GET www.amiparis-france.fr/wp-includes/css/dist/block-library/style.min.css?ver=6.2
104.21.55.194200 OK 98 kB URL GET www.amiparis-france.fr/wp-includes/css/dist/block-library/style.min.css?ver=6.2
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type ASCII text, with very long lines (48325)
Hash 47cdb0e81ea341ad27a1a0b0ba6b02d8
6195a67b0b7f7919f07309e2c8ce71f3d4729d03
aca566587618e75fa291a419c7c430be02e03fc72f6105658c1bc8e7d59a65e4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.2 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/css
content-length: 12736
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BfKiW8sad9XY%2BEiUiraVWr3BTveKUeyxgZ5FIWjw7nDCldDlLdjhZTTdc9yeSGikOttgOWLzhhKe1XmZOj2hEpDv%2FyAZ7xAX0GCxBpaB8MzIU6J3tQ2n8smhuQn6mMMZ0%2FkWRw04JlX2"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "17ced-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa4832b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=930&min_rtt=496&rtt_var=666&sent=156&recv=88&lost=0&retrans=0&sent_bytes=126861&recv_bytes=17833&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1135&inflight_dur=225&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts146.je0110.0952-433x541.jpg
104.21.55.194200 OK 12 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts146.je0110.0952-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash fcdca4b5c4d9a238626f3076cd69412c
3ead04800f18502f5ee48599abde6b460b36342a
cc34be2f01ee89c654f577b29eea40663421bda780af96e4445397f8d9d6aab3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts146.je0110.0952-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 11987
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8KmSuXUYFbkaMiTJB3V65yGRYnIAnrKR7gvlkWuwbCwnmAbWvEAUq7GyNw%2Bu18pZvIm7uD%2BWvrtZXMH2ZGwpYznFC1BvZ1k91AoDEu4QmKe2cym5YtApkLVeYUXGCga4vDFIYCOj3dX6"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:54:57 GMT
etag: "2ed3-6397b3b2f9a40"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6048aa1b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1943&min_rtt=496&rtt_var=1157&sent=628&recv=168&lost=0&retrans=0&sent_bytes=709037&recv_bytes=28764&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2203&inflight_dur=438&x=40"
GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA
142.250.74.68200 OK 102 B URL GET www.google.com/recaptcha/api2/webworker.js?hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA
IP 142.250.74.68:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK&co=aHR0cHM6Ly93d3cuYW1pcGFyaXMtZnJhbmNlLmZyOjQ0Mw..&hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&theme=light&size=normal&cb=x4nbdvntf8h3
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint0E:29:D7:DB:FC:32:8C:DD:65:47:B5:CC:0F:62:04:EE:7C:AE:80:42
ValidityTue, 17 Jun 2025 20:01:48 GMT - Tue, 09 Sep 2025 20:01:47 GMT
File type ASCII text, with no line terminators
Hash de53eaa06ef9051f38773d6022acbc18
40e00cd43994158b4c99d48c37d7517ccbf29a5f
2ad190c51a20b87a768626cd9f6818427de49735cec6f2cd8f925b2103b00f41
GET /recaptcha/api2/webworker.js?hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK&co=aHR0cHM6Ly93d3cuYW1pcGFyaXMtZnJhbmNlLmZyOjQ0Mw..&hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&theme=light&size=normal&cb=x4nbdvntf8h3
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/javascript; charset=utf-8
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
expires: Thu, 10 Jul 2025 11:49:11 GMT
date: Thu, 10 Jul 2025 11:49:11 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: same-site
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.amiparis-france.fr/wp-content/uploads/2025/07/Ami-Logo2.png
104.21.55.194200 OK 5.9 kB URL GET www.amiparis-france.fr/wp-content/uploads/2025/07/Ami-Logo2.png
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type PNG image data, 119 x 60, 8-bit/color RGBA, non-interlaced
Hash bd739536de0c8cf5ad09db38fa164c85
08d51beda3d00a8f4ff88d713c6fb07b5e09f240
211c76813f760f446060b4a18c27fdc31dcbec9be633122d8d37ccf4e620b194
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2025/07/Ami-Logo2.png HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: image/png
content-length: 5855
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EgeavKsKuwjRGcg6BHRMTkT6Y5CvRppmo1Y2HEr8%2Fy4yJ9N9UJoP3zTTaOhi%2BjEqROXYGMwJkDQz0kj7XkebyJS4FoNcz4%2BHtXSpmAUa%2FTgvRFFvXT0LxfEv2gxuwBPhkAOiE8tZBjkR"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:23:28 GMT
etag: "16df-6398ab78cec00"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd5fa984eb500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2453&min_rtt=626&rtt_var=2337&sent=101&recv=70&lost=0&retrans=0&sent_bytes=60122&recv_bytes=17003&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=967&inflight_dur=182&x=40"
GET www.amiparis-france.fr/wp-includes/js/underscore.min.js?ver=1.13.4
104.21.55.194200 OK 19 kB URL GET www.amiparis-france.fr/wp-includes/js/underscore.min.js?ver=1.13.4
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (18798)
Hash f88d5720bb454ed5d204cbdb56901f6b
f1952292fde4b15936e9aac16b2b9896684db95b
726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 7311
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=veBDk0pInC4qz%2BsISPeps4M7ZqINXU6CbKjyy51QEx%2Bt5%2BSvhAAduygy%2FFfedP%2BSSrb2C3n8BScQ6K7%2BZzQeGxgBv7eDURSsdJSSfiUM43fEjfbkG5a7F8tpvscPHguIZaRd67ykTEPa"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:51 GMT
etag: "4991-6398a7c1fe8c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fba885b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=930&min_rtt=496&rtt_var=666&sent=149&recv=88&lost=0&retrans=0&sent_bytes=118001&recv_bytes=17833&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1133&inflight_dur=223&x=40"
