{"report_id":"f8b7450b-96b6-4878-92fb-968d2fd28369","version":0,"status":"done","tags":[],"date":"2026-10-10T23:20:58Z","url":{"schema":"http","addr":"lemapfrance.org/","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"lemapfrance.org/","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"title":"Dragslot : Trusted Competitive Online Gaming Playing","dom":{"size":22913,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"674ca398a753f6c4d7370ad81574057f","sha1":"283f28f0d85502f949fe8dc3d38fc820fac395eb","sha256":"919217ad724f7bd47f932ccb9656d5a60d04d31a2e8f61d0017cee740c5626f7","sha512":"93998e538d0d6f63223613ba6144f0a93acfb2a9e9c367e7b77999b6c00d119e56bed9d5175f0d7f7fb24ce62cd20548e556c0bead5be873509f551291ed5432","ssdeep":"384:p5EKkD2PX2A4r/ZdSZUaAhHkWpZSK3wawSw1wtOm6cwbw9ywmcKw6w9ml0M7bMuo:Fk6ejZdypa9p8Vdz8r1UbMn","tlshash":"11a27673914c1577771e93dea192731de1a69a09ce438f3ab2f931494a81ef640f322d","dom_hash":"domhashca145dd1e342e8cf8464a53ff58faa5f","first_seen":"2026-10-10T23:21:01.857341Z","last_seen":"2026-10-10T23:21:01.857341Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lemapfrance.org/","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T23:20:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"lemapfrance.org","ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2024-10-12","domain_rank":0,"first_seen":"2026-06-14T20:44:24.175888Z","last_seen":"2026-06-14T20:44:24.175888Z","alert_count":72,"request_count":36,"received_data":630056,"sent_data":19614,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/ico/nexus.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.519Z","timestamp":1791674427519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/ico/nexus.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2108\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2108,"size_decoded":2424,"mime_type":"image/png","magic":"PNG image data, 197 x 43, 8-bit colormap, non-interlaced","md5":"ee97cf1a7a4844ce9b29593bcd5305cb","sha1":"787a76893193c6d23f913221336f77609b8d884f","sha256":"0cfaef789b38286bdaf4ce3e29e0f6095860772aecbd4b60c261745ebafc9d5b","sha512":"c90ed07c6758b4ec0ba9d49e875762946d17a00b073902c9be28e5242ac048240eaf3d7c3e9f4c4af7b86b4470ec823a85af04367e222eae45c901691bd1f819","ssdeep":"","tlshash":"f941180bf86c0051819f17a2e1f264c4f36080df65eab65ac1a17af3dc1e2a850ef547","first_seen":"2023-05-13T12:53:01Z","last_seen":"2026-10-10T23:21:01.860406Z","times_seen":47,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/dana.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.492Z","timestamp":1791674427492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/dana.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2717\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2717,"size_decoded":3033,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"c3712b62642cdaf674f3155711fc2f32","sha1":"cd825109e18bad5eb9605d69165db001b07d414c","sha256":"5e85275a1da019bb89f23cdd555cd14d305d232b60b318d19bde81be9e785e8f","sha512":"e69b32113606f61827d49c2130ec15c6ea7e20c79b6764e59356252d1bed930d33a3cd134d3ae5e4e8c67ac9c977bedd3832fcd9240ae0cd61f83d7f3c5f134e","ssdeep":"","tlshash":"78516ccdd9c9704f9cdb00021e88e8d953253ba12cf2005f63240b9b9c6e73e6038b9e","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.861845Z","times_seen":68,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/xlaxiata.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.502Z","timestamp":1791674427502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/xlaxiata.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2818\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2818,"size_decoded":3134,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"b5f20778bcb38ddc8c6457eeae0b65dc","sha1":"ea995d0a209fe05cd0517be28312084fbd443ad3","sha256":"3389043f497ac653c8ee2ea3a2a5333938b7c3e95332d64b25853d9c0981eb33","sha512":"4c405884723ad5253d087b2a85f71c45f1030cc6636003e8a878c9febbfb61d1a8713a6a4b7130663181069a09fef591668cc82b5772d5818c7db1d373112aee","ssdeep":"","tlshash":"ea513b59f378513b7eb550b7455220740b71012b0140a63d99dfbb748da01bfaa2f88e","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.862537Z","times_seen":67,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/danamon.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.512Z","timestamp":1791674427512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/danamon.