blog.plafondchauffant.fr/
200 OK 13 kB URL HTTP/1.1 blog.plafondchauffant.fr/
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (903), with CRLF, LF line terminators
Hash af46ce915b3085b1b243f3a9f07e68d5
3382dd9b684f83976f364337459dad60fd643434
108260278e19812df21a80db160f14c5ebeb9d65fffc5d27394469ba2735b1b8
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:34 GMT
Server: Apache
Vary: Accept-Encoding,Cookie
Cache-Control: max-age=3, must-revalidate
WP-Super-Cache: Served supercache file from PHP
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 12962
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 30c30d01178fc74ac5266ee64c3ee85b
c0c2af8a864c00aa85a8775d55f85ab107150a3b
c15644f69fbfeb99074c7e9711dfc9452ee164fa78eb981b6bae4fb7e3585f2a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C15644F69FBFEB99074C7E9711DFC9452EE164FA78EB981B6BAE4FB7E3585F2A"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10591
Expires: Fri, 18 Nov 2022 10:02:05 GMT
Date: Fri, 18 Nov 2022 07:05:34 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash be1be806b5dca7facbb45a6c3db44652
7ae9380a2f3eca959fe6ff6b3832a17cffd12cf4
1f3338058f8e9cae5c9fdd733c74564312726b01c6efdcd628d851d0c99876b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2002
Cache-Control: max-age=100751
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 07:05:34 GMT
Etag: "63760d7b-1d7"
Expires: Sat, 19 Nov 2022 11:04:45 GMT
Last-Modified: Thu, 17 Nov 2022 10:31:23 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 18 Nov 2022 06:45:02 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1232
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3a38b6dd8a4cc335c026aebf2ed348b6
8a386e0ccb0ca4dc502746c45b2ebc3aa3f83cf8
8b4040a645cec1841a00a22765eb3a74978559daf15c54bd4b41b6b48aab7f95
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8B4040A645CEC1841A00A22765EB3A74978559DAF15C54BD4B41B6B48AAB7F95"
Last-Modified: Wed, 16 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14293
Expires: Fri, 18 Nov 2022 11:03:47 GMT
Date: Fri, 18 Nov 2022 07:05:34 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: li0Ou2IWZP5TqIe5VTxpBrzZ4TDTuy2Gmk3ZMiMpE4nFNPY/YAdeqBp7ZOwPeKPMQA8+A12v3cw=
x-amz-request-id: S4JQDV5TFVBTEAVT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 18 Nov 2022 06:15:29 GMT
age: 3005
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 18 Nov 2022 07:05:34 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
blog.plafondchauffant.fr/wp-content/plugins/job-manager/css/display.css?ver=0.7.25
200 OK 765 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/job-manager/css/display.css?ver=0.7.25
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash eb2d180ed9ce3eacc3bfb0b1c0de96cf
279be87da6a02387a67b82211ae8814058b5cab7
505447f758a96f24ca68858662a842d7705b29cca401a113c64ac1d0327d0b40
GET /wp-content/plugins/job-manager/css/display.css?ver=0.7.25 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:34 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:21:25 GMT
ETag: "80b58-a5f-534b294926b40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 765
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
fonts.googleapis.com/css?family=Open+Sans%3A400%2C300%2C300italic%2C400italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic&subset=latin%2Cgreek%2Cgreek-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Clatin-ext&ver=1.0.0
200 OK 1.1 kB URL HTTP/1.1 fonts.googleapis.com/css?family=Open+Sans%3A400%2C300%2C300italic%2C400italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic&subset=latin%2Cgreek%2Cgreek-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Clatin-ext&ver=1.0.0
IP
Hash 7d5978eb65ebf46f535000aeb7b83d11
d64c84281e4ca0605a4f4cc201edd15c2328a7f7
fffe03db40fdc7db46668277add134eb4886f80caa9faf08b9ca8360908e3ebd
GET /css?family=Open+Sans%3A400%2C300%2C300italic%2C400italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic&subset=latin%2Cgreek%2Cgreek-ext%2Cvietnamese%2Ccyrillic-ext%2Ccyrillic%2Clatin-ext&ver=1.0.0 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 18 Nov 2022 07:05:34 GMT
Date: Fri, 18 Nov 2022 07:05:34 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
blog.plafondchauffant.fr/wp-content/plugins/connections/assets/css/cn-user.min.css?ver=8.5.16
200 OK 1.9 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/connections/assets/css/cn-user.min.css?ver=8.5.16
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (7429), with no line terminators
Hash 504377c261ccad361eefb75bd3a9038b
f48840b4f8b3399f2ee045c6dbd3e04e2ffc0d31
3bb03c51d9ebf0e161744399b20e403ad8246e08673a819555cf53c890d86dc7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/connections/assets/css/cn-user.min.css?ver=8.5.16 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:34 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:20:56 GMT
ETag: "800f1-1d05-534b292d7ea00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1920
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-includes/css/dist/block-library/style.min.css?ver=5.7.8
200 OK 8.7 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-includes/css/dist/block-library/style.min.css?ver=5.7.8
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type Unicode text, UTF-8 text, with very long lines (29677)
Hash be8b35eb8a4bf220eca3c4be7dfdc460
3081a2b524e864441d2cf934bf7edce3bab7c0ab
b47be6ca0301fb6c67d9012115d8db41694b4f18d4974a4f2063a9a508c516df
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.8 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:34 GMT
Server: Apache
Last-Modified: Fri, 23 Apr 2021 07:04:14 GMT
ETag: "82a20-e33b-5c09e67572768-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 8685
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/connections/vendor/chosen/chosen.min.css?ver=1.4.2
200 OK 2.2 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/connections/vendor/chosen/chosen.min.css?ver=1.4.2
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (10993)
Hash 369ff8249263408059d5bb62469099fe
6f38c00221e67485417c6dd18021d706f423fdf8
194e9f16e65171dae626a4f839015857d26f421f4030b7774319e38a343b72d1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/connections/vendor/chosen/chosen.min.css?ver=1.4.2 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:34 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:20:54 GMT
ETag: "8046b-2b6b-534b292b96580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2224
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/wp-content-slideshow/scripts/slideshow.js?ver=1.3
200 OK 521 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/wp-content-slideshow/scripts/slideshow.js?ver=1.3
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash e44ea2881d6d546778abd26565024276
1de2ea0ea7f2780073a335607e1770e91951c377
0eb49b9775ba01489e9b442cd4b0852f25494d825dadf59f54b0253668427981
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-content-slideshow/scripts/slideshow.js?ver=1.3 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:09:07 GMT
ETag: "8117e-53a-4f6f9aed002c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 521
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/style.css?ver=3.1.3
200 OK 377 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/style.css?ver=3.1.3
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash f612a18c7a4d0e1c195e5fc9c46fcc1b
cb6c5b49bccf1cdf84e16b2683219b30154769cb
2ff1d19ce185a7c53c602835ff720d6ee5dd3649d552430b2b8ceb708d3c2624
GET /wp-content/plugins/lightview-plus/style.css?ver=3.1.3 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:08:37 GMT
ETag: "80b94-303-4f6f9ad063f40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 377
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=2.5.5
200 OK 1.8 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=2.5.5
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (13895), with no line terminators
Hash 8ff54807204cde0eaf410b49818eff2a
b56c17f76ce162c5d686423d1cc06575a60cb0ed
a245ab7f36fb84c7b02aab2ac89b2f23669c8588e916bdbf99a1a3c8ed5b35a3
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=2.5.5 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:41:40 GMT
ETag: "80dce-3647-534b2dcfdd900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1838
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70
200 OK 239 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash 21fec527969cbcfec759744ce51f94c0
827130fb99b0005a5206028abfe82e93610184f2
fe2a280a5ffe9f5d3b1bf125035d478e46bae689a2f0cde07d48bef1ba7c74b1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:21:42 GMT
ETag: "811ca-176-534b29595d180-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 239
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/style.css?ver=1.0.0
200 OK 10 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/style.css?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (46992), with CRLF line terminators
Hash 62e64c943db604bb1b07499c2b5f46ae
cb2ca4baf2c66ac11c1406e2673c9234fc989deb
6d7815e0eec27b151abe7bfb943a9ce17101548ae570f1419400235e8f5b4b53