GET www.amiparis-france.fr/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.11.0
104.21.55.194200 OK 20 kB URL GET www.amiparis-france.fr/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.11.0
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (19855)
Hash f1fc2607d7a076ea0db4e25fda443ffd
643480a66d604c42a1d843669bb50ae44dbb1615
f868a810ac6e54ae51ccf2828f623337fb99036eb64d73a7a517f7534297b3e6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.11.0 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 5646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IHuQxmRArCJenhPz3iMPP89ZRWqg9HCkB18pYY7EwVlr2ME1Nj7oa9hJ%2FRxetZQd%2FEPzSaurkkZXp3uucYvcdxknuaEl5b3DsgW4vwA0X1GobRuio23gFMMOEUKqD1wCdPu0oXz35wHr"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:46 GMT
etag: "4e6a-6398a7bd39d80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fc38bcb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1436&min_rtt=496&rtt_var=676&sent=286&recv=111&lost=0&retrans=0&sent_bytes=287000&recv_bytes=18904&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1263&inflight_dur=313&x=40"
GET www.amiparis-france.fr/wp-content/themes/sober/fonts/fontawesome-webfont.woff2?v=4.7.0
104.21.55.194200 OK 77 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/wp-content/themes/sober/css/font-awesome.min.css?ver=4.7.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: font/woff2
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IeGI3V07%2Fcr4KLxPzSZFC%2BXu7MjsAv1IFBagHe3SINIQwDArlvwvEW%2FLVBBKmxs64cRGFkfUDNAs67Ax0c7Y1RGKjGUtVfTYv3nUxGASSlTPWWAqSB4dhsC3CjgkmF%2FDfE0j6oJ6qFNt"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: W/"12d68-6398a7c10a680-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 95cfd602fa30b500-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2481&min_rtt=496&rtt_var=1048&sent=683&recv=175&lost=0&retrans=0&sent_bytes=776875&recv_bytes=29100&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2466&inflight_dur=499&x=40"
GET www.gstatic.com/recaptcha/api2/logo_48.png
142.250.74.99200 OK 2.2 kB URL GET www.gstatic.com/recaptcha/api2/logo_48.png
IP 142.250.74.99:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK&co=aHR0cHM6Ly93d3cuYW1pcGFyaXMtZnJhbmNlLmZyOjQ0Mw..&hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&theme=light&size=normal&cb=x4nbdvntf8h3
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha-scs"
report-to: {"group":"recaptcha-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha-scs"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:05:28 GMT
expires: Thu, 17 Jul 2025 10:05:28 GMT
cache-control: public, max-age=604800
age: 6223
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.amiparis-france.fr/wp-content/plugins/revslider/sr6/assets/js/rs6.min.js?ver=6.7.10
104.21.55.194200 OK 416 kB URL GET www.amiparis-france.fr/wp-content/plugins/revslider/sr6/assets/js/rs6.min.js?ver=6.7.10
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (64288)
Size 416 kB (415889 bytes)
Hash 3be29069c6135b5e2fe4b06b3bbe6715
e719a6c2c176534ee66da27dabe80e4599410215
cdb27c4c29bde44208797bb665ed9a873bfbb2f8ea64461638ae8e82d6546d8c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/sr6/assets/js/rs6.min.js?ver=6.7.10 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4KCIPlawa%2FY945W8KkuVEc54qkvYKOccmF%2Bq4x7%2BVFZJPsklUIqrkUZbsruU6e7B6ZF5U4opNKP3gDRaaw167s643Pn5Iko%2FUPs3z3WroLm0ImaUemJilEKE8W%2B%2Bik3vV5Ov7YWyHd8c"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:45 GMT
etag: "65891-6398a7bc45b40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fb1868b500-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1332&min_rtt=496&rtt_var=565&sent=295&recv=113&lost=0&retrans=0&sent_bytes=298412&recv_bytes=18996&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1289&inflight_dur=318&x=40"
GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.6.1
104.21.55.194200 OK 2.9 kB URL GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.6.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (2938), with no line terminators
Hash 0fd625c3991a4015814cffdc88e2fc82
d7c2f53e058210ff3ea773297641008bab71a5f3
2d022db650d194d935faea46a40e5512235b43bc3f8b181e32ce6d3dd745f4e1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=7.6.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 1039
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bmX8NSawoLOApRVXGuXX8s09JLhrDHXKswMgqfOULKPKtfaJ3C20jdBjWWVrgVI9vrLKPZtvRsBYyVWuEiVT8hUECjP9Z%2FUmsePzbkzFGFk5w97JRGYOtI05jaDo%2B6EJDVmCgDX0C3SS"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:47 GMT
etag: "b7a-6398a7be2dfc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fb9880b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1885&min_rtt=626&rtt_var=1636&sent=123&recv=78&lost=0&retrans=0&sent_bytes=84488&recv_bytes=17373&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=1124&inflight_dur=210&x=40"
GET www.amiparis-france.fr/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLGT9Z1xlE92JQEk.woff
104.21.55.194200 OK 10 kB URL GET www.amiparis-france.fr/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLGT9Z1xlE92JQEk.woff
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type Web Open Font Format, TrueType, length 10372, version 1.1
Hash 8ec288e7f6a51f7cd30ca50a29eade9a
3633b52819308414803ebea177bcabc968871f8e
abdc91ec7e4438b1e1d7f808d388614789d69037059b74a9d6166d00eb9b8b04
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/fonts/poppins/pxiByp8kv8JHgFVrLGT9Z1xlE92JQEk.woff HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: font/woff