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2777\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2777,"size_decoded":3093,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"943499314cfdde20e80274f30170b3e6","sha1":"4cbcdb7864c5f60f647f4e2476e52288e4048b87","sha256":"4fd0911b1a34cedfd5db2aeb717d7981804e37236468ed096853686c852f0b2b","sha512":"513de5d319c840dac32ac8e01c9664e150976bee8fb6cba2d19eb0b936780b87842430a84471eafdaf441effd6dc43c971cfb09a6f7d682f4a68885232dc96f2","ssdeep":"","tlshash":"6d513bdf81d96f7dad5a88b74a0515cdc7a028273818640fe48671377d5013c178dbab","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.86328Z","times_seen":67,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/mandiri.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.513Z","timestamp":1791674427513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/mandiri.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3318\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3318,"size_decoded":3634,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"ce46b873ce33ede6cda966da31db54cc","sha1":"ebc906e05b8ef3568de8fee187df3d0ea6477b1b","sha256":"be4c6271c3cc1010bd5af223f9714ec26aa5c64b9f07ea3b34a46025ed8a0cbe","sha512":"2caa55f8578bed937e7c20d28f76fa5159bd040616287474e34cc97d22ac819020c160b3fcc07802b8e32951456cd8c5321bf170362f71c57815e864b1aaac6c","ssdeep":"","tlshash":"c6614cdee09fb86ac3d161554e7e4c203fb7981476606eca98e145004bc76ba1d92bc3","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.864904Z","times_seen":67,"resource_available":false,"data":null}},"time_used":816,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/panin.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.517Z","timestamp":1791674427517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/panin.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2302\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2302,"size_decoded":2618,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"e45c940d819ad07f51f2828dcc4c7baa","sha1":"1722658f3f6c252f29ff40949a73b0211f957314","sha256":"2fc3dac52f527c00ce8e3e534d7163a7f03f7e08e9c7ef42c7464fc7e8267368","sha512":"ead938b7d1d62c1ea44cb422f12aa1bacddc8641687185a61a7a2bb188de3d43db9c8844af69770b613b31de76865b9ab48ff4c7fc841c621ac43db94357e047","ssdeep":"","tlshash":"bc412bcad6130d43c759e1b790363d2ebdb6f6750f97218201f8e60f4250d3d84c5568","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.86572Z","times_seen":68,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/uob.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.519Z","timestamp":1791674427519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/uob.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2092\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2092,"size_decoded":2408,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"24c4cc02fe5817fcc22bddae303a8b33","sha1":"0ae078620d670c307e80f1ecb77bf4671b8a1715","sha256":"84a42fb68e4e921452f510e592c5e7cf155b7b2f36d68855c12a3efdb5071f96","sha512":"29b5cab08fa325584f8de081de450eaae71c3726363cf2e48418fc0ce1eaf54eff1f0ff8985cd42255d4c28e71e6963e33904627beedbaa87bdcc9531a2cffc2","ssdeep":"","tlshash":"5d4138821e8d2ae3d00a29f999a2af618daf461cd08c2201cdea219ad4b6303064319a","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.86647Z","times_seen":49,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/banner/slider.jpg","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.489Z","timestamp":1791674427489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/banner/slider.jpg HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 27 Aug 2023 20:15:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 199797\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":199797,"size_decoded":200116,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", progressive, precision 8, 1920x613, components 3","md5":"f91c5712dccc3310d6682e911c0129c1","sha1":"ffa813724b98114974e63a14c88c32c053141882","sha256":"c24d599f919fdc319325d3a888e284841992dafab565dae3b73a7047d3093f78","sha512":"7dc51e97a933908652afe953ed2439b42a7796731012e2a62ef7c31f7ad6e80652eb98190f1e5a37b827c05bbcbf6170b0df07ca26d74018c9ad33d41a4b85a3","ssdeep":"6144:TF0UNupfnS8a+Rvl8DV1TnA5rs7w1+MR2:TDupS6lqTk5gqw","tlshash":"9f141351d45b45bdf80b4af83615eaa8c5971203c5e88ceaee7091d3fcb026f9e70978","first_seen":"2024-08-22T17:23:07.116174Z","last_seen":"2026-10-10T23:21:01.867251Z","times_seen":41,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/linkaja.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.498Z","timestamp":1791674427498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/linkaja.