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/tesseract-free-theme/style.css?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "8210d-c93f-5c0e0a52b961a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 10380
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=2.5.5
200 OK 6.9 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=2.5.5
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type Unicode text, UTF-8 text, with very long lines (44034), with no line terminators
Hash fc9900797f0bd32d09ebdadb99e3fa14
f188dcf75b647f064ce83c5ef4974dd872cc81d3
d7c995d279698c936cabda52e94a410385ddeb890f5660ceafc0dffe487cba5c
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=2.5.5 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:41:40 GMT
ETag: "80dd2-ac08-534b2dcfdd900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 6917
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash feaeba711c7421b074e726f89ff34e0b
c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb
ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 07:05:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/site-banner.css?ver=1.0.0
200 OK 4.6 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/site-banner.css?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash 43a28c5d1e951320ea7ff0e83e734ac9
97312c85f8403d89f2885f4f6eac9e06befb2fae
72276b6f5cbf10ba64e6d54976c6e963d41575ba991696d7e654b15351f42e10
GET /wp-content/themes/tesseract-free-theme/css/site-banner.css?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "82116-640a-5c0e0a52ce222-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 4610
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/font-awesome.min.css?ver=4.4.0
200 OK 6.1 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/font-awesome.min.css?ver=4.4.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (26548), with CRLF, CR line terminators
Hash e3e339dd2fbd9a5dd6a2381a1fc5b4c6
34762dab2142b478caf811902cfcc316bc7eaf8b
095bbaff86049d637222955975afd7cd1240cf4a840098a417db7accdc8b8394
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/tesseract-free-theme/css/font-awesome.min.css?ver=4.4.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "82113-685f-5c0e0a52cde3a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 6088
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/footer-banner.css?ver=1.0.0
200 OK 1.8 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/footer-banner.css?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash 25f41c00e5335bce96e6ff339fa85a50
3a7e75faafecdb6d6069c715e20cf8541139e6ce
b5cf9fb05ee45638202e789aba4b7c042626b5b0cba1b4f1668c5bc8b2a2c0bd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/tesseract-free-theme/css/footer-banner.css?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "82114-2491-5c0e0a52cda52-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1813
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/typicons.css?ver=1.0.0
200 OK 3.2 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/typicons.css?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF, CR line terminators
Hash 1acaa2507dce5428a4d84fb34af78f47
a2f5ae389130c8e6b7f2ef570c2b1751f7531344
4dce523e215ac1ebf78427e5a87d6c5bdfe0acd10fac614b63232d1d542cca4e
GET /wp-content/themes/tesseract-free-theme/css/typicons.css?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "82117-564a-5c0e0a52ce222-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3159
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/jquery.sidr.css?ver=1.0.0
200 OK 1.7 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/jquery.sidr.css?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF, CR line terminators
Hash 26b20ceeb58a236b7c519fccaf766b1d
00e1cdd115420175284b5a48ade150c161664c9b
73c9e1df0845df21076df93405f01e846967e1f0dac07d513b74287242fef261
GET /wp-content/themes/tesseract-free-theme/css/jquery.sidr.css?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "82115-22f7-5c0e0a52ce60a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1696
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/woocommerce/assets/css/woocommerce-style.css?ver=1.0.0
200 OK 3.3 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/woocommerce/assets/css/woocommerce-style.css?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (773)
Hash c6bda22efbcd599f266fb8c90cd87942
5a75298c0c5eaee5a52b2280516f956f26c0d4d9
a51613c4bca9ac90154e3ce63d5ccb6a901cf7c943cd37269c456cf53f6cf8a7
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/tesseract-free-theme/woocommerce/assets/css/woocommerce-style.css?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "81e09-34a2-5c0e0a52d2c5a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3283
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/cleaner-gallery/css/gallery.min.css?ver=20130526
200 OK 450 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/cleaner-gallery/css/gallery.min.css?ver=20130526
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (1929), with no line terminators
Hash 4c0941352924caba35a45a51cc07fc03
983eaa6348787a03d5903be2d16d9c44251800d2
e3d05920ae93b76268c3c0076ce0bb2cd58a441cd8c6c6fed1a2e2359a56c02d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/cleaner-gallery/css/gallery.min.css?ver=20130526 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Fri, 21 Nov 2014 11:40:20 GMT
ETag: "800e4-789-5085ce8d77100-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 450
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/simple-lightbox/client/css/app.css?ver=2.5.3
200 OK 113 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/simple-lightbox/client/css/app.css?ver=2.5.3
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash b59ceba7283ee984e50d55b818371d96
978867e09edcb30ed77d023cb780c2a48de8dcf8
48c998d8a135558b8f4392cdb922f8f80ff9051651e9695968238117da151867
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/simple-lightbox/client/css/app.css?ver=2.5.3 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:21:31 GMT
ETag: "80bf2-e8-534b294edf8c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 113
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-includes/css/dashicons.min.css?ver=5.7.8
200 OK 36 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-includes/css/dashicons.min.css?ver=5.7.8
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (58981)
Hash 00492d322e5572c7abc3e8701b6c52c1
0802ac2c8280ce7c98af881b1d49ec682acbf314
8bc01632cbc3ab834e04141d444ff82b05a4691444d70a9860477710e330b824
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dashicons.min.css?ver=5.7.8 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Fri, 23 Apr 2021 07:04:14 GMT
ETag: "829f4-e688-5c09e67563150-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 35730
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/easy-fancybox/fancybox/jquery.fancybox-1.3.7.min.css?ver=1.5.7
200 OK 1.1 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/easy-fancybox/fancybox/jquery.fancybox-1.3.7.min.css?ver=1.5.7
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (4653)
Hash 884e0410f722d3e586faf602182d0851
0118fdc937eb2b3de12c1e93a40cab6f4736fbf9
8ebc3ef7353eb63658603e798dac7412be2d8af49efd2d6d42676ffaae68f97b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/easy-fancybox/fancybox/jquery.fancybox-1.3.7.min.css?ver=1.5.7 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 13 Dec 2014 19:04:43 GMT
ETag: "8055a-122e-50a1dae96c8c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1143
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Fri, 23 Apr 2021 07:04:13 GMT
ETag: "82c21-2bd8-5c09e67435153-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 4169
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/simple-pagination/css/default.css?ver=2.1.7
200 OK 735 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/simple-pagination/css/default.css?ver=2.1.7
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash 151abb3695725f5509cdadb8a63adaf7
054e72d71b5da835207e2219f72e8bbbac8d9d26
70e0d596dd07373c629bdae6e3ea683280495e70b5d1e595f3a6b55a59d4bcc2
GET /wp-content/plugins/simple-pagination/css/default.css?ver=2.1.7 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:08:48 GMT
ETag: "80cbe-c92-4f6f9adae1800-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 735
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/job-manager/js/display.js?ver=0.7.25
200 OK 558 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/job-manager/js/display.js?ver=0.7.25
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash afd54b46b339ea158f371e74020b61e0
250ee88cf133055d12c66fa2ffdfde8aeaecdfbb
a2efef3487deb7197cace53b83b3e4dec12368d38d44b11f2b71a3322a04b5cb
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/job-manager/js/display.js?ver=0.7.25 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:21:25 GMT
ETag: "80b5e-4d0-534b294926b40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 558
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/flash-album-gallery/admin/js/swfobject.js?ver=2.2
200 OK 4.3 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/flash-album-gallery/admin/js/swfobject.js?ver=2.2
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (10071)
Hash 87c11dff4d55ae614a4e5abdaac9e9e1