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jlvl4pcE0RLpT9Y0YcsHYiPLgH5o05%2BZMCAK9Q4Xq154L0KajRkN2bJShN4Lp1%2BE6NRUbnOA5loTE4Qf5VdfR4PFWYJexmnBK0rPb%2FsMT7XepSsYqMGJ1iO58Ix27eszFuu6ay4%2BExF5"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:21:27 GMT
etag: W/"2884-6398ab0569bc0-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 95cfd6024a0bb500-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2350&min_rtt=496&rtt_var=1049&sent=674&recv=174&lost=0&retrans=0&sent_bytes=765576&recv_bytes=29050&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2408&inflight_dur=489&x=40"
GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.6.1
104.21.55.194200 OK 9.5 kB URL GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.6.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (9111)
Hash 4ffc462852340d9e6b5b7b29276fcb71
5e04050e09e3f7d8107ef3b9aa9313be618c460e
18336635cd5e9edf2aff3ae18b67250684311c2a459457091b063dafba57d526
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.7.6.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/javascript
content-length: 3496
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aqUxJFbV0Hne42tn%2FzS3Uagywa5gDK1p%2BJNjjpRthxcVlzjqzr0E9uQbTHgvXsaYvmFM72a4R%2FdAHWwpwFTcfJcR8PyWHKq8e4Q5kW2pblI2ZtV6wuH%2FrjGtOZVkmJndz3Z1dj%2BZ%2BIts"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:47 GMT
etag: "2521-6398a7be2dfc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa6846b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2902&min_rtt=626&rtt_var=2749&sent=94&recv=68&lost=0&retrans=0&sent_bytes=52246&recv_bytes=16910&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=946&inflight_dur=176&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfupl001.760.001_1-433x541.jpg
104.21.55.194200 OK 16 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfupl001.760.001_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 7674604a3a3abd843f1e2ae3007a3a63
2a457834542910816b49a484bef80a477ba3fdc5
4345d63739047e55e23b68371e5a5cdb4739aa65e0d7e5f8a3e5f323b61f3141
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfupl001.760.001_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/jpeg
content-length: 16296
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8r17QbuNnsgaNxnxLLjCBPJe8qHMaObhz%2FAqptI7GxzQJh7n8WDT7MO9VyBNBmc5LyeJJNapmnwyVHa%2FkeVauRr2j2yDIlIyeieKywVn1YLPakEbtKF0c51Z0AmzKf6nhszfijds%2BwTi"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:59:36 GMT
etag: "3fa8-6397b4bd0ce00"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6117dcab500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1703&min_rtt=496&rtt_var=750&sent=908&recv=199&lost=0&retrans=1&sent_bytes=1048321&recv_bytes=34321&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4701&inflight_dur=679&x=40"
GET www.google.com/recaptcha/api2/bframe?hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK
142.250.74.68200 OK 7.7 kB URL GET www.google.com/recaptcha/api2/bframe?hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK
IP 142.250.74.68:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint0E:29:D7:DB:FC:32:8C:DD:65:47:B5:CC:0F:62:04:EE:7C:AE:80:42
ValidityTue, 17 Jun 2025 20:01:48 GMT - Tue, 09 Sep 2025 20:01:47 GMT
File type HTML document, ASCII text
Hash d817496c58ddfef991eb2101358ca5ce
f4027e0ef57fd97f1779570169d1f68ea3f13913
ed9acf3bf45ca378ad33dbed6867427fff31dc73c319491ce3c9337f196fcd07
GET /recaptcha/api2/bframe?hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 10 Jul 2025 11:49:13 GMT
content-security-policy: script-src 'nonce-HWw5Rx6TPUeDTQSnWLiZYA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.504_1-433x541.jpg
104.21.55.194200 OK 13 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.504_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash b05f35b8aeac4669611751d30e4f170c
2887207ec565ba515e1023f98a729c02ae259691
cdf8e33283374800566acddbac5e908067068f707c6b3594d199966b9b53793d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.504_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 12829
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4f8Oy1%2FBPGOcVqiS0aY9zHh9VMyZlyfHQw8yUtUXK1aC%2FPFrM94tRbe8jhIThqMM4v2ekRZecyRpbmWVU3Kqg4gbzcVBRXNBYtpEVjvQM3J%2FVfLJIajgmkt%2F8QzpM7In5%2Bm5FIKcxsh6"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:57:26 GMT
etag: "321d-6397b44112980"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6042a7eb500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2365&min_rtt=496&rtt_var=966&sent=716&recv=177&lost=0&retrans=0&sent_bytes=821475&recv_bytes=29199&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2540&inflight_dur=513&x=40"
GET www.amiparis-france.fr/wp-content/uploads/2025/07/cropped-Ami-Logo1-192x192.png
104.21.55.194200 OK 7.4 kB URL GET www.amiparis-france.fr/wp-content/uploads/2025/07/cropped-Ami-Logo1-192x192.png
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Hash b718b73a88c0a6b1ca4d971db673e806
fc07937d068e800ca9182ecefe2d592e70d88b93
99a0096c779cb4ce6141fa4902218a5260050ebdbb524d1aaf8428c8eafb8020
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2025/07/cropped-Ami-Logo1-192x192.png HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:09 GMT
content-type: image/png
content-length: 7408
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wSmLuv53%2B7Atfk4Fy6JIy7GY%2FPzbDvaSepikKiZ39zfJXOvBL4yzWv10CZ9GeQi8gJXd91GW%2BJx356nQ1YOnuMbPhfF2TcHiqBvmyxgfjBMXBhegVWxUyv7jKEbqSA317Nt5ESK3buda"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:24:23 GMT
