26 Nov 2022 11:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
216.58.207.195200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://francerelooking.fr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 18:59:14 GMT
expires: Tue, 21 Nov 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 403661
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/js/ResizeSensor.min.js?ver=1.1.0
82.165.202.51200 OK 851 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/js/ResizeSensor.min.js?ver=1.1.0
IP 82.165.202.51:0
File type ASCII text, with very long lines (2233)
Hash 3ae73c5d7f6d4471db8f8e533f61e82b
523e8780495b8411ebbe52a450d10f400e9d5259
c20d31aea40385d1166883b09b1914a9e4aa3dd616a5ab644ad1880cc8a6ab08
GET /wp-content/themes/freeman/framework/js/ResizeSensor.min.js?ver=1.1.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-8ec"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/js_composer/assets/css/lib/typicons/src/font/typicons.woff
82.165.202.51200 OK 60 kB URL HTTP/2 francerelooking.fr/wp-content/plugins/js_composer/assets/css/lib/typicons/src/font/typicons.woff
IP 82.165.202.51:0
File type Web Open Font Format, TrueType, length 59872, version 2.0\012- data
Hash 95aa28e29618c068e8a53f64c87cb6a9
2cd26eab23d66ba998686c0fd2f828696e539ce2
c2430aad2b6a33948dc064cfaee8ad65ff9e3ca439834f3aaa84abec3d10dea8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/css/lib/typicons/src/font/typicons.woff HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://francerelooking.fr/wp-content/plugins/js_composer/assets/css/lib/typicons/src/font/typicons.min.css?ver=6.9.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: font/woff
content-length: 59872
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: "62fa63b0-e9e0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/js_composer/assets/css/lib/vc-linecons/fonts/vc_linecons.woff?54101537
82.165.202.51200 OK 27 kB URL HTTP/2 francerelooking.fr/wp-content/plugins/js_composer/assets/css/lib/vc-linecons/fonts/vc_linecons.woff?54101537
IP 82.165.202.51:0
File type Web Open Font Format, CFF, length 27308, version 1.0\012- data
Hash f7e1d7f91c602afedad1e575e5696e30
f1a9fd07996f24302f1410ec38faaaa741a53e10
0e1076ec01481ada6dcbe8d22736b9c56cdfbd078620b589a60f5a11eee9152d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/css/lib/vc-linecons/fonts/vc_linecons.woff?54101537 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://francerelooking.fr/wp-content/plugins/js_composer/assets/css/lib/vc-linecons/vc_linecons_icons.min.css?ver=6.9.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: font/woff
content-length: 27308
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: "62fa63b0-6aac"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2017/11/visage-237x300.png
82.165.202.51200 OK 70 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2017/11/visage-237x300.png
IP 82.165.202.51:0
File type PNG image data, 237 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash ef4f8be477245e25568744997f7e910f
5b2de7bbfdc50a9cbf2366a01611179ac5b6d6ea
d79975140b8f46d8163805b5d4612bf49d89576f206f1ebade2cc1e27db1bcdf
GET /wp-content/uploads/2017/11/visage-237x300.png HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: image/png
content-length: 69783
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-11097"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/portfolio-1-75x75.png
82.165.202.51200 OK 1.5 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/portfolio-1-75x75.png
IP 82.165.202.51:0
File type PNG image data, 75 x 75, 8-bit colormap, non-interlaced\012- data
Hash 0aa7a3cb1ec4215096d42597da557323
b1a5df4dcb8aa6cfc1224e3c7d2c3e11ae990f8a
f66aecf6314f2d99a28b7148f5c39b193995c81451e63369c55e78c7bb6f097a
GET /wp-content/uploads/2019/03/portfolio-1-75x75.png HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: image/png
content-length: 1519
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-5ef"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/reduce-75x75.png
82.165.202.51200 OK 2.1 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/reduce-75x75.png
IP 82.165.202.51:0
File type PNG image data, 75 x 75, 8-bit colormap, non-interlaced\012- data
Hash 3be7a8956bdf15f5ec6d42212e1e1508
16711b2e8ea9102c872e1b6e300f3405797b1fa4
41c7c10c87d046dfbc629deb64a0236a6cd239477cb77b506a2c387f8e25dbfc
GET /wp-content/uploads/2019/03/reduce-75x75.png HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: image/png
content-length: 2135
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-857"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.9.0
82.165.202.51200 OK 42 kB URL HTTP/2 francerelooking.fr/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.9.0
IP 82.165.202.51:0
File type ASCII text, with very long lines (65358)
Hash 1529d68d438cdd4f9b68d9546df86e82
119a3233004f49d168a30b0232467c3f3e087c89
deec385220af8381b34bd3469450919072f23eed0e88672dd5e73d55a568a1b3
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.9.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-76891"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
www.paypal.com/tagmanager/pptm.js?id=francerelooking.fr&source=checkoutjs&t=xo&v=4.0.336
151.101.193.21200 OK 4.3 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=francerelooking.fr&source=checkoutjs&t=xo&v=4.0.336
IP 151.101.193.21:0
File type ASCII text, with very long lines (12084), with no line terminators
Hash da1b94bdea2eb1769e74df6fbd2c1a2e
4c7f6b5318ffd3d36b6b431f4bd113b55d8f14a7
45cc4e008a654e4ef3f3b3eb0ca92f52ade64445039059b5395b11734b033be4
GET /tagmanager/pptm.js?id=francerelooking.fr&source=checkoutjs&t=xo&v=4.0.336 HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-oNsvugaLBHfFKc6wiuBLyX+0lBeKM//sIBJ/0BHfwFq+p0Fo' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
paypal-debug-id: f6420933fd6c9
traceparent: 00-0000000000000000000f6420933fd6c9-cedaad0703dee804-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 26 Nov 2022 11:06:55 GMT
age: 35640
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn4080-HHN, cache-bma1649-BMA
x-cache: HIT, MISS
x-cache-hits: 2, 0
x-timer: S1669460816.863660,VS0,VE22
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f6420933fd6c9-50b0056c14c20224-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 4299