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2234\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2234,"size_decoded":2550,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 4-bit colormap, non-interlaced","md5":"2079708849dab7bdebe218b247a34342","sha1":"52746961f7ba41daf49a6517ebefef12641cb703","sha256":"d464ed13bfc72ba202adf00c885e454e6889d48b0f1c03094148cebd7287339b","sha512":"99ab6a848ba56c4c4f242256816f9548278727faba90ede172d8a51c893fcac516f91b4ec61b76dbf377166ade84120a0ca03c6b8fe41efd5ddea3d100aa0656","ssdeep":"","tlshash":"bc4149c7ba238c61c62440f0eec5aebcc9de605a64d0c97ef49ed88e9726200414d0cd","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.868021Z","times_seen":68,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/btpn.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.511Z","timestamp":1791674427511,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/btpn.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2573\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2573,"size_decoded":2889,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"8f31d462d0626d1d08e497922b0bd646","sha1":"5cd3e7304b25a3a387cdc2d66ba9d73b19fafcd7","sha256":"a973901bbf3fddf2901f3b1360b6f4abbfd2197901dcc92d3996b5f94b247d66","sha512":"3731842828e77d1a2a45c8488f62262dc76cdd6cf35900871ad392aa2d00fd97a15af0d301e276f0061d33d5a0478a3c58857cb43a6ab9c5f010f06f88e81617","ssdeep":"","tlshash":"c1511ab8cce0a577fde91d04e3d488afdb678539a9d211032ba13c510c7436d01aea35","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.868731Z","times_seen":66,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/ico/livechat.svg","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.667Z","timestamp":1791674427667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/ico/livechat.svg HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/wp-content/themes/mpo77/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 426\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":754,"size_decoded":790,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b355bda5183ddcdac349fb89557ec71b","sha1":"8f48fe3aee56912793584082170e2c7b6d1e625f","sha256":"02e7dd9bd35b59f0fcae9dbc1e0193fd0e69a90b27386454e2a7f83a44c42805","sha512":"fc29cd6958e9efeeb509c45d4b1e98a757f5ece0681de3430d2674bdb23aa44ff73893a3a6999340196b68c1c2ce045030f61e851012f74e052a7deb0d35886b","ssdeep":"","tlshash":"840144f9fb289f70d8e9930ff73856e4361ea01d507a5d8c6a08490db361cf825504f8","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.869514Z","times_seen":222,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images//brand/logo.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.486Z","timestamp":1791674427486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images//brand/logo.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 01 Nov 2024 05:20:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88666\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88666,"size_decoded":88983,"mime_type":"image/png","magic":"PNG image data, 640 x 140, 8-bit/color RGBA, non-interlaced","md5":"993b3af4c0b1f752553a0f98ac3902a7","sha1":"53f4341a2e9ac1984cb59326fa3575fece98623f","sha256":"25ebeea6a09389677eeaf54bfeb35a78f1941d29065d3071add98e8b0fc3f353","sha512":"9dc0278a0f1aa090dccac4b32c1399a8f034d5a00f593004e898f154d606e08438a941bf643b59ea664c03b2632cd491acca989af1e27270d11f000d1949612b","ssdeep":"1536:sRNsosWSItqkHGrTJK2i5EQhjhPmyJfNAMNgzgT/OtUa/OM:AscSlq6TJ1irhPldgzgy9OM","tlshash":"d48312ac2ac1dc03e712f4b992fe9425a1ea858d2e43ed495638ec154cfe472391cd7b","first_seen":"2026-02-19T20:27:54.775694Z","last_seen":"2026-10-10T23:21:01.871265Z","times_seen":4,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":339,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/ovo.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.494Z","timestamp":1791674427494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/ovo.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1645\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1645,"size_decoded":1961,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 4-bit colormap, non-interlaced","md5":"32beeaac601a87195c2eaecb0ce37366","sha1":"93ce671c6cacc64a2f2a220b2995650e73c3dde1","sha256":"efdad0db55a59b37a4c0b43bb3488743ee17426aa119297b3f1ff8ed1eabc3ea","sha512":"ab61920e212dbafc6f7892dccbd23d82aaf65df1e72711bc2c896316964fecd3ac37474847a876198e3a212aa9f99131f1031d63200db5e6a09f921cc4950227","ssdeep":"","tlshash":"e031c8d552100b14e1f7985167491b5e59f15151bcc8d14e4abcd82b8a3f3bb2cd84ea","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.873004Z","times_seen":68,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/shopeepay.