a3f38ad7b05db6bc78b0f5c7bdf677302d77ac42
14106053e953099dc14997d67342c595f389250417441c164ac83f0160533b81
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/flash-album-gallery/admin/js/swfobject.js?ver=2.2 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:21:22 GMT
ETag: "806db-2dea-534b29464a480-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 4329
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
200 OK 31 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (65451)
Hash b50f63138863c21ee4dd2fd747d0eaee
24e2e53e39b5980f3021ad881f477387610fbfb6
a3810469de465100b039f38a6e39a83c11a1de3b4259b3028b2b85338770100c
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Fri, 23 Apr 2021 07:04:13 GMT
ETag: "82c29-15d98-5c09e674360f3-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 30916
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/js/spinners/spinners.js?ver=3.1.3
200 OK 3.0 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/js/spinners/spinners.js?ver=3.1.3
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (7685), with CRLF line terminators
Hash 68a59fd7455c887b0690fcca9195173b
d91ddc65a1a85aa4cb4933037bfa042018cf9ba0
4c16cbe8843775987e74151c8629a5656e7c90ea37328d669cc5a9c1bb03cb9a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/lightview-plus/js/spinners/spinners.js?ver=3.1.3 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:18:38 GMT
ETag: "8094b-1f57-4f6f9d0d8c780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2980
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/wp-content-slideshow/scripts/jquery.cycle.all.2.72.js?ver=1.3
200 OK 12 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/wp-content-slideshow/scripts/jquery.cycle.all.2.72.js?ver=1.3
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash e234515fd93aed67800aa80e2596f00e
015b6182a217e403b0715f4d7fb49079cb6af21f
46b0bb29e0264a9a99a4a992487f0e409c1b40b19f6767a839d524c75c572f55
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-content-slideshow/scripts/jquery.cycle.all.2.72.js?ver=1.3 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:09:07 GMT
ETag: "8117d-a7a4-4f6f9aed002c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 11527
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.4.2
200 OK 469 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.4.2
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash 664c130d1d31bfd00cc96c59c5de7680
9d0e9fd2df3e1074b8db3026b58fef7311a872d4
9dbee38530e8416e1d9033d95558777e16c1206ac1a6142df357a62a659d8fad
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=4.4.2 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:21:02 GMT
ETag: "804be-44b-534b293337780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 469
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/css/lightview/lightview.css?ver=3.1.3
200 OK 3.4 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/css/lightview/lightview.css?ver=3.1.3
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash 207da0517a4e7ba067648b61ec1e8f11
37cc6876c9e72f36b9695ff00e97c8e94db4d24c
ced50787b88c1fbf5df7a50bd099fba96ca8a3649a483b9e9043c9ef56bd7982
GET /wp-content/plugins/lightview-plus/css/lightview/lightview.css?ver=3.1.3 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:18:38 GMT
ETag: "80b95-446c-4f6f9d0d8c780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3412
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/modernizr.custom.min.js?ver=1.0.0
200 OK 3.5 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/modernizr.custom.min.js?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type HTML document, ASCII text, with very long lines (7648), with CRLF, CR line terminators
Hash 44067d2303c2c444d30c60cef20dc364
91300caee797f0bac11be1cbc33ed910bbc2ba91
e4420478ea6b8632b824fa965c2091feb0cc12807369aff68cf0e97648bd828b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/tesseract-free-theme/js/modernizr.custom.min.js?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "8215e-1e57-5c0e0a52b72f2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3484
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/js/lightview/lightview.js?ver=3.1.3
200 OK 21 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/js/lightview/lightview.js?ver=3.1.3
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type HTML document, ASCII text, with very long lines (44573), with CRLF line terminators
Hash 8b6a8eb3722c6ee886d8fdffeaec536e
463993347e17f80737d55d5e8d511970398d8ec4
b01c7393e1a384395e1341883c9c7360c7906684d07f79d82e1ccf4e3e254754
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/lightview-plus/js/lightview/lightview.js?ver=3.1.3 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:18:38 GMT
ETag: "8094a-c128-4f6f9d0d8c780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 20891
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/wp-report-error/js/report_errors_script.js?ver=5.7.8
200 OK 877 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/wp-report-error/js/report_errors_script.js?ver=5.7.8
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF, CR line terminators
Hash c1aa986c82d5bc348b3de46be0ce68c4
563af991d9966c9fdc023f5288a65442f37e448a
89d40f093d1ad399a71cecf5712144222f9e36adac7d5bf1c557003b1b37b37b
GET /wp-content/plugins/wp-report-error/js/report_errors_script.js?ver=5.7.8 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:21:08 GMT
ETag: "811f2-8b3-4d4c115e5c900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 877
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/helpers.js?ver=5.7.8
200 OK 1.1 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/helpers.js?ver=5.7.8
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type Unicode text, UTF-8 text, with CRLF, CR line terminators
Hash a9860f7e7246d135963870b3eb51d9bc
7f7cc53f39e1fbd07cdc1a8cf4af2614782c522d
331be620b6437f462c280a13349f6ccf18c43de23f0f4bc37cc1de34bf8e0314
GET /wp-content/themes/tesseract-free-theme/js/helpers.js?ver=5.7.8 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "8215a-e38-5c0e0a52b6b22-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1116
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/importer/js/elementor.js?ver=5.7.8
200 OK 106 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/importer/js/elementor.js?ver=5.7.8
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash 2904b62dbb7cdc7d3c883d5a6c44a841
0bf4982a13dd38201a29b16df31293d37e673a16
98783976ea3cc2638db45beb3d871823486e717a4ae343e789b321b153151eaa
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/tesseract-free-theme/importer/js/elementor.js?ver=5.7.8 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "82137-5e-5c0e0a52c41fa-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 106
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/flash-album-gallery/admin/js/swfaddress.js?ver=2.4
200 OK 5.2 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/flash-album-gallery/admin/js/swfaddress.js?ver=2.4
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (15646), with CR line terminators
Hash 0502cf8a0c47be939171119802744b6d
9c29e28827e0c7ba37b9c98d634bc8a13d36d334
4d1f3b75da26f1968e5f91d4b91c673aa919909fe8fc9020fa57372d9799651d
GET /wp-content/plugins/flash-album-gallery/admin/js/swfaddress.js?ver=2.4 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:21:22 GMT
ETag: "806d9-3e2c-534b29464a480-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 5240
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/shadowbox.js
200 OK 13 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/shadowbox.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (23520), with CRLF line terminators
Hash d0dd8a2e66305cc262e1fb2d93f2b946
c3fe82c31d489f52210e3a7a2961b9d9f5a9003d
4d897abfb5fc8971baac4b4f26e0099c7dd47b94c232ee36a1092766235aa882
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/image-gallery-with-slideshow/js/shadowbox.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:18:50 GMT
ETag: "80a58-91c2-4d4c10dac1280-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 13217
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/jquery-easing-1.3.pack.js
200 OK 2.2 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/jquery-easing-1.3.pack.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type Unicode text, UTF-8 text, with very long lines (3199)
Hash 31d092fa78d324fff6c230bd4ae78051
b82e1c27ddb93c51e41fb3953e4d83c5fb176cc2
c39d4be5d9ebca6e0675716493126b7b941a70f569a4f27e14308840be3b62fd
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/image-gallery-with-slideshow/js/jquery-easing-1.3.pack.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:18:48 GMT
ETag: "80a50-1a3d-4d4c10d8d8e00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2193
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/jquery-easing-compatibility.1.2.pack.js
200 OK 674 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/jquery-easing-compatibility.1.2.pack.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (1266), with CRLF line terminators
Hash d184120d47ea73fd38df47b4d3c1ffad
24b72f95d3d34a3d1c8afe2774c679ae4ce3225b
37e1edb14a53159336718260d59975b070d763d24980e70a32621ed0f7b45904