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.200.107.47101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.200.107.47:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: zXLg2ok8sBSWHLCjmR2PRw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YY/LZdJutGvhEXJGu1e0oLTt6vU=
francerelooking.fr/wp-content/plugins/ameliabooking/public/img/oval-spinner.svg
82.165.202.51200 OK 721 B URL HTTP/2 francerelooking.fr/wp-content/plugins/ameliabooking/public/img/oval-spinner.svg
IP 82.165.202.51:0
File type exported SGML document, ASCII text
Hash 92319e0575e5587c1c4176facb375c91
5f14a315dce72e473407865f3fa8da901f202dd6
9c35cb6c86e5ee78561f71a7647fc5f860d8b61a3d4fe528d0d08dc86d971fe6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/ameliabooking/public/img/oval-spinner.svg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/svg+xml
content-length: 721
last-modified: Mon, 15 Aug 2022 18:28:52 GMT
etag: "62fa9064-2d1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/ameliabooking/public/img/hourglass.svg
82.165.202.51200 OK 2.6 kB URL HTTP/2 francerelooking.fr/wp-content/plugins/ameliabooking/public/img/hourglass.svg
IP 82.165.202.51:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with very long lines (1521)
Hash 39fe1889135ca1be6c6152abd8aaceb1
7441d630c13c7e22d479eff9ad91a82a865e028c
27fa07014a5dc8c8f81dcfa4a7d0c501f9d7b8468e0fe0c21705dd81bc6a336d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/ameliabooking/public/img/hourglass.svg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/svg+xml
content-length: 2608
last-modified: Mon, 15 Aug 2022 18:28:53 GMT
etag: "62fa9065-a30"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/ameliabooking/public/img/oval-spinner.svg
82.165.202.51200 OK 721 B URL HTTP/2 francerelooking.fr/wp-content/plugins/ameliabooking/public/img/oval-spinner.svg
IP 82.165.202.51:0
File type exported SGML document, ASCII text
Hash 92319e0575e5587c1c4176facb375c91
5f14a315dce72e473407865f3fa8da901f202dd6
9c35cb6c86e5ee78561f71a7647fc5f860d8b61a3d4fe528d0d08dc86d971fe6
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/ameliabooking/public/img/oval-spinner.svg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/svg+xml
content-length: 721
last-modified: Mon, 15 Aug 2022 18:28:52 GMT
etag: "62fa9064-2d1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/ameliabooking/public/img/hourglass.svg
82.165.202.51200 OK 2.6 kB URL HTTP/2 francerelooking.fr/wp-content/plugins/ameliabooking/public/img/hourglass.svg
IP 82.165.202.51:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- exported SGML document, ASCII text, with very long lines (1521)
Hash 39fe1889135ca1be6c6152abd8aaceb1
7441d630c13c7e22d479eff9ad91a82a865e028c
27fa07014a5dc8c8f81dcfa4a7d0c501f9d7b8468e0fe0c21705dd81bc6a336d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/ameliabooking/public/img/hourglass.svg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/svg+xml
content-length: 2608
last-modified: Mon, 15 Aug 2022 18:28:53 GMT
etag: "62fa9065-a30"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&pt=Accueil%20-%20France%20Relooking&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1669460815131&g=0&completeurl=https%3A%2F%2Ffrancerelooking.fr%2F&ru=https%3A%2F%2Ffrancerelooking.fr%2F&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
192.229.221.25200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&pt=Accueil%20-%20France%20Relooking&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1669460815131&g=0&completeurl=https%3A%2F%2Ffrancerelooking.fr%2F&ru=https%3A%2F%2Ffrancerelooking.fr%2F&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
IP 192.229.221.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&pt=Accueil%20-%20France%20Relooking&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1669460815131&g=0&completeurl=https%3A%2F%2Ffrancerelooking.fr%2F&ru=https%3A%2F%2Ffrancerelooking.fr%2F&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Sat, 26 Nov 2022 11:06:56 GMT
expires: Sat, 26 Nov 2022 11:06:56 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: a509940660594
pragma: no-cache
server: ECAcc (lhd/35D9)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=203
set-cookie: ts=vreXpYrS%3D1764155216%26vteXpYrS%3D1669462616%26vr%3Db39e71331840a98550c31e94ffffffff%26vt%3Db39e71331840a98550c31e94fffffffe; Expires=Wed, 26 Nov 2025 11:06:56 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3Db39e71331840a98550c31e94ffffffff%26vt%3Db39e71331840a98550c31e94fffffffe; Expires=Wed, 26 Nov 2025 11:06:56 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000a509940660594-2201ed9390c854ce-01
content-length: 42
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2017/11/cropped-LOGO-blanc-carre-e1510436535658.png
82.165.202.51200 OK 9.8 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2017/11/cropped-LOGO-blanc-carre-e1510436535658.png
IP 82.165.202.51:0
File type PNG image data, 281 x 281, 8-bit/color RGBA, non-interlaced\012- data
Hash 2bc57893185a45084a6ff6985e19622a
89a28a21e8d366dbed9822d969aa1169d8411477
16c7567825a18febc7efe055597150e7ad6e609bdedf3dbb81e536b03f5d50f5
GET /wp-content/uploads/2017/11/cropped-LOGO-blanc-carre-e1510436535658.png HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/png
content-length: 9786
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-263a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2017/11/cropped-LOGO-blanc-carre-e1510436535658-150x150.png
82.165.202.51200 OK 5.2 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2017/11/cropped-LOGO-blanc-carre-e1510436535658-150x150.png
IP 82.165.202.51:0
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 23920b38e7ad9095f49286b6370cb126
14cfb1b18dbdd4ca9b45bd739fac1df1fe7a2afe
9e5ae572942a6dfdc412e981d942b7a3afa50db86a17194604ad499e6802b76d
GET /wp-content/uploads/2017/11/cropped-LOGO-blanc-carre-e1510436535658-150x150.png HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/png
content-length: 5185
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-1441"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2017/11/22625.jpg
82.165.202.51200 OK 564 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2017/11/22625.jpg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 2692x1938, components 3\012- data
Size 564 kB (563681 bytes)
Hash 76e244922aa176d2f3ef2a5f340e1ef4
b46aca70cc0c7e3c304d90c89b8dc281aa3589c5
e7114b6471f24a6e6841e1b7b5ea623f4d82b60c832a1d9bc44fa039e2c2f00d