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.496Z","timestamp":1791674427496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/shopeepay.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3523\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3523,"size_decoded":3839,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"b35004a097e37c072d35aca5383e5bfa","sha1":"68ebc0762118611fca6d8e97b8726ffda6b6e598","sha256":"787df6d2690022133dcd5be2b0088c0a2640415373fd1ce2bc826d03624a75c4","sha512":"76fe8b0f3593e4da65f53ef7b9cbed6976e88c2ed3bc2cc2569ae33cc8d3fc622c4f19b1c4b11fef5daa7518db397e212353027643b5be9a4e1bc575de8c5f8b","ssdeep":"","tlshash":"4d717ef21599b8036bf12e6e906347408b720509a5d887f0643ffae10dc1ff2d4e5416","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.873794Z","times_seen":66,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/qris.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.500Z","timestamp":1791674427500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/qris.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2703\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2703,"size_decoded":3019,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 4-bit colormap, non-interlaced","md5":"4515132c3d78a95168e28d4ed514ea9e","sha1":"b28bef25ead4e9d66e3f8f03bc3271a51673cc7e","sha256":"3765fb7b4b0757d5cd731bed7d25cf4a764ff58b1fe399159b9c8514f1430c90","sha512":"ab22f61808da1caa3111075dcce3f84a2251702989b5ea2c1d49cfacc9def6d465b89d16b317138101aa78f62d9dd4f1016efb086c0c264ac15be9e7e0369b1f","ssdeep":"","tlshash":"81515beb7a809326246bc80667ece0d0e503cc0b27d29856f46cbe2d51fe82dd0b3e11","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.874581Z","times_seen":65,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":673,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/blu.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.503Z","timestamp":1791674427503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/blu.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1157\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1157,"size_decoded":1473,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 4-bit colormap, non-interlaced","md5":"ef5a74ad89f6233d2d27b9eec8ee230d","sha1":"f4f9cdf3aad6cc6b33f84fe0cbd083118b2372a5","sha256":"b0e532afe16d441b398658c914ddde865fbdd802baa660bb7e232a337e0c5259","sha512":"a015cc3e9fd64024b8c84037dfffcdd372ec3802146ee179053c338bb9a0e0ac2c2e9fa0a19762cea253735090ea908f9b6e9d4ed36232c27d5de707b2bfdccd","ssdeep":"","tlshash":"e3210af23f531c66eff9a77b889016b789f05d3d30c47436260a53097d3c4181083414","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.875921Z","times_seen":67,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/bri.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.507Z","timestamp":1791674427507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/bri.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2417\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2417,"size_decoded":2733,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"83b916eb7dbe52135b7581147759d334","sha1":"7a8707f9901c8c6241a34695744b263a653f47ea","sha256":"dd4637d5d341ccc3c1e27170f3bc4a6318b7d6bc0713a56899f4e1748f1576ac","sha512":"f6f94bbac06520801e5f6d39de285122fb8e334f1f0d9e02e02de1549eb9f254f0e49f6557a1f0d0631691dcd02e0c179ef63194c16e08c344d5412f09bc4d9f","ssdeep":"","tlshash":"9641089b20f4f929f341b83fe1d41319177a405f879bd01d8858b27e409a7f983e2627","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.876788Z","times_seen":68,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/fonts/Lato-Regular.woff2","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.680Z","timestamp":1791674427680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/fonts/Lato-Regular.woff2 HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/wp-content/themes/mpo77/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 182708\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":182708,"size_decoded":183027,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 182708, version 2.983","md5":"bd03a2cc277bbbc338d464e679fe9942","sha1":"cbff48bce12e71565156bb331b0c9979746a5680","sha256":"983b0caf336e8542214fc17019a4fc5e0360864b92806ca14d55c1fc1c2c5a0f","sha512":"a8fbc47aca9c6875fc54983439687323d8e8db4ca8f244ed3c77ca91893a23d3cfbd62857b1e6591f2bc570c47342eed1f4a6010e349ef1ac100045ef89cbfd0","ssdeep":"3072:a+zq/3zkl+ciohnxbjroiZ/XPHi8Mo/Oqh/J41RZ7E/Aur2mmxuN/y424XqtjiJy:aYq/IlDfcipXf9h/sTE9lwuN524Xq9i4","tlshash":"c0041258a194dee5fe761a3a03b7c540ea8e7ab041dbc6f6f0b994497e211210fcd5cc","first_seen":"2023-04-13T01:33:41Z","last_seen":"2026-10-11T00:28:53.795962Z","times_seen":6033,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/jago.