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/image-gallery-with-slideshow/js/jquery-easing-compatibility.1.2.pack.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:18:48 GMT
ETag: "80a51-61f-4d4c10d8d8e00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 674
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/coda-slider.1.1.1.pack.js
200 OK 1.3 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/coda-slider.1.1.1.pack.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (2397), with CRLF line terminators
Hash 3ec6e1b47ffdc55776f2b5b9fe8f6af5
9de9bd653ab2c7f1e0c50c0d0161be540f18fad1
adbbaeb8eee96ea945d291955d93001ceb12b23e11139a57d23985d63009da37
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/image-gallery-with-slideshow/js/coda-slider.1.1.1.pack.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:18:46 GMT
ETag: "80a4b-9cb-4d4c10d6f0980-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1276
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/js/jay.js
200 OK 1.0 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/js/jay.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash bfce0944489ca4248a0baf7577c94291
5118e6211cd6533df5343ddd625d6ab11c9e7986
6a4097d77b2a9ad9edd3d32275cb95bcacee727f29678e8a3c0f66f4bd320df5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/j-shortcodes/js/jay.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:08:34 GMT
ETag: "80b3b-d84-4f6f9acd87880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1041
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/css/jay.css
200 OK 3.4 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/css/jay.css
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type HTML document, ASCII text, with CRLF line terminators
Hash 785a87352395ca919c6ae6b25a4cee15
22ea67289b0e5e6c42209e8e44d466b597d21db0
24a940a87b1ddcb065395a3000e526aaf3bd061307f5494c43a257e6a0ba18a1
GET /wp-content/plugins/j-shortcodes/css/jay.css HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:08:34 GMT
ETag: "80aa0-513e-4f6f9acd87880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3421
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/script_user.js
200 OK 413 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/script_user.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash 9e157f73053be099269f195b9b4ca031
0717fe9a290e040784ac2bffb3bf9d55195c77fa
1a211dc5303e1ff7b93551f8640ab7e0bcc03bd6cf15cbcd03e11094ae2699b1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/image-gallery-with-slideshow/js/script_user.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:18:50 GMT
ETag: "80a56-3b9-4d4c10dac1280-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 413
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/jquery-1.2.6.min.js
200 OK 17 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/js/jquery-1.2.6.min.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (12391)
Hash 41509a9a3f9bb55423ccebf5a3d928fe
d1dae6614cdf5e04dafd86fb19d9efb83dd8ae9e
fff9e43a7d0f2a4cd7216ccdc5cb62581e33e75ded6d2a481381c865d41467b8
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/image-gallery-with-slideshow/js/jquery-1.2.6.min.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:18:47 GMT
ETag: "80a4d-d9de-4d4c10d7e4bc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 16759
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/galleryview/css/jquery.galleryview-3.0.css
200 OK 1.3 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/galleryview/css/jquery.galleryview-3.0.css
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash e7308ecc8c59eb4d11f42977ce65a597
55136ed551c09325c59961c4cb05daf6ee0ce1f7
d7a8a721a927dc37bb89d88c9d6765f934d0fa9df9b65577eb72c6609f0b5905
GET /wp-content/plugins/j-shortcodes/galleryview/css/jquery.galleryview-3.0.css HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:08:34 GMT
ETag: "80ad1-da0-4f6f9acd87880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1298
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/galleryview/js/jquery.easing.1.3.js
200 OK 2.0 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/galleryview/js/jquery.easing.1.3.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash a24e157038b382ca9367b6649e5df86e
050051718f7cac76a0605267e76b8e9786150a6f
53a00d4eccef9352afcafb7bb9643d644e502929c6c4969dccfa72b7b24c24b1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/j-shortcodes/galleryview/js/jquery.easing.1.3.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:08:34 GMT
ETag: "80ae3-206d-4f6f9acd87880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2001
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/galleryview/js/jquery.timers-1.2.js
200 OK 1.1 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/galleryview/js/jquery.timers-1.2.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Hash 03a1023840fb394ee9b5184ffe8a198c
2f1cfdd7bb05bd63a3ea71d3f8bac3ecf118e73f
e0eb12335168d3c6ddb221f9ab9288787a175a5d75baf7d7c2f2b4c5d4c1315f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/j-shortcodes/galleryview/js/jquery.timers-1.2.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:08:34 GMT
ETag: "80ae6-d0a-4f6f9acd87880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1140
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: application/javascript
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 18 Nov 2022 06:44:49 GMT
cache-control: public,max-age=3600
age: 1246
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/galleryview/js/jquery.galleryview-3.0.min.js
200 OK 5.3 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/galleryview/js/jquery.galleryview-3.0.min.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (2373)
Hash 1aa4dae0fb20e5617d53011e28cf8da9
d64aa9d675f0aa96872db9211219602ec3c93354
133ade9874fbabed18bbd76d97305ded4d13399aa38fd4d2a3e39e66fd86d18b
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/j-shortcodes/galleryview/js/jquery.galleryview-3.0.min.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:08:34 GMT
ETag: "80ae5-61a6-4f6f9acd87880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 5257
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/css/jquery/cupertino/jquery-ui-1.8.9.custom.css
200 OK 6.3 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/css/jquery/cupertino/jquery-ui-1.8.9.custom.css
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (1472)
Hash 358c6511c2a72ce02d07c6a95204ff62
0b9730c52ff8971fb68f5efba9b691a980b5736e
e5e5037d8bf193135f06bd43592ed1090a7b72218dca98318c600a64d5881394
GET /wp-content/plugins/j-shortcodes/css/jquery/cupertino/jquery-ui-1.8.9.custom.css HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:08:34 GMT
ETag: "80aae-9ea6-4f6f9acd87880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 6339
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/css/jquery/smoothness/jquery-ui-1.8.9.custom.css
200 OK 6.2 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/j-shortcodes/css/jquery/smoothness/jquery-ui-1.8.9.custom.css
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (1399)
Hash a3c90c47acf02998b220ff7258674430
fffa35ecebcbefc45fb98d2311a503929295baf9
616aae43f2ce06950eba1d73d8253b80424b6459b26becfb447fac8d291b6d24
GET /wp-content/plugins/j-shortcodes/css/jquery/smoothness/jquery-ui-1.8.9.custom.css HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:08:34 GMT
ETag: "8092d-9fa3-4f6f9acd87880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 6197
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/plugins/wp-enjoy-reading/js/base.min.js
200 OK 2.9 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/wp-enjoy-reading/js/base.min.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (4818), with CRLF line terminators
Hash d53d824ef4d5feec7082b46dcd8c07e1
94e749f05ac4ac2222526dc06dafa5456b9a2cd6
de9f4ae95a81a48037825fc495980b0fcb38a038b4dbe127f3e9889bf72f7516
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/wp-enjoy-reading/js/base.min.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:20:41 GMT
ETag: "811b8-1326-4d4c11449cc40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2928
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/simplebox-for-wordpress/simplebox_util.js
200 OK 1.9 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/simplebox-for-wordpress/simplebox_util.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type HTML document, ASCII text
Hash b008723c2b519bd424c7d6508747849d
3166b232513cf93ba8c2ec32e80028b327c95f16
ad6a56be148c0a956a286d769eb82e54892b40f1af39fb8973ad9fc8ac4af00e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/simplebox-for-wordpress/simplebox_util.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:12:46 GMT
ETag: "80cca-1392-4d4c0f7f9df80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1870
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1
200 OK 6.9 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (7973)
Hash bf046c412ea0ddd6f255411f942f0397
5dca594e157deca4e9dc8f8654a898e00eec11f6
d1480dd16f60e007a3b43512042b80feeb92eee79dc2e955d296e9e9aec4b849
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Fri, 23 Apr 2021 07:04:13 GMT