etag: "1cf0-6398abad427c0"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 95cfd60a4c15b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2038&min_rtt=496&rtt_var=769&sent=868&recv=185&lost=0&retrans=0&sent_bytes=1010996&recv_bytes=30139&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=3134&inflight_dur=610&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts035.724.001-433x541.jpg
104.21.55.194200 OK 9.5 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts035.724.001-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash c18740b116edc79817fb217a9f116da9
1f557db0c6ebf893d32be85c27c817b40bdd7fc1
2933f21a708568fc32131fb270f487e4cad91584cf3379d00c66f04a74a63e81
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts035.724.001-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/jpeg
content-length: 9534
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2FOt7oDsDrrT0Vv01VDI%2BSL3ad%2FWhr6pLyXUsPsU96pnjVCbN%2B9ARZ8Fu0ft6xEIKDXikUSuEjLdWaqVTjj8upboBU9euaInzOFPHXsHndT7CbnZ6Le7xmbioeHCLfhMboMIiMNB2JdT"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:59:28 GMT
etag: "253e-6397b4b56bc00"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6115dc1b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1703&min_rtt=496&rtt_var=750&sent=921&recv=199&lost=0&retrans=1&sent_bytes=1065654&recv_bytes=34321&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4714&inflight_dur=680&x=40"
GET www.amiparis-france.fr/wp-content/themes/sober/js/headroom.min.js?ver=0.9.3
104.21.55.194200 OK 5.4 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/js/headroom.min.js?ver=0.9.3
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (5182)
Hash 21c410f27ba915d451f55fefe47d00ad
19e73f20e51bd456c209b1413be89f52c9b23df4
71e29dc805be947621e422dbfce59ea80eb8b00641874275b6393c441f0e44d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/js/headroom.min.js?ver=0.9.3 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 1673
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3T4q6lGcVQrWZU6gGd7w3iMyWWc8qawW8LnV%2Fb%2BibwuQzlngEJo04Qaf4M7C21Yw3oiF4KK8ivwziXyUygT%2BUl5vBC%2Fem0m%2F8tIULWulty7pDBayiwYd%2FjlD7wX%2FT2RO5fnZI66oJjI5"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "14f9-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbc895b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=931&min_rtt=496&rtt_var=304&sent=217&recv=94&lost=0&retrans=0&sent_bytes=202183&recv_bytes=18109&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1176&inflight_dur=265&x=40"
GET www.amiparis-france.fr/
104.21.55.194200 OK 229 kB IP 104.21.55.194:443
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (24204), with CRLF, LF line terminators
Size 229 kB (229327 bytes)
Hash 0930bff9a229d05bac97f96bc1f2e0ab
eb1ab04bd9e636dc958a65c74f03e0c20fb5603f
7e54ea14b7bd588e60c35b7a6689a270155bd66a114ad3d0402ccf12fb9ddf74
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 10 Jul 2025 11:49:05 GMT
content-type: text/html; charset=UTF-8
link: <https://www.amiparis-france.fr/wp-json/>; rel="https://api.w.org/", <https://www.amiparis-france.fr/wp-json/wp/v2/pages/27>; rel="alternate"; type="application/json", <https://www.amiparis-france.fr/>; rel=shortlink
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=BJCupLRUXOvmURKO9HhEzgIaWgv4Ba3ywF%2FqM4Ixe9sh5mJNU81iuT8pHnr9h7zhu4Edw5rNVbXKoeAQQk9T2zT%2FJ1d3JHIvRuZb2XECvxuqt6lO"}]}
server: cloudflare
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 95cfd5e31d825695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.amiparis-france.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.6
104.21.55.194200 OK 2.9 kB URL GET www.amiparis-france.fr/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.6
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
Hash 0e4a098f3f6e3faede64db8b9da80ba2
65b9b3c849f3fbdd783ddbfb183616ff55c7ee53
ab21762c3f447aa08cbefd5ea3866165f925bd5058a9ae19e23721462de6fb60
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.6 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/css
content-length: 1004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hyh4P4QP4NDIz8QnA0PMH3xeFgleccOKpHGrdpUXy9KMi%2BnqwVGR8krBqYpW01kLHnhnuzEEzpW9q%2FMfqQw0TCtiu9cLEMT8w6JoxYHlgPPnQF%2FyhMgz%2Fp7%2F6t6oZaWsqMbwL8MI%2B8S4"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:48 GMT
etag: "b2b-6398a7bf22200-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa5838b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2505&min_rtt=626&rtt_var=2146&sent=85&recv=65&lost=0&retrans=0&sent_bytes=42609&recv_bytes=16770&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=927&inflight_dur=161&x=40"
GET www.amiparis-france.fr/wp-content/plugins/wcboost-wishlist/assets/css/wishlist.css?ver=1.0.6
104.21.55.194200 OK 4.9 kB URL GET www.amiparis-france.fr/wp-content/plugins/wcboost-wishlist/assets/css/wishlist.css?ver=1.0.6
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
Hash b5f72244add35bab874b4a176c3d8beb
568dcfa6590c374a4185d5f3395200abd2cc05cb
ffd231345ab2ffd0248998050bd4867822737cf20858d7ed5feaa2c620f65d91
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/wcboost-wishlist/assets/css/wishlist.css?ver=1.0.6 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/css
content-length: 1343
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Tiq2xThKDb5XCNa9o3QNfWR7aZlemtEv744G%2FuuM8e8d5ygVjJJsn3wSiUlMW9sL5Zh8bsYMJOlU79y2RselfN5ugUizbfyx%2B5CXzpadIKFHqcD9HXbnPUQXMAyz%2Ftx4xauvbGs4ezV"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:46 GMT