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.504Z","timestamp":1791674427504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/jago.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2749\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2749,"size_decoded":3065,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"69b51bc65cc826c51e050471acfa017d","sha1":"ff53b7fc0cedd4cc8b8b38def85b4e4d3675d105","sha256":"ba47a807f393232f2e5396c761d953100230b10f60552822959bac2c69fa0dba","sha512":"c402aa6d1aac892da4de378da1f5221b914d5627c1fc596c0262b5b412ce43ba7c1846e1b9fe06a1ab6b932cd980d3c8ad2f55a5f71b481d7a33210ca35e2040","ssdeep":"","tlshash":"c8511ae18118ccb9df5b1a550b458058eea29e20e270d18329e1b2071af773c3eb88f9","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.878544Z","times_seen":65,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/maybank.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.514Z","timestamp":1791674427514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/maybank.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4542\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4542,"size_decoded":4858,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"f73f3993aca9dbeebb4226e85ec1d300","sha1":"15dcf7aaf50e6804855bfa9f47fd8fc6e8e3a18a","sha256":"a53f29bca4420f104c31473d8db2a72518243de9a024a2bfba9a6c41083b6156","sha512":"0cacc8bee777288eeb8fe49b39799577bc2f831fe597b16ab3538e4592ea8f13892c345c9f27bffa913a71a4d3e89ede0bb76cd04842c849d7ca9753319883d8","ssdeep":"96:+q6m1EkmOftX2SuaIYPGirdrXRk6o4W1he0vXKvnWqCrEM1zFCnHi9:RmOftc1DcdrBk6oDCX+x1jCnHI","tlshash":"28916d4d92468677e17579b37b1803a12f26d3173d08f0957ea4956d07a041f1a89dc8","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.879517Z","times_seen":49,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/sinarmas.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.518Z","timestamp":1791674427518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/sinarmas.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3562\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3562,"size_decoded":3878,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"cc4755100340e4ed20d1ab166fd85efb","sha1":"7db2140793c652b5e541ec99e11005d02a80604f","sha256":"26f519cfb1308d6dfc23b46a92cd7c216ed26c495f19e0d73e8ab218cc324d3f","sha512":"5cdb7ac603fff097ca58c4748940c4b892ccfb726ea590e03d11da18aa4c9392cfc0c8cc7966bd31e073496b50ee83eb9e2bd5e0a1c6da0f6b59dcde7c34d02f","ssdeep":"","tlshash":"ce715cc5276c7c66e0047d35876fcbad2a2bb31c45b2c3aa4c754806297b7815b34817","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.881382Z","times_seen":66,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/ico/whatsapp.svg","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.662Z","timestamp":1791674427662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/ico/whatsapp.svg HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/wp-content/themes/mpo77/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 759\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1465,"size_decoded":1123,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34064b2ebcc14f63c022127dbfcc221a","sha1":"df8dfd70aadf3e2bd56597ac83b6a84cc67b5a56","sha256":"7e3b8987847e1853392b849c3bbdcec23bd07c1b9d4e3d675553bba68fb09f03","sha512":"ceea55305051664fa68c2ad815ec370c819f43b87d8357883ed6107489febb4df204807303c90aa92ac5213e025a243baf294eb0271708d0bd1a20578a72987b","ssdeep":"","tlshash":"ce3165cdcbb8a2f08dc06f2d9f249d3c7e47553a25668b6cc264eb522ac3d4878065c9","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.882365Z","times_seen":213,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/style.css","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.477Z","timestamp":1791674427477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/style.css HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 15 Sep 2023 02:18:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3329\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14912,"size_decoded":3689,"mime_type":"text/css","magic":"ASCII text, with very long lines (627)","md5":"c17b39cdc2f3f5ebbfbe76bb0a9e727d","sha1":"8c4df7612be6ee7d70e18fc22a4640487d6762f8","sha256":"4396dc9ccc420effca49097e6fba60c3189182d3fcbedb2a4522cbcca964611f","sha512":"b265752d5a57ca1352499fc65d16a41611d73d5f13491f70f62d37aa4d153e7ed7bf0bfa460a465de03caf7697d02da29b3c32fba7667f29862aaffbdb6872ce","ssdeep":"384:jYF0IIgWcmhYis6SUEWKkUUsUcYwwco+6ADsIna4+2Bs8qA8oYMoLnLRhas7tuGL:jYF0IIgWcIYis6SUEWKkUUsUVnL171","tlshash":"1f62342ad386f00eb11bd57a36b56b58631d4606c30a97f960ff24f1e98ba8d18723d4","first_seen":"2025-10-30T09:54:38.688431Z","last_seen":"2026-10-10T23:21:01.883195Z","times_seen":7,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/telkomsel.