GET /wp-content/uploads/2017/11/22625.jpg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/jpeg
content-length: 563681
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-899e1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_18112990-150x150.jpeg
82.165.202.51200 OK 18 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_18112990-150x150.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop CS3 Macintosh, datetime=2009:11:02 18:53:03], baseline, precision 8, 150x150, components 3\012- data
Hash 72616c54b74acb924af66d16af810041
c93bf25cd31138454a66548567ad7cd2e668ba83
3465f966a537a73ac5561ebf0d3828810d8df3a52f392f8ad16df7dc1fed37fa
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/AdobeStock_18112990-150x150.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/jpeg
content-length: 17852
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-45bc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_36982538-150x150.jpeg
82.165.202.51200 OK 32 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_36982538-150x150.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2011:11:19 01:06:25], baseline, precision 8, 150x150, components 3\012- data
Hash 741bb36b3d071ede7ff18ee42f579e62
beb8938ec974ad9140fbf8afbc2319112461202f
25179e0d766405a8d8919ac939ab32ca1e2123ebb57e7d4cde5ef47b2700445f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/AdobeStock_36982538-150x150.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/jpeg
content-length: 32429
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-7ead"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_185483061-150x150.jpeg
82.165.202.51200 OK 24 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_185483061-150x150.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=13, description=Jewelry Fashion. Woman In Luxury Jewels. Glamour Female Model With Beauty Face Makeup Wearing Expensive Gold Jewelry And Stylis, manufacturer=Canon, model=Canon EOS 5DS R, orientation=upper-left, xresolution=362, yresolution=370, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2017:07:28 18:09:51], baseline, precision 8, 150x150, components 3\012- data
Hash 507f1975c19040ff462b5306396665c4
a6bc4f40415e59a486d25572d0522c41dfc81a88
eccdc8972affdefe267371360ce3253072d39085a1c7d8997c87894d5c06ff22
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/AdobeStock_185483061-150x150.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/jpeg
content-length: 23975
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-5da7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/city-150x150.jpeg
82.165.202.51200 OK 44 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/city-150x150.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, description=sale, shopping, fashion, style and people concept - happy young man in shirt choosing jacket in mall or clothing store, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, xresolution=354, yresolution=362, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:05:26 14:39:43], baseline, precision 8, 150x150, components 3\012- data
Hash 6a6c5caa8ccbd2241dca39eb8450e4ee
c08ccda8fed1515527892db248b6aaa81ffb1a84
178b1b48a7953e0f576ad2a30971d60389a239486a9f678b7ada6b961200320f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/city-150x150.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/jpeg
content-length: 43821
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-ab2d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_209431536-150x150.jpeg
82.165.202.51200 OK 18 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_209431536-150x150.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=13, description=Young handsome man near mirror in makeup room, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=244, yresolution=252, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:05:26 12:41:12, GPS-Data], baseline, precision 8, 150x150, components 3\012- data
Hash a297d8f0b3482c90d363259b924449c1
cc643be494595daa636f959a1856c240df2d3b89
6793cfe77a224628bb3000b35bd6377e2386482fe70e20b35d066260b00c76dc
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/AdobeStock_209431536-150x150.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/jpeg
content-length: 18439
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-4807"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/mister-150x150.jpeg
82.165.202.51200 OK 16 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/mister-150x150.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=NIKON CORPORATION, model=NIKON D70, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2010:06:06 17:42:54], baseline, precision 8, 150x150, components 3\012- data
Hash ff6d2413b431945210372494c17e58d2
b31f33b16e4665be139ed0475080a41094d1f59e
445c5fb2eb13b2b33edfe8d3ae959a185ec97268424ad08069fd783a9a118f98
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/mister-150x150.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/jpeg
content-length: 16226
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-3f62"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/ACCOMPAGNEMENT-COIFFEUR-150x150.jpeg
82.165.202.51200 OK 35 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/ACCOMPAGNEMENT-COIFFEUR-150x150.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=NIKON CORPORATION, model=NIKON D90, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2013:04:10 15:43:30], baseline, precision 8, 150x150, components 3\012- data
Hash 0a51f83e51454ab2bad15c02cc6375da
fec0b629a02d2c0de7c2f1906b493ee36d308a35
41a4fd1db122620943160c296f33d640f1145952505cd84e588d487d6e05f8fb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/ACCOMPAGNEMENT-COIFFEUR-150x150.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/jpeg
content-length: 34898
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-8852"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/Accompagnement-shopping--150x150.jpeg
82.165.202.51200 OK 27 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/Accompagnement-shopping--150x150.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=19, height=2050, bps=0, PhotometricIntepretation=RGB, description=Customer woman with shopping bags over blue background, orientation=upper-left, width=7878], baseline, precision 8, 150x150, components 3\012- data
Hash ff6179e38a2aac4b909e533e058d2ad4
3901c9573c50c83e2e2d91b9e1fc27fb2e1248a0