etag: "1348-6398a7bd39d80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa583ab500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4627&min_rtt=1062&rtt_var=2448&sent=35&recv=31&lost=0&retrans=0&sent_bytes=5788&recv_bytes=10124&delivery_rate=419798&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18078&unsent_bytes=0&cid=3db48a08702844a6&ts=599&inflight_dur=58&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/ftp354.wv0074.1360-433x541.jpg
104.21.55.194200 OK 20 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/ftp354.wv0074.1360-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 745fb86fd2eba76b5bbde0f95930d968
e7c07f0fa9149fe81c9864e729065543f6dd29ab
a5e589b7657dbbe5a2a266e63e20258897420f109961b193c096160a9558cc11
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/ftp354.wv0074.1360-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 20347
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RD%2BlZVgYgSI65ku4SGyvZ6mVT%2BcpJD%2Bl0%2BSSiu7urRcMAzvvl34FXKgcXQNKIxGY3IUosM9tuPHo89mH5Tc3sAkKl5GzyfiL85P4yiI%2FZ3rEVldbvtS7DiIYz%2BIDUxavHxV9dwkjjzHH"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:54:52 GMT
etag: "4f7b-6397b3ae34f00"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6045a8eb500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2365&min_rtt=496&rtt_var=966&sent=759&recv=177&lost=0&retrans=0&sent_bytes=878508&recv_bytes=29199&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2553&inflight_dur=521&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.4013-433x541.jpg
104.21.55.194200 OK 10 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.4013-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 45949c944784badc8913681ce69c866b
b1057129c34c6e8f5dc0a6d214cf18cde2ab89f6
a981d11e6b2ea58552d2cb53c4c3ef443a514ac3fb38e1c495e148866cbec40f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.4013-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 10320
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VOS6dl06ZyC7%2FAAcCZ3akq%2BXtTUPn%2FopJhYdOswoGhUGc%2F6MfTIBdvz4W56BuytGJkwZnut24gIMSrAR%2BrkAWTxSjeZV3KIqvQ8XXcjh0DjlxqvChab8%2BbSQxw9iZ93anBCwW7GuIRjK"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:57:02 GMT
etag: "2850-6397b42a2f380"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6045a8db500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1249&min_rtt=496&rtt_var=555&sent=586&recv=165&lost=0&retrans=0&sent_bytes=655985&recv_bytes=28623&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2175&inflight_dur=421&x=40"
GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js
142.250.74.99200 OK 792 kB URL GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type JavaScript source, ASCII text, with very long lines (688)
Size 792 kB (791775 bytes)
Hash 6dbbd249df18061c1db8902b45271648
aa188a6fd94457b382c134d0ab2cf49b3b1ca7ac
c5c7449312a185b3eeaf553524a6229ce91349ba8894b6ac7d99d20ca6980f96
GET /recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.amiparis-france.fr
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha-scs"
report-to: {"group":"recaptcha-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha-scs"}]}
timing-allow-origin: *
content-length: 337754
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Jul 2025 13:18:00 GMT
expires: Thu, 09 Jul 2026 13:18:00 GMT
cache-control: public, max-age=31536000
age: 81068
last-modified: Tue, 01 Jul 2025 16:48:13 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.amiparis-france.fr/wp-content/plugins/revslider/sr6/assets/assets/dummy.png
104.21.55.194200 OK 68 B URL GET www.amiparis-france.fr/wp-content/plugins/revslider/sr6/assets/assets/dummy.png
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Hash 2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/sr6/assets/assets/dummy.png HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: image/png
content-length: 68
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wWMpbbtDd2o%2BKZHRvoDzc7dfM2JeKhCcOz38FUhPPaplvhAJQtRT9Snu0%2F7xO3yEpjPSux4JIccCjj0sY7Y4sNJNk9w7cGb%2FzhoFxnt9bp3C%2F0ULIEn1avrvdfv2YmW67vFf8gkq3yOn"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:45 GMT
etag: "44-6398a7bc45b40"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd5fa9850b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2348&min_rtt=626&rtt_var=2240&sent=117&recv=75&lost=0&retrans=0&sent_bytes=79771&recv_bytes=17232&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=1011&inflight_dur=203&x=40"
GET www.amiparis-france.fr/wp-content/plugins/wcboost-wishlist/assets/js/wishlist.min.js?ver=1.0.6
104.21.55.194200 OK 10 kB URL GET www.amiparis-france.fr/wp-content/plugins/wcboost-wishlist/assets/js/wishlist.min.js?ver=1.0.6
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (10085), with no line terminators
Hash 1158b4b0d3b167e62bccef50884457ee
50cb04c58e526682580978d6b11223e51975abcf
333e6159fd8f445a97939b9277d1c1868462385a6072e3d6a7c8699458b330ec
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/wcboost-wishlist/assets/js/wishlist.min.js?ver=1.0.6 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 2706
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oZRbKC7%2BurRfr1Y7Vro8JC%2BAgfPxOcpfkVaUbETdO%2BF73ehgL1zRvGk2UuJvqvGVO0T2KDSv%2B8Gl%2FKEukze2P292nK6IFIpgKeZkCk6H6zpcvRYa%2Fvugsim41IxxQE69SRNLTG9PVjZV"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:46 GMT
etag: "2765-6398a7bd39d80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fb9882b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=931&min_rtt=496&rtt_var=304&sent=217&recv=94&lost=0&retrans=0&sent_bytes=202183&recv_bytes=18109&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1177&inflight_dur=265&x=40"
GET www.amiparis-france.fr/wp-content/plugins/sober-addons/assets/js/isotope.pkgd.min.js?ver=3.0.1