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.501Z","timestamp":1791674427501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/telkomsel.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3130\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3130,"size_decoded":3446,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"6808e874d4b16ca04639518d99587501","sha1":"f4e691aeeff71d79816db4a2687c540d0729ebf7","sha256":"df82989fd6e4c1e9e0f5e8a4df0a37620120548ad3be9d85cbc1c3d1cb40d4dc","sha512":"e83e39c4ed1cab60302c44b6b534cee3401c0e57c46ded0bfc8f9d249b59eb98b33e97274199ac7d11f3af60eb83c44b09508a5f2439613a08a2897d164fa3f8","ssdeep":"","tlshash":"4f514ce1d5808f14e9ecbaf3d5ded8163e3217ec3908fab76183c5b4aa2352a0119199","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.884986Z","times_seen":67,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/digibank.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.513Z","timestamp":1791674427513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/digibank.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6609\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6609,"size_decoded":6925,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"c3e0cfe38fb5055013d66937776611af","sha1":"dad8330e95aa303eed5a85e3a380d00897d15ddd","sha256":"de1bfce9b9d0cc3ef429ca6409bf1e2234e4badb31d50f6eda2ba60c784bb762","sha512":"6697af06657be1e1d694bf2cb22d5b051d8669d2aba42f6546ba7f0f9d919f657370ddf54d1ca31ad1fc82b1fc5dbd0e16505c5792cf5cc1873923418d29aaaf","ssdeep":"96:ptlUoTdBs/RKOX5fD85/7P2DNB5fTW3kWWkeGA50iQs2gp1tCG4JbP2CM:prs/RK65fD857IBJWUTLyBgKG412CM","tlshash":"4dd19f6144bb6cb6cdc7495b883acc220127af4e28b444fa0f9375e861fbf955349ec9","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.885959Z","times_seen":65,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/banner/jackpot.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.491Z","timestamp":1791674427491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/banner/jackpot.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29514\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":29514,"size_decoded":29831,"mime_type":"image/png","magic":"PNG image data, 1280 x 223, 8-bit colormap, non-interlaced","md5":"8b2d70372ac575576f99bab5524de6a2","sha1":"fdfb9d565b2ec6833317eea69179606ecfcb192d","sha256":"6d1e54d27f1bb0f7ba46f892058cde52af333a26ad6d6b2c8173217e123f312c","sha512":"6af6fed4c0f988d4be396d0c7c84c4fba3e29a1454726c81f28a59566715bb063dfda88e8c2fc644dd6c968b082d2e505fbd827ad0c88f39e7460e152fb9f127","ssdeep":"768:yJo6CXa+G98pybIyuaUSuedi8If9Wu1DqH4:Ai/WIyubedSff+H4","tlshash":"d3d2f186b498bc9658aff3107af8445689bb1bc50fd0dfa6f8dc850a64356f1c8189c7","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.88685Z","times_seen":41,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/gopay.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.493Z","timestamp":1791674427493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/gopay.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3077\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3077,"size_decoded":3393,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"cec2f36d5364fcbb2396f825ca14ebe7","sha1":"1421b81f7c90da55628e7a514bf5e01464a22f18","sha256":"864836d004ef206fe6a1f5c9a1ed3cf7775e7060089fade9d3aac0105248e494","sha512":"7a328d7d221cc8b5599b591b10d5f17e7c35ccec514a086a0c997896b0bfbc9e9f446ed34fb8c86451fc687940115c5b9074cd5ad1146de9a218da89d2d06d8c","ssdeep":"","tlshash":"af514d6879f19f54e7911b062b753ab5fa3b0d0473e3460146e1b4332f7451e8d93ba4","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.888465Z","times_seen":66,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/bca.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.505Z","timestamp":1791674427505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/bca.