49fa0931cc340b8d9ef9cacd0826c6d7e65f7025a45d240a13655c20fe2c604b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/Accompagnement-shopping--150x150.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/jpeg
content-length: 26825
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-68c9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2017/11/meches-de-cheveux-colorer-150x150.jpg
82.165.202.51200 OK 7.4 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2017/11/meches-de-cheveux-colorer-150x150.jpg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 9a4dfaaf1cf7971099f9e8c052dd1257
28d3a71101437d8fffd6ceb030d440564f65f89e
f8922a994bdde66a9eb74b4b606bf6380930de2ebf37476834554b0e84cd2376
GET /wp-content/uploads/2017/11/meches-de-cheveux-colorer-150x150.jpg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: image/jpeg
content-length: 7376
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-1cd0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2017/11/Myriam-Barchichat-1-150x150.jpg
82.165.202.51200 OK 5.2 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2017/11/Myriam-Barchichat-1-150x150.jpg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 15670352c720d0310bf676283c3a7ccd
3821c4b60f4af071d27fdbebabbbd058c8e5d56b
044675fa33627226725fe9757524bc436fbd1b7a5bf23654f263c947f4bac4f9
GET /wp-content/uploads/2017/11/Myriam-Barchichat-1-150x150.jpg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:57 GMT
content-type: image/jpeg
content-length: 5211
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-145b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3250
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 11:06:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3250
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 11:06:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3250
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 11:06:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3250
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 11:06:57 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8bb181e3f5ca898c6e31a8efc2e28291
eda3a91f8e2cbc5467da08ad85e6f6a30702b66c
0e943aacb4a46480ab031ef294a0e089976ec125c331c15116b6c79f6b0f2ff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3250
Expires: Sat, 26 Nov 2022 12:01:07 GMT
Date: Sat, 26 Nov 2022 11:06:57 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
34.120.237.76200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a783df85f30f9c555f9df6b99f61744d
61f9bed607e81606be78285596acdc5e0e4f4994
19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SRN-oOfa8Z0mQZFYkWAv32XFiXChfGjfwZkfWz-IzHubwrKgzwoTxQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 03:55:38 GMT
age: 25879
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/css/tipso.min.css?ver=1
82.165.202.51200 OK 10 kB URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/css/tipso.min.css?ver=1
IP 82.165.202.51:0
File type ASCII text, with very long lines (855), with no line terminators
Hash 5711a094f1689178dd608687c9f873b3
e6779cbbc2ab1c0b519a54819c325de5317ee361
77fd35914baeeb392cf7d78ac25109cc65bfe472aba234f5cdee42352bf7690c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/css/tipso.min.css?ver=1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-357"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp
34.120.237.76200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash abd79421a3c44a8df11ad2cc50083309
8665e5f3026f2c2b9505eb139c478f4d359851c3
3a66b00498fa1322730705b1c4502614b5a520ac3f884f494d65e27a5bb62c3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc537c2d0-d011-4ed0-a5d4-5f5d2190c49b.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4366
x-amzn-requestid: ce25f5ab-0c92-431e-ae4e-618829594a74
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVNZFjHoAMFXLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813588-6a3a8dff70e717011e3a0606;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CkXSlYXZ0DFVjVSVin4Km3_9nETFtQ8Qf6f2V5kjuwoCejVH3Qk0Qg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:47:48 GMT
age: 47949
etag: "8665e5f3026f2c2b9505eb139c478f4d359851c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 02:19:43 GMT
age: 31634
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc791f23-9e0d-4ffd-991b-9c697774e053.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc791f23-9e0d-4ffd-991b-9c697774e053.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0174b63e0e8e8184799bedd77c7ca5f
ab196fcf5ef72cd13d1f8f370039258b963834ba
ffb99678ae74f059a66aaf5097b1c4b659519012f137b40a644ded7a3c524623
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc791f23-9e0d-4ffd-991b-9c697774e053.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14128
x-amzn-requestid: ac7d027c-55fe-479d-a5ca-baa09eabebea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLUgEEXSIAMFzmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63813466-061f1c9c36d007347d0c1302;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VBKkrmELCAhKQjBs5fb1udGUtrFAXF2_ifrzd8lTnmDTkdhO6d7clw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:07:00 GMT
etag: "ab196fcf5ef72cd13d1f8f370039258b963834ba"
content-type: image/jpeg
age: 46797
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c8dc4b8a7e9f7f4f84f0da568b43392b
3d32bff85cb7ec118c4496d0c3802829fdc9af3b
4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: utbUF-6Z7rMqPNdRKHJyI-IZoyTy6HpkNBY-60xcZ-6NDXBz1XN6-Q==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:40 GMT
age: 47897
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_114269383.jpg
82.165.202.51200 OK 187 kB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_114269383.jpg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 622x1158, components 3\012- data
Size 187 kB (187097 bytes)
Hash 546a7606901ddde549cda17b4c4b7eab
e330d81c9103388e28b42eea79da40bccabd0086
4bd476a149787c6d5c846fcc0b1a228c1b46bbbd0fdd678991ca30dc2b609adb
GET /wp-content/uploads/2019/03/AdobeStock_114269383.jpg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:57 GMT
content-type: image/jpeg
content-length: 187097
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-2dad9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.6
82.165.202.51200 OK 5.6 MB URL HTTP/2 francerelooking.fr/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.6
IP 82.165.202.51:0
File type ASCII text, with very long lines (55747), with CRLF line terminators