104.21.55.194200 OK 35 kB URL GET www.amiparis-france.fr/wp-content/plugins/sober-addons/assets/js/isotope.pkgd.min.js?ver=3.0.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (32010)
Hash c09fe8844fcbb765121f3805619aadd7
6ab5675d4de2b3feb8b4d09309d18c37c8ae322c
7164985b21fde0171bbc6068285fcd32e7f33f0a25eb62b289a97100be17e1c7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/sober-addons/assets/js/isotope.pkgd.min.js?ver=3.0.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 9678
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RwbXos%2BhWdCMaKdSdgwuuKtofl08OvcdFaGuFDt7LkZL9KChhKXsVTgAItAubtO%2Bzq2y6vJuhR5NxzHhtq7au9wJGtRSRBautEORUVQDe%2BKwFs10omy%2Fw%2BBsezU90%2B9CX4c1MXPTLr%2BS"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:44 GMT
etag: "8787-6398a7bb51900-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbd89fb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1461&min_rtt=496&rtt_var=520&sent=336&recv=116&lost=0&retrans=0&sent_bytes=353579&recv_bytes=19134&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=27101&unsent_bytes=0&cid=3db48a08702844a6&ts=1335&inflight_dur=326&x=40"
GET www.amiparis-france.fr/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.9.3
104.21.55.194200 OK 6.4 kB URL GET www.amiparis-france.fr/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.9.3
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (6439), with no line terminators
Hash eafdbde5c4e53432f48a58adc20b2c6b
98816b151f851d0a71e115f59474023793058e46
12a618537a5ecc700c5cd76816ded0793c5c369fa6d786ce82b7199e34b080a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.9.3 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 2588
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hj1GIq6vXpTVL0Os%2Be6BSON1qxwYwl6Bhuc%2B4Ch8shxiWTa0CKnqqCXrwo%2F9TL88BbXLfaGwvjufvl0LQV9Z0fACx8O9uKd26mLb5VQWx6J1DVCScvFCFp%2Fq5fmFRXnsffWlU%2BMqUOSd"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "1927-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fc38bdb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1015&min_rtt=496&rtt_var=343&sent=263&recv=106&lost=0&retrans=0&sent_bytes=258402&recv_bytes=18679&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1229&inflight_dur=295&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.504-433x541.jpg
104.21.55.194200 OK 9.1 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.504-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 8e6785023ed5f5ea8d48a5a973974aa4
f93991106fe2ff2eec5ec8578bfdb917b1062098
90f84294cd76eca7383fb49b011a6e99b16e71df8bc3df7272c8d874098f06ab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.504-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 9142
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ShvISwHD%2FOBxWWvNvm1IN2xLPuXGrqqfs32DpZU0b6rO8A2tVQTDIDxhQcvxVbWgTJLlhAT5lsqD76nERUZWm6yQRVYkXdu30JFMb%2Bv3GB8b91EQXwI%2Fo54P9z%2FT1cpEvxgdRPh%2F%2FmSn"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:57:25 GMT
etag: "23b6-6397b4401e740"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6041a7cb500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2365&min_rtt=496&rtt_var=966&sent=716&recv=177&lost=0&retrans=0&sent_bytes=821475&recv_bytes=29199&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2540&inflight_dur=513&x=40"
GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/styles__ltr.css
142.250.74.99200 OK 79 kB URL GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/styles__ltr.css
IP 142.250.74.99:443
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9f4a1a9c69cf6660943401497e2b5f91
ade51c9647d063948704ecbaacabb1708bed1b45
d3de3db369f6cafb26a9fb7709e1cc1c8b51858c60dd8888746c09acb354466e
GET /recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha-scs"
report-to: {"group":"recaptcha-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha-scs"}]}
timing-allow-origin: *
content-length: 42038
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:31:47 GMT
expires: Fri, 10 Jul 2026 10:31:47 GMT
cache-control: public, max-age=31536000
age: 4646
last-modified: Tue, 01 Jul 2025 16:48:13 GMT
content-type: text/css
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.amiparis-france.fr/wp-content/themes/sober/js/jquery.fitvids.js?ver=1.1
104.21.55.194200 OK 3.2 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/js/jquery.fitvids.js?ver=1.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text
Hash 3fde640beffaca6853692c3a8399837f
b0e920eb8b0e05abaa32c921f14faf0d9437c8ae
5a55d3de0a725a8d09ab29a42ac534238742c459937d09d199e279eddeef74ca
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/js/jquery.fitvids.js?ver=1.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 1298
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IWNXu3ZHHeg83rzOoUNOtoxD1eki5Xl4zPCrOLhuVAXRzEw0D1UJAhyieZhy01MKF%2FTGpqqkMUDQcT%2FaUympCnsrWBymRmIjQJWlfBurEAtvsSVaDNJiR1nJPvI1bIcLSV%2B824A1STMA"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "c95-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbd8a2b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=931&min_rtt=496&rtt_var=304&sent=212&recv=94&lost=0&retrans=0&sent_bytes=197264&recv_bytes=18109&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1175&inflight_dur=257&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.001-433x541.jpg
104.21.55.194200 OK 9.8 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.001-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash dcac174c9c5005969d70de6140eb4fcf
cc066fe5913fdbfbd9df03b8d1ac22cbffc91242
dcabe923774239b987fbe342e6ae395d1f84c8aecf46643b4a60632dcdea443d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.001-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/jpeg