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3406\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3406,"size_decoded":3722,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"12b26621eeb4926d7e9442b0120ee5bc","sha1":"16d5e491cbba10f653aa50cf69e2962a43237083","sha256":"86ee20604298fa7bc8271e8007011f591a1ae1451c8129cdd540569eca2e689a","sha512":"948332eae371029679be68e99a83b44b0108e9106f3c0fd95d72e4c76c6090146019bb7c0a04d1f5553d471d453ba99c0727b6f86aa3957af06cbd4037851ec1","ssdeep":"","tlshash":"a5615c7d5190b024db6b957070be4b194cf1bf9feea68963290b8031e4db08da681b24","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.889254Z","times_seen":68,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":667,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/bsi.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.508Z","timestamp":1791674427508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/bsi.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2372\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2372,"size_decoded":2688,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"ed2946fc2dedf0e46d1ca46cbe81d715","sha1":"e4080f10e21c87a1092d23560002b79bf0bc4971","sha256":"61ff55a82ab206f773a2be66f706722f2a7d8d447c89a71ee436c34b31d54d08","sha512":"363bfa06904b0d6ae54b9be06cd9d38f96955717d0af193886e4a19d29767f8d303996c34a68f781f61622742202f9b2131c92066afda5fa01537247c65057b9","ssdeep":"","tlshash":"4e412bcf0dad0172e25f477705b18ebd3959dc661b04ee8f27188078fb47a8898a275a","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.891373Z","times_seen":67,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/brand/favicon.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:28.360Z","timestamp":1791674428360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/brand/favicon.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Aug 2023 11:33:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2856\r\ndate: Sat, 10 Oct 2026 23:20:28 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2856,"size_decoded":3172,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"21e58bca23230f7b8477a21e43cffde8","sha1":"f7bc83e0b8d852cdadfa5ef76750d9fc2802aadd","sha256":"862815a1cd082a420f2f21c98fc2c5b169a6a451946b12de42a6d5e8921d0f46","sha512":"ec368057e73d2f83fb5115cc63c2c078319ff48c4b4f3c09a13c8e974283b75bb90754f6d49482f790cae850899961e89d3557fa4f2e77fa8c1aede11fd2b121","ssdeep":"","tlshash":"9b514df492a807d90948d3c6f000c1448ac02deed686975d3eebfac475f962c330a492","first_seen":"2025-03-17T09:38:37.284314Z","last_seen":"2026-10-10T23:21:01.892727Z","times_seen":4,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/ico/telegram.svg","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.664Z","timestamp":1791674427664,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/ico/telegram.svg HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/wp-content/themes/mpo77/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 331\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":545,"size_decoded":695,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f05a94a02a2ac1022f8627f82d20beb","sha1":"1e8e434e43dffd0fedb400304264244688074e49","sha256":"2b6bc499e30bf829b8fe730f109e9097e78f5cec09501a61816e176cf06c9a86","sha512":"174b8032f66fe001a00a0a819094628fe637b0cd4146afcfd8648806c25304be4d1dd52ed1cc223f9b6981fa5af056e094046c880a9d1d52c3ee1a40e8082d69","ssdeep":"","tlshash":"53f026a4b7447073d50d0b94975475a118a7e09fb94207acc03226703190f4bf30206d","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.895753Z","times_seen":219,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T23:20:26.532Z","timestamp":1791674426532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.1.34\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://lemapfrance.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://lemapfrance.org/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://lemapfrance.org/\u003e; rel=shortlink\r\netag: \"7-1791310289;br\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4649\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Yoast SEO:26.6","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}],"data":{"size":23064,"size_decoded":5169,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9291)","md5":"7b23b6385cd5fb2d35753e7119a1462f","sha1":"f8bc2a687e105d5f2b6905f6c961846df6e92dd6","sha256":"3229db6eed969021f3b3264c10f2d7fbf4292791e7afec804a29954bdf82c51d","sha512":"3f1aae3747a6980090153f40c3ac16bf0e4ed43728ba55e340450c7242fd80e313ea86344bfe347981a31b9d3b1c37f7a7eb9baa8688ac1bb04a55b5e58053bc","ssdeep":"384:mEKkD2ZRA4r/ZdSZUaAhHkW8ZSK3wawSw1wtOm6cwbw9ywmcKw6w9mlEM7b5hZ21:Uk67jZdypa984Vdz8r18b5e","tlshash":"b3a29673914c1577771e93dea192731de1a69a09ce438f3ab2f930498a81ef641f322d","first_seen":"2026-10-10T23:21:01.896574Z","last_seen":"2026-10-10T23:21:01.896574Z","times_seen":1,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":52,"connect":169,"send":0,"wait":170,"receive":0,"ssl":348},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/isaku.