Size 5.6 MB (5597903 bytes)
Hash b21ab360021b9bdc23a5880ba9e11e2e
65087e311d2e0f6f0be36c463ee3adc1d762c3e4
da5c08764751fb76476c08786ad821fdb2f8e740d1822ec3476374a7d5edd08e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.layeranimation.min.js?version=5.4.6 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-dac0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/city.jpeg
82.165.202.51200 OK 5.1 MB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/city.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=16, description=sale, shopping, fashion, style and people concept - happy young man in shirt choosing jacket in mall or clothing store, manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left, xresolution=354, yresolution=362, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2016:05:26 14:39:43], baseline, precision 8, 4843x3306, components 3\012- data
Size 5.1 MB (5098061 bytes)
Hash 1db6632a9413bf64b1e1b85496106d34
8a7fdeb14dbc390c19e71683b476a299142d5dfc
e464c650cc969d8b1ecd1897ef2e180a4bbfaf4f2e5d71bb193644f76db44ce0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/city.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:57 GMT
content-type: image/jpeg
content-length: 5098061
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-4dca4d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_209431536.jpeg
82.165.202.51200 OK 3.2 MB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_209431536.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=13, description=Young handsome man near mirror in makeup room, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=244, yresolution=252, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2018:05:26 12:41:12, GPS-Data], baseline, precision 8, 6720x4480, components 3\012- data
Size 3.2 MB (3173719 bytes)
Hash d3c0b686eb23d5d8de28d83d19a6c352
9d9bd05334f4b66306ad9deb62b7e0dd4160079a
5ce27348c5afc855b42252e87bedc1023c0f9cc2bc2b777526720f33f2339699
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/AdobeStock_209431536.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:57 GMT
content-type: image/jpeg
content-length: 3173719
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-306d57"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/mister.jpeg
82.165.202.51200 OK 2.2 MB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/mister.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=NIKON CORPORATION, model=NIKON D70, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2010:06:06 17:42:54], baseline, precision 8, 2000x3008, components 3\012- data
Size 2.2 MB (2203315 bytes)
Hash b5e3340f151cd37a7dc2cbedd051f937
2627389cc40640ca6034cce4eb166c3e3a948109
bc528c1bae79f5faeb45b56e3abc29f782b564c36cf8a3f5c1f7af7826a46ba4
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/mister.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:57 GMT
content-type: image/jpeg
content-length: 2203315
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-219eb3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_36982538.jpeg
82.165.202.51200 OK 5.9 MB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_36982538.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=Adobe Photoshop CS4 Macintosh, datetime=2011:11:19 01:06:25], baseline, precision 8, 3181x3180, components 3\012- data
Size 5.9 MB (5942046 bytes)
Hash 1499ccfe931027989b846a0e00d3af60
456305815d985b7542e9b16ddce1189b0aaddb32
e20419c6f0f4030814af3672f8e836841764f883584e3c224ad110ff5f33b897
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/AdobeStock_36982538.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:57 GMT
content-type: image/jpeg
content-length: 5942046
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-5aab1e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_185483061.jpeg
82.165.202.51200 OK 13 MB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_185483061.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=13, description=Jewelry Fashion. Woman In Luxury Jewels. Glamour Female Model With Beauty Face Makeup Wearing Expensive Gold Jewelry And Stylis, manufacturer=Canon, model=Canon EOS 5DS R, orientation=upper-left, xresolution=362, yresolution=370, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2017:07:28 18:09:51], baseline, precision 8, 8688x5792, components 3\012- data
Size 13 MB (13165735 bytes)
Hash 643b4d890909a2aad43157bb9e93af95
4cbe98c2c29cc814882d6ad873a515363c1087f5
368dfb1d9fa1aebbf1257866e182973275a3b6ad3bb276d0febd11f3ad5c5974
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/AdobeStock_185483061.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:57 GMT
content-type: image/jpeg
content-length: 13165735
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-c8e4a7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_89367819.jpeg
82.165.202.51200 OK 3.5 MB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_89367819.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, description=Pretty jeans princess. Beautiful girl in jeans and paper crown over blue background., manufacturer=NIKON CORPORATION, model=NIKON D800, orientation=upper-left, xresolution=274, yresolution=282, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2015:05:25 14:16:23, copyright=II*], baseline, precision 8, 4000x4000, components 3\012- data
Size 3.5 MB (3466694 bytes)
Hash 5350a003be528f5fd70a2051d7af2b8a
ac7b496770293811f031f7dd8b647398eb765c29
25221ef127c74908f2596793c53d0facedb41751ec7a778116d23ffa97491160
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/AdobeStock_89367819.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:57 GMT
content-type: image/jpeg
content-length: 3466694
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-34e5c6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_213678757.jpeg
82.165.202.51200 OK 6.2 MB URL HTTP/2 francerelooking.fr/wp-content/uploads/2019/03/AdobeStock_213678757.jpeg
IP 82.165.202.51:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 5D Mark IV, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop CC 2017 (Macintosh), datetime=2018:07:16 19:52:26], baseline, precision 8, 6720x4480, components 3\012- data
Size 6.2 MB (6154525 bytes)
Hash 72458486ad895529fbf75d0343a5b661
29a44ae64dc5b08f39aae73464fe1265ab328576
24be7ee0723c8b1821cf65e64a3b5214cc31d5929a7f3bb23a01ab3981884bd0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2019/03/AdobeStock_213678757.jpeg HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:57 GMT