ETag: "82c3d-5133-5c09e6744dbdb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 6865
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/wp-report-error/report_page_errors.css
200 OK 763 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/wp-report-error/report_page_errors.css
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF, CR line terminators
Hash f820a8927cde95f929679b153e036427
6ac6e80e835f2cbc4b2a749a4d8f3557dc991717
36f47547f65bf5ef5f04df2308c64c8be52dce3774977e0b76589c834f87c8f6
GET /wp-content/plugins/wp-report-error/report_page_errors.css HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:13:22 GMT
ETag: "811e9-863-4d4c0fa1f3080-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 763
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-includes/js/jquery/ui/tabs.min.js?ver=1.12.1
200 OK 3.9 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-includes/js/jquery/ui/tabs.min.js?ver=1.12.1
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (11738)
Hash 20c17084b198646827e8b2a4e29523c7
d4767c7cff01ed2008b503f38a33aaef0fbbed8b
4a6427301c2021814b243d15d05372dc5b7b107c3a7d0d92a64e7437f8a2c10c
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.12.1 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Fri, 23 Apr 2021 07:04:13 GMT
ETag: "82c79-2e8b-5c09e6744eb7b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3909
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-includes/js/jquery/ui/accordion.min.js?ver=1.12.1
200 OK 2.7 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-includes/js/jquery/ui/accordion.min.js?ver=1.12.1
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (8481)
Hash ab1512ef4b257572d4be089be443472d
c5561fb7071e151a5e4232012cdc5267553b1bc8
412b2d9f0379fa486e4bd98527c5e43b4e66c1c7afa009a1d2fa8aeb34b32628
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.12.1 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Fri, 23 Apr 2021 07:04:13 GMT
ETag: "82c33-21d7-5c09e6744a143-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2717
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.12.1
200 OK 11 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.12.1
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (35965)
Hash 0abe173dd9c1188802d2b0d1c4e5127f
d01c1afd41ea0baa1cffab347642c591de52ca09
b07e51fd5f248900c0ca3ec5ee4552bb97c148d7cbc3e9a01c2bedb911aeb586
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.12.1 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Fri, 23 Apr 2021 07:04:13 GMT
ETag: "82c3f-8d34-5c09e6744c46b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 10742
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/connections/vendor/picturefill/picturefill.min.js?ver=2.3.1
200 OK 3.2 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/connections/vendor/picturefill/picturefill.min.js?ver=2.3.1
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (7525)
Hash 5db59426760c339cc3f53df86b4dbaa0
a9b04985aab384e7b4c23ecea0bc7706efeb80e0
08c765f8fa67bce159044c12580175587c24c74e8582f1fd7dc9359ca25deaf9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/connections/vendor/picturefill/picturefill.min.js?ver=2.3.1 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:20:54 GMT
ETag: "80482-1e1b-534b292b96580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3246
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.4.2
200 OK 3.2 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.4.2
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash f7a560a724b3c857e565f6c23cef7244
df7b802ffd4ecc5e4483cad691d555b3aa70e8af
f761c68c2da56dc05c5f8dc2478efeb28716aa0daa03885bb086864a3a0f2b0f
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=4.4.2 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:21:02 GMT
ETag: "804c1-2e2b-534b293337780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3217
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
200 OK 5.9 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (14900)
Hash ebcf9ad4a94d5c31649dd4515ad0c7c0
e219102aa3fe113876fd76b578f9ea142d67d967
5af8e42123fc03e9a53e6fe91d95c64591e63d3c1f27703a24966154d7784747
GET /wp-content/plugins/contact-form-7/includes/js/jquery.form.min.js?ver=3.51.0-2014.06.20 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:21:02 GMT
ETag: "804c0-3b90-534b293337780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 5860
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=2.5.5
200 OK 773 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=2.5.5
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type HTML document, ASCII text, with very long lines (1731)
Hash d7353b98dbe658e881010277ffcb4060
4c81b5d644d271f60ff359a38ba148282d5664fa
1722b24439e9cffa11d7fcdb6e3cdd352df0c7b0f5fc6ecea5e6ca29883fdd12
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=2.5.5 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:41:39 GMT
ETag: "80e1a-6e9-534b2dcee96c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 773
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=2.5.5
200 OK 202 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=2.5.5
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with no line terminators
Hash a6a1c6ef48685cad04565f878fc1034a
f1453ba43851cd855d6909f45ca1b9784fe9d4ec
b13e832646cc1aac537a82cadaf9d4c3052b54bddddd6bf54f19e362653ba5c5
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=2.5.5 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:41:39 GMT
ETag: "80e32-115-534b2dcee96c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 202
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70
200 OK 3.3 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (9171), with no line terminators
Hash 08a3b7b65d73abaf588b1a9b109e3885
5bce81d53bd02659ea30d3ee15699a4a5df70e0f
2a1bebd610cbe273a69396735ec6a8c96b42412bd270f082d41dbcd623311716
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:41:39 GMT
ETag: "80e34-23d3-534b2dcee96c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3305
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=2.5.5
200 OK 855 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=2.5.5
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (2281), with no line terminators
Hash d40d89ec61f89a939a1e9d6a656b3794
5a0ab10908f848a7d94a9c4891a73b06e2454417
49e85b072bb000b3de53f2ae191d6226a678575b952087b1c37e3a241f219907
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=2.5.5 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:41:39 GMT
ETag: "80e1e-8e9-534b2dcee96c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 855
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/js/jquery-cookie/jquery.cookie.min.js?ver=1.4.1
200 OK 670 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/js/jquery-cookie/jquery.cookie.min.js?ver=1.4.1
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (1263), with no line terminators
Hash 3cf4b0490f8bf2adbff7c5f57a03f57d
65da38d7a05ef55da8d0796cf9186ebe2ba25e2c
d04ae86fc5f290e52ef6614eef01540c7e3cd4a1f99743c2b86edf0119ed0ca1
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/js/jquery-cookie/jquery.cookie.min.js?ver=1.4.1 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:41:39 GMT
ETag: "80e36-4ef-534b2dcee96c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 670
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/jquery.fittext.js?ver=1.0.0
200 OK 596 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/jquery.fittext.js?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF, CR line terminators
Hash 8842f801ee11724b190b09f800c27d32
9ffc4b3c822ba5040efc677691c393f81f9b54be
97ab76299a3274beb7518bc03529fd1934ce841567b457e5a0ff7b2ea9ce0c7e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/tesseract-free-theme/js/jquery.fittext.js?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "8215c-488-5c0e0a52b7eaa-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 596
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/jquery.sidr.min.js?ver=1.0.0
200 OK 1.8 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/jquery.sidr.min.js?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash c35105b7a0b668496c831ba6c32a807b
51d39d8c0d5c28953953e009bd4a9f48e4acfbce
bb633260d731e10a518b1dd5050517af3b6ad9195eaf243488046564e9e7742e
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/tesseract-free-theme/js/jquery.sidr.min.js?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "8215d-1934-5c0e0a52b6f0a-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1763
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/helpers-functions.js?ver=1.0.0
200 OK 420 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/helpers-functions.js?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF, CR line terminators
Hash b4d7099d699c5f439d7187739efa28aa
bcdb8fea4411d4ee80fde39078c4cd6a74dc49b9
e98df7ded5d77b59428936c9f3a780e2fe2e0116311411ca8bfad178d4f5e74a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/tesseract-free-theme/js/helpers-functions.js?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "82159-448-5c0e0a52b72f2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 420
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/skip-link-focus-fix.js?ver=1.0.0