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.495Z","timestamp":1791674427495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/isaku.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3615\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3615,"size_decoded":3931,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"65a6295080a180fc67a6214003cd0caa","sha1":"097402bece5f9169ba390cef034b1775577facbe","sha256":"2c213fa2d4f17b5bca5226c77c2d68089c8f127ef98c9d20483b2ceee7761de8","sha512":"f99be238da94d78d03215cbee845bade1568acb973250f57a6ab7cca83680d22cf3ff11a3e5fa3b34d03e8fa6a7b1cbea07da0ab06722e9c8d684d74dfabeae0","ssdeep":"","tlshash":"94715cc0a399ef1cf9d6d07a6891b3371052b1b960570b9fdc31a8c476f209e5b91a9c","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.898504Z","times_seen":65,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":677,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/bni.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.506Z","timestamp":1791674427506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/bni.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2415\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2415,"size_decoded":2731,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"a9ae5f7f9298d627f9e339adebc4fdc1","sha1":"83a3444b0c014922af04649be53485ad966fc08c","sha256":"324e80732d065abba47a1ec83c7d52b3f3bb37de687ab8f3546bce66583e0ade","sha512":"57241b542313c75ef424ed6945f5caa1dfefce83731b5cae8f1c2ea488701b672d1d6e1041a5809a2a5f9daa543105f649515ca8e3adcc5816c5c16c071da06b","ssdeep":"","tlshash":"6d41089ce3f06910edc644368d781231932a567347eb92d65d21b326de0947c13b868f","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.899391Z","times_seen":68,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/btn.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.509Z","timestamp":1791674427509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/btn.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1125\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1125,"size_decoded":1441,"mime_type":"image/png","magic":"PNG image data, 124 x 50, 8-bit colormap, non-interlaced","md5":"689cfbc70d38ee9639e4a7b14d856547","sha1":"87d883394eefafc376590af48453e02656eece6b","sha256":"28a1b0a7b8f154f59921655547d1e6f05bb90c65f6f24f42f0f05443a4cc9fde","sha512":"2081f30dd2fa30f657c5f30d85ec0ea8c70aa05e8586b37e49da204140634d9e02f2e9494624d4fbd20a138b34302092c1f314cfa25270789731c48224ae12c2","ssdeep":"","tlshash":"6c2196d148025da0c8ca96fa4b1ef23fcb709222b6d56609780eb9ed1c29655c184733","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.90026Z","times_seen":66,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lemapfrance.org/wp-content/themes/mpo77/images/payment/ocbcnisp.png","fqdn":"lemapfrance.org","domain":"lemapfrance.org","tld":"org"},"ip":{"addr":"162.0.235.58","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lemapfrance.org/","date":"2026-10-10T23:20:27.515Z","timestamp":1791674427515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lemapfrance.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:13:57:7B:48:36:70:A2:BA:E8:C9:8D:4B:70:B4:BA:A4:B7:B2:5D","sha256":"06:77:5B:49:80:F8:54:B1:08:C7:7C:B2:79:AD:66:BA:6C:7D:E9:D5:D7:BD:A8:B8:8A:F0:31:B2:72:EC:50:AE"}}},"request":{"raw":"GET /wp-content/themes/mpo77/images/payment/ocbcnisp.png HTTP/1.1\r\nHost: lemapfrance.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lemapfrance.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Oct 2026 23:20:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Jun 2023 14:53:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3013\r\ndate: Sat, 10 Oct 2026 23:20:27 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3013,"size_decoded":3329,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit colormap, non-interlaced","md5":"039d5487be0486acd06b7479e68b0892","sha1":"7fe94d60fa2f57717a49793c8d521524607c83a3","sha256":"ff387b5a93c2ad3ff5a956ea54b2fdc1999eda75114a26d818ea3c735d315719","sha512":"bba2a95194034f443b5180f6962bea9a167a79d7c9272ab5e49e60d10c0a98a8b5c684a38d704b3b0b248f9d90d615045fa9c919001d1b660f7488d4f51ce4f4","ssdeep":"","tlshash":"f9517d4b4240c924ea5ded362789d74c2fb0c4c973615e1a117db0bb088543e1b94edc","first_seen":"2023-05-22T16:50:56Z","last_seen":"2026-10-10T23:21:01.901337Z","times_seen":48,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"lemapfrance.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}