content-type: image/jpeg
content-length: 6154525
last-modified: Mon, 15 Aug 2022 15:18:09 GMT
etag: "62fa63b1-5de91d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
francerelooking.fr/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 03:37:21 GMT
etag: W/"6361e5f1-15e54"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate.min.js?ver=3.19.11
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate.min.js?ver=3.19.11
IP 82.165.202.51:0
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate.min.js?ver=3.19.11 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 23:12:05 GMT
etag: W/"62fad2c5-3454b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/css/owl.theme.default.min.css?ver=7cc720ea35884a84ed274ab902452129
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/css/owl.theme.default.min.css?ver=7cc720ea35884a84ed274ab902452129
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/css/owl.theme.default.min.css?ver=7cc720ea35884a84ed274ab902452129 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-55a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Dosis:800
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Dosis:800
IP 142.250.74.10:0
GET /css?family=Dosis:800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 11:06:55 GMT
date: Sat, 26 Nov 2022 11:06:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/uploads/amelia/css/amelia-booking.tYDkaMI0bh.css?ver=5.1
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/uploads/amelia/css/amelia-booking.tYDkaMI0bh.css?ver=5.1
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/amelia/css/amelia-booking.tYDkaMI0bh.css?ver=5.1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 22:25:43 GMT
etag: W/"62fac7e7-d6acd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/oi-portfolio/framework/js/imagesloaded.js?ver=1.0.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/oi-portfolio/framework/js/imagesloaded.js?ver=1.0.0
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/oi-portfolio/framework/js/imagesloaded.js?ver=1.0.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-1b2b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-includes/css/dist/block-library/style.min.css?ver=7cc720ea35884a84ed274ab902452129
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-includes/css/dist/block-library/style.min.css?ver=7cc720ea35884a84ed274ab902452129
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=7cc720ea35884a84ed274ab902452129 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 03:37:37 GMT
etag: W/"63745b01-172a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/oi-portfolio/framework/css/bootstrap.min.css?ver=7cc720ea35884a84ed274ab902452129
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/oi-portfolio/framework/css/bootstrap.min.css?ver=7cc720ea35884a84ed274ab902452129
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/oi-portfolio/framework/css/bootstrap.min.css?ver=7cc720ea35884a84ed274ab902452129 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-305d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.4 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Wed, 19 Oct 2022 11:40:37 GMT
etag: W/"634fe235-aab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.6
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.6
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/extensions/revolution.extension.slideanims.min.js?version=5.4.6 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-72d9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.4 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Wed, 19 Oct 2022 11:40:37 GMT
etag: W/"634fe235-3016"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A400%2C700%2C900%2C400italic%2C700italic%2C900italic%7CDosis%3A200%2C300%2C400%2C500%2C600%2C700%2C800%26amp%3Bsubset%3Dlatin-ext&subset=latin%2Clatin-ext
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A400%2C700%2C900%2C400italic%2C700italic%2C900italic%7CDosis%3A200%2C300%2C400%2C500%2C600%2C700%2C800%26amp%3Bsubset%3Dlatin-ext&subset=latin%2Clatin-ext
IP 142.250.74.10:0
GET /css?family=Open+Sans%3A400%2C700%2C900%2C400italic%2C700italic%2C900italic%7CDosis%3A200%2C300%2C400%2C500%2C600%2C700%2C800%26amp%3Bsubset%3Dlatin-ext&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Nov 2022 11:06:55 GMT
date: Sat, 26 Nov 2022 11:06:55 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/oi-portfolio/framework/js/custom_plugin.js?ver=1.0.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/oi-portfolio/framework/js/custom_plugin.js?ver=1.0.0
IP 82.165.202.51:0
GET /wp-content/plugins/oi-portfolio/framework/js/custom_plugin.js?ver=1.0.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-10b9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/css/remodal-default-theme.css?ver=1
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/css/remodal-default-theme.css?ver=1
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/css/remodal-default-theme.css?ver=1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-1599"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/oi-portfolio/framework/css/style.css?ver=7cc720ea35884a84ed274ab902452129
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/oi-portfolio/framework/css/style.css?ver=7cc720ea35884a84ed274ab902452129
IP 82.165.202.51:0
GET /wp-content/plugins/oi-portfolio/framework/css/style.css?ver=7cc720ea35884a84ed274ab902452129 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-1483"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/lightcase/lightcase.css?ver=1.0.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/lightcase/lightcase.css?ver=1.0.0
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/lightcase/lightcase.css?ver=1.0.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-440b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/js/remodal.min.js?ver=1.0.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/js/remodal.min.js?ver=1.0.0
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/js/remodal.min.js?ver=1.0.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-1dc7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/vhparallax.min.js?ver=3.19.11
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/vhparallax.min.js?ver=3.19.11