content-length: 9848
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2BIwBHzlCzOZizQwGhAyETXQ19JwK%2BFcF%2F9H3XgLZFw6RcfxSiRs2Lg%2BcRVEBU0elCw5JyIHNunm5F7d7pAogD0anXF7ASAJOU9ccuQnXk7ve99TsAcmAplDw582JkuW%2B70XiF3af%2Bt9"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:56:54 GMT
etag: "2678-6397b4228e180"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6113daeb500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1703&min_rtt=496&rtt_var=750&sent=921&recv=199&lost=0&retrans=1&sent_bytes=1065654&recv_bytes=34321&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4714&inflight_dur=680&x=40"
GET www.amiparis-france.fr/wp-content/uploads/2025/07/Ami-Banner3.png
104.21.55.194200 OK 2.1 MB URL GET www.amiparis-france.fr/wp-content/uploads/2025/07/Ami-Banner3.png
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Size 2.1 MB (2063216 bytes)
Hash 7762235cc455425b6664e7c97f369635
ebcfc6b88d1c9229127f27e67aacd9870e1aa242
91e8917c6c5882358882299d710dd2e21b04b9c12e92f6819bd33f4a3bb15320
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2025/07/Ami-Banner3.png HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:11 GMT
content-type: image/png
content-length: 2063216
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=knk8WaaSX7Stt69shuWcXTeKOQCCSupYnIm4%2FyopPcOeYByptPhMrTIntkSv1DDQdh3L98fSXpgXpAQGJdZr3z9yN1MfG57OmKD3OyrnKBFiMY1PgjuZcGmCpzmHu5NNpU5xqIqED%2BWd"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:23:25 GMT
etag: "1f7b70-6398ab75f2540"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 95cfd619df6cb500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3438&min_rtt=496&rtt_var=2214&sent=2976&recv=267&lost=0&retrans=2&sent_bytes=3894492&recv_bytes=38533&delivery_rate=66162638&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=93950&unsent_bytes=0&cid=3db48a08702844a6&ts=5792&inflight_dur=921&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts003.724.001-433x541.jpg
104.21.55.194200 OK 9.6 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts003.724.001-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 17b1ffa39f74253d82d04c7aa54e7f6d
bdfb3564865b24def60475899ef0830e602d8856
af6d7d2948c0a3b880f43ecb22c6ac5b6a0f1482e55d520ea050a870aaec0993
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts003.724.001-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 9617
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IQKtxTaPOW9TA0W%2B7OWEJba0KNFcEOPTvX4t%2BfGsIDMcerHfIQA8a0QO4gbtmD6QExczymhsIYer4N5YHSWIfQ6X63%2BdsVouWa1jJlinnidx0aGwOr1jcaKfhD6W7aDLdO03mnDZLgQK"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:59:12 GMT
etag: "2591-6397b4a629800"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6049aa6b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2010&min_rtt=496&rtt_var=961&sent=645&recv=170&lost=0&retrans=0&sent_bytes=730402&recv_bytes=28858&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2221&inflight_dur=452&x=40"
GET www.amiparis-france.fr/wp-content/plugins/revslider/sr6/assets/css/rs6.css?ver=6.7.10
104.21.55.194200 OK 58 kB URL GET www.amiparis-france.fr/wp-content/plugins/revslider/sr6/assets/css/rs6.css?ver=6.7.10
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type Unicode text, UTF-8 text, with very long lines (12602)
Hash 08f3fa5cd7040c88c7ddf43deadde2a9
cd026e9a65b6c13b7140a87f2d550ecc165b1af2
d2a7a173045c7ed2c9474ee0edd3ebc0389454132b0a16e55b3eae6402c46a05
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/sr6/assets/css/rs6.css?ver=6.7.10 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/css
content-length: 12492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gEq5Cthnf9wv69W3%2FjuAQt%2BNhsDstxUuJ%2BoP2D3yuT9m2nm%2FkMAVAlRkM7A9smXmBDtitKJYueoAnL9f7M13uf1k49adYN2aVhJRCyl0BlFtF843JNoXMsH7czqypKqv%2BpIjE%2FOo%2FmPT"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:45 GMT
etag: "e3d7-6398a7bc45b40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5faa855b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1304&min_rtt=496&rtt_var=985&sent=234&recv=97&lost=0&retrans=0&sent_bytes=223518&recv_bytes=18249&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=21185&unsent_bytes=0&cid=3db48a08702844a6&ts=1185&inflight_dur=272&x=40"
GET www.amiparis-france.fr/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.2
104.21.55.194200 OK 1.1 kB URL GET www.amiparis-france.fr/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.2
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (1107), with no line terminators
Hash 8a5c9689ae636c452b6808740ba04136
8d2c85d7779d00c12aeb6b55a99443952d9a144e
79cb399203843f65199bec32bc4abac5dfd20f141d3e4ec1424bf00c7108fa45
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.2 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 538
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lya1UJJ7Yvv%2BAImZG89Wl7jmJqbM%2Bwa53VLA99Xo5ffyQY%2BMkF4KUuHmPHHxWKvSwEhDoJuVWZR94f3Ktad9E2KfQCW4JAl4IeaoC8YoExxShKwtCvgkPQwtU5qLqEyFoFuWLv4UK8Cx"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:51 GMT
etag: "453-6398a7c1fe8c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbf8adb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1002&min_rtt=496&rtt_var=423&sent=257&recv=105&lost=0&retrans=0&sent_bytes=251790&recv_bytes=18629&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1210&inflight_dur=285&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/ftp354.wv0074.1360_1-433x541.jpg
104.21.55.194200 OK 18 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/ftp354.wv0074.1360_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 468889e536a3e525dedc1696b4b9f6ea