200 OK 343 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/skip-link-focus-fix.js?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF, CR line terminators
Hash dbacd421ce65f35c1492ec8d0c9a8a7d
d3f009fd2eca842bff9d0ad0ee56745898324d07
88690b48b22e254b75eb4d3eed80aff30d6b63397df3b26112a5a12a8169a481
GET /wp-content/themes/tesseract-free-theme/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "82160-2ae-5c0e0a52b7ac2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 343
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/helpers.js?ver=1.0.0
200 OK 1.1 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/js/helpers.js?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type Unicode text, UTF-8 text, with CRLF, CR line terminators
Hash a9860f7e7246d135963870b3eb51d9bc
7f7cc53f39e1fbd07cdc1a8cf4af2614782c522d
331be620b6437f462c280a13349f6ccf18c43de23f0f4bc37cc1de34bf8e0314
GET /wp-content/themes/tesseract-free-theme/js/helpers.js?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "8215a-e38-5c0e0a52b6b22-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1116
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.digicert.com/
200 OK 471 B IP
Hash c10055ce87434f700ff8b20e3be1f919
477b3c9f1da0c464282bb54572737e76b6e346da
4d78eb296876122e5ff40fcd7667adf1bf8a4b1ee4c8203c88a63ce8d7910a57
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2768
Cache-Control: max-age=96448
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 07:05:35 GMT
Etag: "6375f9af-1d7"
Expires: Sat, 19 Nov 2022 09:53:03 GMT
Last-Modified: Thu, 17 Nov 2022 09:06:55 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
blog.plafondchauffant.fr/wp-content/plugins/easy-fancybox/fancybox/jquery.fancybox-1.3.7.min.js?ver=1.5.7
200 OK 5.4 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/easy-fancybox/fancybox/jquery.fancybox-1.3.7.min.js?ver=1.5.7
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (2643)
Hash b39e824b5ff60ec513cd37121d02e516
d11a7efbc3955fa434803fbe04d98152db6713ad
830cbc5143dc627f75cf14ff22b87e5fc9d633bf24b0ac71fa2f63838951b829
GET /wp-content/plugins/easy-fancybox/fancybox/jquery.fancybox-1.3.7.min.js?ver=1.5.7 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 13 Dec 2014 19:04:43 GMT
ETag: "8055b-3d55-50a1dae96c8c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 5400
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-includes/js/wp-embed.min.js?ver=5.7.8
200 OK 765 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-includes/js/wp-embed.min.js?ver=5.7.8
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (1391)
Hash fe875afb236ee8f0d50040fe58d848d4
e6b1b67093b429c95d5b9db07a7eba39e02cf0e5
328a6a072b91134f2802ae25e070f38ff156ceee2c6ec6a6253ae4b27af73b49
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-embed.min.js?ver=5.7.8 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Fri, 23 Apr 2021 07:04:13 GMT
ETag: "82aff-592-5c09e67455cc2-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 765
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash feaeba711c7421b074e726f89ff34e0b
c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb
ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 07:05:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blog.plafondchauffant.fr/wp-content/plugins/easy-fancybox/jquery.easing.pack.js?ver=1.3
200 OK 1.0 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/easy-fancybox/jquery.easing.pack.js?ver=1.3
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type Unicode text, UTF-8 text, with very long lines (3328)
Hash 641c787f5ace505ed85fc5c56463a195
27f4e7c3204d34f8757643c267f7a3ea1cdda279
8957447f4166b38dd38ba1a673067cd70c7430ee74dd3a81307c0bc56ff97b22
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/easy-fancybox/jquery.easing.pack.js?ver=1.3 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 13 Dec 2014 19:04:43 GMT
ETag: "8053a-e41-50a1dae96c8c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1013
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/css/template/style.php
200 OK 2.2 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/css/template/style.php
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with CRLF line terminators
Hash b51ccc9ba9bc8918ea64a06e88fe24fb
4b1bf11e67603c4cffd066a338c6e3948180e9e6
5e8989962326d0743013df87de44667a95eaf6c815f57c9b264fcefbcc2a5fce
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/image-gallery-with-slideshow/css/template/style.php HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Cookie,Accept-Encoding
Set-Cookie: PHPSESSID=6gldgn8m0k8174udqvi1kb6tm1; path=/
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 2158
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css; charset: UTF-8;charset=UTF-8
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash feaeba711c7421b074e726f89ff34e0b
c590c0b76a7a78ab51a4dabcd8f20a1b172b02fb
ebe6e312ea7116713547fbd756805843b1c242ad22269158a79305f1819fa990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 07:05:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/woocommerce/assets/js/woocommerce-helpers.js?ver=1.0.0
200 OK 275 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/woocommerce/assets/js/woocommerce-helpers.js?ver=1.0.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash 62df209a5af3fdc0baef685d1e94ad3b
551f0291910483a952d5809f1493dce59d5261ce
b18c46f6674a83d04aeec38c380ddcc9be52c2488633de7717aa9a917de780e0
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/tesseract-free-theme/woocommerce/assets/js/woocommerce-helpers.js?ver=1.0.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "81e0b-28a-5c0e0a52d1cba-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 275
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: application/javascript
blog.plafondchauffant.fr/wp-content/plugins/easy-fancybox/jquery.mousewheel.min.js?ver=3.1.12
200 OK 1.3 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/easy-fancybox/jquery.mousewheel.min.js?ver=3.1.12
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (2609)
Hash d0af0b9ca5ea0f7cd30feb8ae4cdb2d8
e83310028077c0b0560fc4fd7452387eb5b83487
eb4159c567157736af832ec1b6bb3dbd3c3c3d8a3eb4a737c10115b6f880329d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/easy-fancybox/jquery.mousewheel.min.js?ver=3.1.12 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 13 Dec 2014 19:04:43 GMT
ETag: "8053e-ad9-50a1dae96c8c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1254
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c58ac34dcec1bb9e6e4d13c047812b65
d4be1d408aa53751f05e882c73b3d99765a1889e
ed785fc5f59eac5da7a1192cd1c7342f2d503329d893657af4041277ebd8b187
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=114788
Date: Fri, 18 Nov 2022 07:05:35 GMT
Etag: "63763bd3-1d7"
Expires: Sat, 19 Nov 2022 14:58:43 GMT
Last-Modified: Thu, 17 Nov 2022 13:49:07 GMT
Server: ECS (nyb/1D0C)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gdCs6yreExK4wFEp_WgP14nEepytZhXkqpaNGLulixmcPhkW3wnBiw==
Age: 4176
blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/shadowbox.css
404 Not Found 44 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/image-gallery-with-slideshow/shadowbox.css
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (817), with CRLF, CR, LF line terminators
Hash bfdc0236a66ba1beb6d8c29027af9170
509e2280f5e30e99efe87f0e1fd5878718a4b7a3
5c9a937cca0bbaf02294578fdbc73bebf8e27fb6816af0e6095ba5f1121daa41
GET /wp-content/plugins/image-gallery-with-slideshow/shadowbox.css HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 404 Not Found
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Pragma: no-cache
Vary: Cookie
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://blog.plafondchauffant.fr/wp-json/>; rel="https://api.w.org/"
Set-Cookie: PHPSESSID=t97h73a61q10b0m52sgec2f8g4; path=/
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
blog.plafondchauffant.fr/wp-content/plugins/cookies-for-comments/css.php?k=cf25de603878aef4cf1389ec5d15df29&o=i&t=190338632
200 OK 86 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/cookies-for-comments/css.php?k=cf25de603878aef4cf1389ec5d15df29&o=i&t=190338632
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash b47f9339eb4c6d57b918e80429ed9b8e
0c01a3a7199aefd3e1f3b1abd320625e709d2e55
4bed11f9b6e8744ac081b7624ee3066093ded43ec0ef630fe1d4687743a3c7e6
GET /wp-content/plugins/cookies-for-comments/css.php?k=cf25de603878aef4cf1389ec5d15df29&o=i&t=190338632 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Set-Cookie: cf25de603878aef4cf1389ec5d15df29=1668755135; expires=Fri, 25-Nov-2022 07:05:35 GMT; Max-Age=604800; path=/
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: image/gif
blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=2.5.5
200 OK 1.0 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=2.5.5
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (6367), with no line terminators
Hash 1f99ef945e1b3cc989c4622e720b444f
66db5f80a68a5f900a5541c5ec45c0f2cfd3e7c3
b4dd7d8e6038e5b37239103bcaebb44703037e0daac7edb8a880e4cb23bb290d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=2.5.5 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