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/vhparallax.min.js?ver=3.19.11 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 23:12:05 GMT
etag: W/"62fad2c5-cdd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/
82.165.202.51200 OK 0 B IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:54 GMT
content-type: text/html; charset=UTF-8
link: <https://francerelooking.fr/wp-json/>; rel="https://api.w.org/", <https://francerelooking.fr/wp-json/wp/v2/pages/3837>; rel="alternate"; type="application/json", <https://francerelooking.fr/>; rel=shortlink
x-cache-status: HIT
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman-child/style.css?ver=7cc720ea35884a84ed274ab902452129
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman-child/style.css?ver=7cc720ea35884a84ed274ab902452129
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman-child/style.css?ver=7cc720ea35884a84ed274ab902452129 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-17c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/css/animate.css?ver=1
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/css/animate.css?ver=1
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/css/animate.css?ver=1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-11cda"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
www.paypalobjects.com/api/checkout.js?ver=7cc720ea35884a84ed274ab902452129
151.101.86.133200 OK 0 B URL HTTP/2 www.paypalobjects.com/api/checkout.js?ver=7cc720ea35884a84ed274ab902452129
IP 151.101.86.133:0
GET /api/checkout.js?ver=7cc720ea35884a84ed274ab902452129 HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-headers: x-csrf-token
access-control-allow-methods: GET
access-control-allow-origin: *
cache-control: s-maxage=31536000, public,max-age=3600
content-encoding: gzip
content-type: application/javascript; charset=utf-8
etag: W/"6266d4b0-16d23e"
last-modified: Mon, 25 Apr 2022 17:04:48 GMT
paypal-debug-id: adec5d390a355
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000adec5d390a355-336cec9a4b47993f-01
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 26 Nov 2022 11:06:55 GMT
x-served-by: cache-sjc10020-SJC, cache-bma1683-BMA
x-cache: HIT, HIT
x-cache-hits: 221961, 69
x-timer: S1669460815.201064,VS0,VE0
vary: Accept-Encoding
x-content-type-options: nosniff
strict-transport-security: max-age=31557600
content-length: 239948
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/oi-portfolio/framework/js/jquery.waitforimages.js?ver=1.0.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/oi-portfolio/framework/js/jquery.waitforimages.js?ver=1.0.0
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/oi-portfolio/framework/js/jquery.waitforimages.js?ver=1.0.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-4d5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-includes/css/classic-themes.min.css?ver=1
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-includes/css/classic-themes.min.css?ver=1
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 03:37:21 GMT
etag: W/"6361e5f1-d9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/js/jquery.fullpage.min.js?ver=1.0.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/js/jquery.fullpage.min.js?ver=1.0.0
IP 82.165.202.51:0
GET /wp-content/themes/freeman/framework/js/jquery.fullpage.min.js?ver=1.0.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-68a3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/ameliabooking/public/js/frontend/amelia-booking.js?ver=5.1
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/ameliabooking/public/js/frontend/amelia-booking.js?ver=5.1
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/ameliabooking/public/js/frontend/amelia-booking.js?ver=5.1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 18:28:57 GMT
etag: W/"62fa9069-162d0a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.6.2
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.6.2
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/css/settings.css?ver=5.4.6.2 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-7578"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/oi-portfolio/framework/js/isotope.pkgd.min.js?ver=1.0.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/oi-portfolio/framework/js/isotope.pkgd.min.js?ver=1.0.0
IP 82.165.202.51:0
GET /wp-content/plugins/oi-portfolio/framework/js/isotope.pkgd.min.js?ver=1.0.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-8ce2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/js_composer/assets/css/lib/typicons/src/font/typicons.min.css?ver=6.9.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/js_composer/assets/css/lib/typicons/src/font/typicons.min.css?ver=6.9.0
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/css/lib/typicons/src/font/typicons.min.css?ver=6.9.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-3a75"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-includes/js/underscore.min.js?ver=7cc720ea35884a84ed274ab902452129
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-includes/js/underscore.min.js?ver=7cc720ea35884a84ed274ab902452129
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/underscore.min.js?ver=7cc720ea35884a84ed274ab902452129 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 03:37:21 GMT
etag: W/"6361e5f1-4991"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/oi-shortcodes/vc_extend/vc.css?ver=1
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/oi-shortcodes/vc_extend/vc.css?ver=1
IP 82.165.202.51:0
GET /wp-content/plugins/oi-shortcodes/vc_extend/vc.css?ver=1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-4707"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.2
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.2
IP 82.165.202.51:0
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.tools.min.js?ver=5.4.6.2 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-1afe3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate_bg.min.js?ver=3.19.11
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate_bg.min.js?ver=3.19.11
IP 82.165.202.51:0
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate_bg.min.js?ver=3.19.11 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 23:12:05 GMT
etag: W/"62fad2c5-b05b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4
IP 82.165.202.51:0
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.4 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Wed, 19 Oct 2022 11:40:37 GMT
etag: W/"634fe235-26d1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/js/gmap3.min.js?ver=1.0.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/js/gmap3.min.js?ver=1.0.0
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/js/gmap3.min.js?ver=1.0.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-7427"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/ameliabooking/public/js/chunks/amelia-booking-catalog-5537cbef0e41f245e754.js
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/ameliabooking/public/js/chunks/amelia-booking-catalog-5537cbef0e41f245e754.js
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/ameliabooking/public/js/chunks/amelia-booking-catalog-5537cbef0e41f245e754.js HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 18:28:58 GMT
etag: W/"62fa906a-5fff6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/ameliabooking/public/js/chunks/amelia-booking-category-5537cbef0e41f245e754.js
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/ameliabooking/public/js/chunks/amelia-booking-category-5537cbef0e41f245e754.js
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/ameliabooking/public/js/chunks/amelia-booking-category-5537cbef0e41f245e754.js HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 18:28:58 GMT
etag: W/"62fa906a-5e385"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/ultimate.min.css?ver=3.19.11
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/ultimate.min.css?ver=3.19.11
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/ultimate.min.css?ver=3.19.11 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 23:12:06 GMT
etag: W/"62fad2c6-70508"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.6.2
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.6.2
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/jquery.themepunch.revolution.min.js?ver=5.4.6.2 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-fddf"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/oi-shortcodes/vc_extend/vc_custom.js
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/oi-shortcodes/vc_extend/vc_custom.js
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/oi-shortcodes/vc_extend/vc_custom.js HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-c68"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/js/tipso.min.js?ver=1.0.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/js/tipso.min.js?ver=1.0.0
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/js/tipso.min.js?ver=1.0.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-2954"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-admin/admin-ajax.php?action=wpamelia_api&call=/entities&types[]=locations&types[]=employees&types[]=categories&types[]=custom_fields&types[]=packages&page=booking
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-admin/admin-ajax.php?action=wpamelia_api&call=/entities&types[]=locations&types[]=employees&types[]=categories&types[]=custom_fields&types[]=packages&page=booking
IP 82.165.202.51:0
GET /wp-admin/admin-ajax.php?action=wpamelia_api&call=/entities&types[]=locations&types[]=employees&types[]=categories&types[]=custom_fields&types[]=packages&page=booking HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:56 GMT
content-type: application/json;charset=utf-8
x-robots-tag: noindex
x-content-type-options: nosniff
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-cache-status: MISS
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/css/remodal.css?ver=1
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/css/remodal.css?ver=1
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/css/remodal.css?ver=1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-61e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/ameliabooking/public/css/frontend/vendor.css?ver=5.1
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/ameliabooking/public/css/frontend/vendor.css?ver=5.1
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/ameliabooking/public/css/frontend/vendor.css?ver=5.1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 18:28:51 GMT
etag: W/"62fa9063-4cda2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 03:37:21 GMT
etag: W/"6361e5f1-53c0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0
IP 82.165.202.51:0
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-4f5b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/js/theia-sticky-sidebar.min.js?ver=1.1.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/js/theia-sticky-sidebar.min.js?ver=1.1.0
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/js/theia-sticky-sidebar.min.js?ver=1.1.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: application/javascript
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-141b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/plugins/js_composer/assets/css/lib/vc-linecons/vc_linecons_icons.min.css?ver=6.9.0
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/plugins/js_composer/assets/css/lib/vc-linecons/vc_linecons_icons.min.css?ver=6.9.0
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/js_composer/assets/css/lib/vc-linecons/vc_linecons_icons.min.css?ver=6.9.0 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-93e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/css/jquery.fullpage.min.css?ver=1
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/css/jquery.fullpage.min.css?ver=1
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/css/jquery.fullpage.min.css?ver=1 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-c7c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
francerelooking.fr/wp-content/themes/freeman/framework/css/font-awesome/css/font-awesome.min.css?ver=7cc720ea35884a84ed274ab902452129
82.165.202.51200 OK 0 B URL HTTP/2 francerelooking.fr/wp-content/themes/freeman/framework/css/font-awesome/css/font-awesome.min.css?ver=7cc720ea35884a84ed274ab902452129
IP 82.165.202.51:0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/freeman/framework/css/font-awesome/css/font-awesome.min.css?ver=7cc720ea35884a84ed274ab902452129 HTTP/1.1
Host: francerelooking.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://francerelooking.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 26 Nov 2022 11:06:55 GMT
content-type: text/css
last-modified: Mon, 15 Aug 2022 15:18:08 GMT
etag: W/"62fa63b0-7918"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2