Cookie: PHPSESSID=t97h73a61q10b0m52sgec2f8g4
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Tue, 07 Jun 2016 16:41:40 GMT
ETag: "80dd0-18df-534b2dcfdd900-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 1021
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/css
blog.plafondchauffant.fr/wp-content/uploads/2015/05/plafond-rayonnant-epan-roc-01-150x1501.jpg
200 OK 5.9 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/uploads/2015/05/plafond-rayonnant-epan-roc-01-150x1501.jpg
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 150x150, components 3\012- data
Hash 5b40463adfd35d43281a550dad6e41e3
336f6857e20c1361bf407323a162fe03719cea39
8c256be48e3e34f8689ad983e4438bcb6cbf53f9936805f89f5b74cf76003711
GET /wp-content/uploads/2015/05/plafond-rayonnant-epan-roc-01-150x1501.jpg HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 09 May 2015 16:50:54 GMT
ETag: "82573-16e4-515a8f2b21780"
Accept-Ranges: bytes
Content-Length: 5860
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: image/jpeg
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/1.1 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://blog.plafondchauffant.fr
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 44856
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 14 Nov 2022 21:39:56 GMT
Expires: Tue, 14 Nov 2023 21:39:56 GMT
Cache-Control: public, max-age=31536000
Age: 293139
Last-Modified: Mon, 15 Aug 2022 18:20:18 GMT
Content-Type: font/woff2
blog.plafondchauffant.fr/wp-content/uploads/2015/05/formation-ceilingo-avril-2015-01.jpg
200 OK 39 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/uploads/2015/05/formation-ceilingo-avril-2015-01.jpg
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 90x90, segment length 16, baseline, precision 8, 720x405, components 3\012- data
Hash 286f142ebf4873db5044099e62dde597
9c7a033fb2a7c5a1e8d98851df7819d350ebcc65
885e218ba41aee9b221e86d421fc7bdb0e36aa43311e608d50b1a49c95ba9b8f
GET /wp-content/uploads/2015/05/formation-ceilingo-avril-2015-01.jpg HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 09 May 2015 15:23:19 GMT
ETag: "82553-9937-515a7b97927c0"
Accept-Ranges: bytes
Content-Length: 39223
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/jpeg
blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/fonts/fontawesome-webfont.woff2?v=4.4.0
200 OK 64 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/fonts/fontawesome-webfont.woff2?v=4.4.0
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type Web Open Font Format (Version 2), TrueType, length 64464, version 4.262\012- data
Hash 4b5a84aaf1c9485e060c503a0ff8cadb
574ea2698c03ae9477db2ea3baf460ee32f1a7ea
3c4a1bb7ce3234407184f0d80cc4dec075e4ad616b44dcc5778e1cfb1bc24019
GET /wp-content/themes/tesseract-free-theme/fonts/fontawesome-webfont.woff2?v=4.4.0 HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/wp-content/themes/tesseract-free-theme/css/font-awesome.min.css?ver=4.4.0
Cookie: PHPSESSID=t97h73a61q10b0m52sgec2f8g4; cf25de603878aef4cf1389ec5d15df29=1668755135
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Mon, 26 Apr 2021 14:05:59 GMT
ETag: "8211a-fbd0-5c0e0a52bbd2a"
Accept-Ranges: bytes
Content-Length: 64464
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3REJh4z4uUpnaivWwJlRIw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KPEslpmEkHXExaxCaejfKnm3/to=
tylers.s3.amazonaws.com/uploads/2016/08/10074829/Drawing1.png
200 OK 434 B URL HTTP/1.1 tylers.s3.amazonaws.com/uploads/2016/08/10074829/Drawing1.png
IP
File type PNG image data, 157 x 157, 1-bit colormap, non-interlaced\012- data
Hash b1503f25a93771396eb460de6a1035fe
c5321fbb9ca6f6d76941ea893129f772ed6c8642
6ffaf52148ccb7c7bcb2720b2e31771736d90278c6060ef180b850b83a4ae953
GET /uploads/2016/08/10074829/Drawing1.png HTTP/1.1
Host: tylers.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: bRcPMDnxvoX8ulJTTDDzESO/z7MBYswI66wpuc/X7QEwuxQT9XTb/wfQOLzU/MIh3NurPOuKD9o=
x-amz-request-id: 3JC2S7B72AKDSJNG
Date: Fri, 18 Nov 2022 07:05:36 GMT
Last-Modified: Wed, 10 Aug 2016 07:48:30 GMT
ETag: "b1503f25a93771396eb460de6a1035fe"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 434
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 71821131fa0825a241bb6f95ad63a26a
4c676dbf861c2fca225bd1b9620237246ddfc724
f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 07:05:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blog.plafondchauffant.fr/wp-content/plugins/simplebox-for-wordpress/simplebox.js
200 OK 4.9 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/simplebox-for-wordpress/simplebox.js
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (832)
Hash c602f76efce8fa6b35e748bb7fd71bfc
055b7cc1e0039521548293bc2891051df0483a37
02e8db34fb266fa9f30af8636d8b0e0360d363ff89acad1bc9600485cb4a953a
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/simplebox-for-wordpress/simplebox.js HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
Cookie: PHPSESSID=t97h73a61q10b0m52sgec2f8g4; cf25de603878aef4cf1389ec5d15df29=1668755135
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:12:46 GMT
ETag: "80cc8-3739-4d4c0f7f9df80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 4909
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
200 OK 9.8 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://blog.plafondchauffant.fr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Nov 2022 23:14:29 GMT
expires: Sat, 11 Nov 2023 23:14:29 GMT
cache-control: public, max-age=31536000
age: 546666
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
blog.plafondchauffant.fr/wp-content/plugins/simplebox-for-wordpress/simplebox.css
200 OK 790 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/simplebox-for-wordpress/simplebox.css
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash 3865e6b5bbe1d5aa416ae7f7073f27dc
925357bfacad498c6f8877a4ea3e8ec8fa5be8ff
a9240c7923d4eddc01d8e70cc44846672d1533b2b23e9eeb8da8c860b93e1120
GET /wp-content/plugins/simplebox-for-wordpress/simplebox.css HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
Cookie: PHPSESSID=t97h73a61q10b0m52sgec2f8g4; cf25de603878aef4cf1389ec5d15df29=1668755135
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 02 Feb 2013 17:12:45 GMT
ETag: "80cc7-a01-4d4c0f7ea9d40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 790
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: text/css
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 71821131fa0825a241bb6f95ad63a26a
4c676dbf861c2fca225bd1b9620237246ddfc724
f2dbe2a5c73657c35a660931a44cda1c1641c5b277ceea3d8fd7b4bfcacaf5ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 18 Nov 2022 07:05:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blog.plafondchauffant.fr/wp-content/uploads/2014/12/26.jpg
200 OK 288 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/uploads/2014/12/26.jpg
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1920x1080, components 3\012- data
Size 288 kB (288449 bytes)
Hash 83c2e2b193d90e305d0ccb9de1bfd0c2
b89a059ab1aa8a69e89d83f64e6b6969c4ba2133
508967eb2e65d36ff37508f6e03b24305060e9227a082862553dcf0c1b260585
GET /wp-content/uploads/2014/12/26.jpg HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:35 GMT
Server: Apache
Last-Modified: Sat, 13 Dec 2014 20:38:47 GMT
ETag: "8253f-466c1-50a1efeff63c0"
Accept-Ranges: bytes
Content-Length: 288449
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/jpeg
blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/css/lightview/skins/blank.gif
200 OK 43 B URL HTTP/1.1 blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/css/lightview/skins/blank.gif
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /wp-content/plugins/lightview-plus/css/lightview/skins/blank.gif HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/wp-content/plugins/lightview-plus/css/lightview/lightview.css?ver=3.1.3
Cookie: PHPSESSID=t97h73a61q10b0m52sgec2f8g4; cf25de603878aef4cf1389ec5d15df29=1668755135
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:36 GMT
Server: Apache
Last-Modified: Mon, 14 Apr 2014 05:18:38 GMT
ETag: "80b96-2b-4f6f9d0d8c780"
Accept-Ranges: bytes
Content-Length: 43
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/gif
blog.plafondchauffant.fr/?action=EnjoyReadingOptions
200 OK 517 B URL HTTP/1.1 blog.plafondchauffant.fr/?action=EnjoyReadingOptions
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type ASCII text, with very long lines (1134), with no line terminators
Hash 1df4c7622f3b4d70f9cb9ec971cae71f
4965f04be33bdd35124a12af37545cd1957ea421
9122049f67a3bf4975e7023c42b55012d1a173b9b056bf97514dc654c3df1dae
Analyzer Verdict Alert fortinet Phishing
GET /?action=EnjoyReadingOptions HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Ajax-Request: ajaxPaled
Content-type: charset=UTF-8
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
Cookie: PHPSESSID=t97h73a61q10b0m52sgec2f8g4; cf25de603878aef4cf1389ec5d15df29=1668755135
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:36 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Cookie,Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 517
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Content-Type: text/html; charset="UTF-8"
blog.plafondchauffant.fr/page/2/
200 OK 11 kB URL HTTP/1.1 blog.plafondchauffant.fr/page/2/
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1028), with CRLF, LF line terminators
Hash 1a9b82088918000debea98a210871723
bba47922c2135c256f465e7c2c3dc95dd541993c
c82efff49c1fc654fa328d47b23fa81643d42ec7b71abbd11fbe45ef0cc2c296
Analyzer Verdict Alert fortinet Phishing
GET /page/2/ HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
Cookie: PHPSESSID=t97h73a61q10b0m52sgec2f8g4; cf25de603878aef4cf1389ec5d15df29=1668755135
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:36 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Cookie,Accept-Encoding
Link: <http://blog.plafondchauffant.fr/wp-json/>; rel="https://api.w.org/"
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 10845
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13579
Expires: Fri, 18 Nov 2022 10:51:56 GMT
Date: Fri, 18 Nov 2022 07:05:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13579
Expires: Fri, 18 Nov 2022 10:51:56 GMT
Date: Fri, 18 Nov 2022 07:05:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13579
Expires: Fri, 18 Nov 2022 10:51:56 GMT
Date: Fri, 18 Nov 2022 07:05:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13579
Expires: Fri, 18 Nov 2022 10:51:56 GMT
Date: Fri, 18 Nov 2022 07:05:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7c5da16d7c4384a4c2454d6b0d84710
69fd80fdf2f1ce27b25617589c867cd1c6e5d2ab
a80d1b813523e44d2e59d7c2edd6919c0354873637bb15bccc88f66f5c24e05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A80D1B813523E44D2E59D7C2EDD6919C0354873637BB15BCCC88F66F5C24E05D"
Last-Modified: Thu, 17 Nov 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13579
Expires: Fri, 18 Nov 2022 10:51:56 GMT
Date: Fri, 18 Nov 2022 07:05:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b2b393e36ee2c9649d90db136aa49542
e88c5832ff0c49bab181d948c3a510d88343bb6f
8b524701df43bff56ac52a021ff0fbd964e06f00e84b4861aa557ec6ae6b4ffd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3007b4f3-f5db-4eb7-b71a-f9f854ae287e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7631
x-amzn-requestid: b47e545d-1fb6-4a62-ab45-28cdb9d3f0b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-vQE0XoAMFS3w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376ab2e-56365eed3d4c082c53b172b3;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:44:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qpoQa1Lhe-h27dGooXDCtujesSTg7Tb0Ov-PNLnUP0288ZofwHxkhQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:24:12 GMT
age: 31285
etag: "e88c5832ff0c49bab181d948c3a510d88343bb6f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X3SUo1LP97TxraRav0ftskBhzWkTJInHaS44PW26yloF-dgD-bHBuA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 18 Nov 2022 00:26:57 GMT
age: 23920
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba67d881-b66a-4d3d-a1fb-5b40b0fb4d73.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba67d881-b66a-4d3d-a1fb-5b40b0fb4d73.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 68f1108f39ac986b01f33d8eac79ba6b
c15c148b0dcfbe7c3b6e092cc43a432a7f6f4d82
0c54b6fcdc7e48c1cd524d2f17a3be086025a5e2442456e3a85319a9b7d7286c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba67d881-b66a-4d3d-a1fb-5b40b0fb4d73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6212
x-amzn-requestid: 9152d3e0-b1bc-43ed-ae38-071a9e8bb0b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brs5xGOCoAMFSjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748ea4-4e9fffa852f3f96e36d74db0;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:17:56 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 0b_OJaG0smu1LDiZechlESZui1yBf-cYLFplLYVb2-nFL8_r0NghFg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 20:49:37 GMT
age: 36960
etag: "c15c148b0dcfbe7c3b6e092cc43a432a7f6f4d82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5fb6d72b647aabea33ab4017f4a0847
ed93ac946111340a254b92f8ce27e8be93ae87e8
0782ed4ffaea8f9487461d5a9b0c241d30dfe057676753b24e180d0a94efad99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb1ea6fe-f968-42eb-9bb6-5965ae4e6ce6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7045
x-amzn-requestid: e8dace8b-0cc8-4ea0-b47a-e42a66576f72
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw-K3EuCIAMFsmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376aa45-71c191e462be52006858817b;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: S0Sq8vuP-MbcuYVx_WFXTkmrY966mBTY1Qpowx_E_to1tDk1b8R-Bw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:52:11 GMT
age: 33206
etag: "ed93ac946111340a254b92f8ce27e8be93ae87e8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08ef698a-56d7-4f19-be41-17c1eca0ce7b.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08ef698a-56d7-4f19-be41-17c1eca0ce7b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6672a5b26995975d4c7a589daf121490
b48bffb7c716db7c05dc2e74ffbc49f89e7f4c24
8d23d01e100d958dc1ae0f8f3cd39c2bc40c19c75a560c4df5ba9ce1de247615
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08ef698a-56d7-4f19-be41-17c1eca0ce7b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8644
x-amzn-requestid: 989e9461-ddcc-4a41-8d88-d86dfa891899
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9UqERtoAMFUow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8ea-40b5695c1a052c3a0bd03458;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: j-FsOPbQyKGUzW06HOBWpRb-VIB6dSNf2Dja2ZwtbQaOFs6aJ7MXqw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 21:55:43 GMT
age: 32994
etag: "b48bffb7c716db7c05dc2e74ffbc49f89e7f4c24"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4724f84-de93-48d7-8d33-1427f27e15a0.webp
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4724f84-de93-48d7-8d33-1427f27e15a0.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 55801be30fc7e7d24ba2418d00ce4ca2
31935f7d11269f0f4177a48d2c166e09fec1f377
05e58892cab261aca3abe7e29ff482b51f5f7e4261b8579e7b9f85487f53eeda
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4724f84-de93-48d7-8d33-1427f27e15a0.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7539
x-amzn-requestid: 96d0ad29-0b25-4e4b-93ea-da9fde83aa8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bw9V5E2boAMFbiA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6376a8f2-33f7f4592f8574486987e233;Sampled=0
x-amzn-remapped-date: Thu, 17 Nov 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: r1X3PUyrso5VkyphYHqBQdYo6lmmIvTQdA_kPA5I-lds8qn9RtEIpw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 17 Nov 2022 22:05:52 GMT
etag: "31935f7d11269f0f4177a48d2c166e09fec1f377"
content-type: image/jpeg
age: 32385
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
blog.plafondchauffant.fr/favicon.ico
302 Found 0 B URL HTTP/1.1 blog.plafondchauffant.fr/favicon.ico
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
Cookie: PHPSESSID=t97h73a61q10b0m52sgec2f8g4; cf25de603878aef4cf1389ec5d15df29=1668755135
HTTP/1.1 302 Found
Date: Fri, 18 Nov 2022 07:05:36 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Cookie
Link: <http://blog.plafondchauffant.fr/wp-json/>; rel="https://api.w.org/"
X-Redirect-By: WordPress
Location: http://blog.plafondchauffant.fr/wp-includes/images/w-logo-blue-white-bg.png
X-Powered-By: PleskLin
Content-Length: 0
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
blog.plafondchauffant.fr/wp-includes/images/w-logo-blue-white-bg.png
200 OK 4.1 kB URL HTTP/1.1 blog.plafondchauffant.fr/wp-includes/images/w-logo-blue-white-bg.png
IP
ASN #35393 CTS Computers and Telecommunications Systems SAS
File type PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 000bf649cc8f6bf27cfb04d1bcdcd3c7
d73d2f6d74ec6cdcbae07955592962e77d8ae814
6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: blog.plafondchauffant.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://blog.plafondchauffant.fr/
Connection: keep-alive
Cookie: PHPSESSID=t97h73a61q10b0m52sgec2f8g4; cf25de603878aef4cf1389ec5d15df29=1668755135
HTTP/1.1 200 OK
Date: Fri, 18 Nov 2022 07:05:37 GMT
Server: Apache
Last-Modified: Fri, 23 Apr 2021 07:04:14 GMT
ETag: "82a7a-1017-5c09e67512073"
Accept-Ranges: bytes
Content-Length: 4119
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
fonts.googleapis.com/css?family=Oswald&ver=5.7.8
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Oswald&ver=5.7.8
IP
GET /css?family=Oswald&ver=5.7.8 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 07:05:35 GMT
date: Fri, 18 Nov 2022 07:05:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans&ver=5.7.8
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans&ver=5.7.8
IP
GET /css?family=Open+Sans&ver=5.7.8 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 07:05:35 GMT
date: Fri, 18 Nov 2022 07:05:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i
IP
GET /css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i,800,800i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://blog.plafondchauffant.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Nov 2022 07:05:35 GMT
date: Fri, 18 Nov 2022 07:05:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
94.247.179.113
216.58.207.195
23.36.77.32
93.184.220.29