20da708348eb8b0d55b30a6af07bb51117b3499e
55680bfcb8863a38d81f4a7834e760095293453189f8e13fbd92d1a144c65342
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/ftp354.wv0074.1360_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 17715
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1j0UNlIGv0E%2FmFNiEEc8lcKIun4c7iF%2F%2B%2BQIje%2FnTUqNWPHbI31pMEIkNWXjGDGUcd%2B15Eva2R1bdEWTBOFROTgLhzOgDP7Mkn6MPD9WEUCvg9AsTCVCtz762wIK9WKrZudaiucDfFKY"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:54:53 GMT
etag: "4533-6397b3af29140"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6047a94b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2365&min_rtt=496&rtt_var=966&sent=734&recv=177&lost=0&retrans=0&sent_bytes=845304&recv_bytes=29199&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2544&inflight_dur=514&x=40"
GET www.amiparis-france.fr/wp-content/plugins/sober-addons/assets/js/products-filter.js?ver=1.6.10
104.21.55.194200 OK 13 kB URL GET www.amiparis-france.fr/wp-content/plugins/sober-addons/assets/js/products-filter.js?ver=1.6.10
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text
Hash 266bb8dbcfe917eb10470350a3329126
b2c7433f6d7b7ed7fe2a4abbd8436672f14ee1d6
e9ddb01cf61a70d5668524628099928e697afb8c26f5e0c88ad051fba42567d6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/sober-addons/assets/js/products-filter.js?ver=1.6.10 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 3322
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ERbwkAakv3WAiz9FA%2B%2F4kmwRbYfcJoUqph3alS9U01E3O1LZcLdsNmF8Qer2Nu6KWoDNfVCNVEFfu0vqPvagDwaOQC4MDjTyEGJOzEvAsM7tfpjZhfEs%2F3zkEdo7Cu4tnb38utqmhI8"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:44 GMT
etag: "342b-6398a7bb51900-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fc18b4b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1015&min_rtt=496&rtt_var=343&sent=260&recv=106&lost=0&retrans=0&sent_bytes=254315&recv_bytes=18679&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1226&inflight_dur=295&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts075.726.136_1-433x541.jpg
104.21.55.194200 OK 16 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts075.726.136_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash c5dbf9d55f004de70ab05c4cdd0bcb1e
23fcfd1fcde47a68dd692aef53b279c8a24e4ecc
5c45716e5543a6958db628d8f474df105ca53c72fd5fd45cf2e945bc86664cc6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts075.726.136_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 16429
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6O5EhjDys3YbNDbIWQNSoaKKMbl4dDMkuMwQ%2FFWPLBIVFvfXl0o4kuubc2VdJ6A7iyLps6Qv7KA3FcjQoiLEB2J2zWI9BbIVsUvI5rqrsk8SxLNmvO%2Bz25P7b26O3G%2B0mYGUdWyNlJ7E"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:55:02 GMT
etag: "402d-6397b3b7be580"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6048a9db500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1871&min_rtt=496&rtt_var=1349&sent=614&recv=167&lost=0&retrans=0&sent_bytes=691543&recv_bytes=28717&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2197&inflight_dur=434&x=40"
GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.6.1
104.21.55.194200 OK 75 kB URL GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.6.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Hash 3771146a6c13cd738d210ecc2bd35ab5
fb3c3d0b2178b3c08cec7c5eec99b9beebf7dbe6
509be74020caaaf83a87d9b552b8ff49bc79efd821240a94ad4f7c48acefaf1e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=7.6.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/css
content-length: 9344
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=628ZLeH%2Boj5shQffnhYjumKLiAkSbKcqqRGjlUZffLDwbVjjbCuJzjFqksWjPJMJOtk%2F4uKMSZDI%2BqA3ckjl94479m61kr8mjoeAxmfsJrj8sNZhzTxoaT3Cv6JEfIpaCFb%2B2B0qXmOo"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:47 GMT
etag: "123ad-6398a7be2dfc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa5839b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=888&min_rtt=496&rtt_var=453&sent=167&recv=90&lost=0&retrans=0&sent_bytes=140577&recv_bytes=17927&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1146&inflight_dur=232&x=40"
GET www.amiparis-france.fr/wp-content/themes/sober/js/sticky-kit.min.js?ver=1.1.3
104.21.55.194200 OK 3.3 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/js/sticky-kit.min.js?ver=1.1.3
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (546)
Hash 894bf69a88c8406680629c151343ff1e
c51154c3433802a7b8d1a7f31e7aad54a3a2abf5
7a39f30800c1ef8779686fd48037bb5d95fc6471cefe29e60c61f00ae2a846db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/js/sticky-kit.min.js?ver=1.1.3 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 1411
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pJ7nsj6VddGhPyHheasBZvU5MxKw3s%2BrHrksYdx%2BNqpj1tYpmp0YiGy%2Bzu2mHgQZY%2BBZZ9MvZKeD09Og7df08NUUZOuxTH3EFolhLvw8JERKd5mRmmw5gwJ6KsIsnE8fQHF6Q6jIONXt"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "cc4-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbb88fb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=931&min_rtt=496&rtt_var=304&sent=210&recv=94&lost=0&retrans=0&sent_bytes=195115&recv_bytes=18109&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1168&inflight_dur=256&x=40"
GET www.amiparis-france.fr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.6
104.21.55.194200 OK 13 kB URL GET www.amiparis-france.fr/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.6
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (12943), with no line terminators
Hash 5bc2b1fa970f9cecb3c30c0c92c98271
7c6bb87aaa24714b7b3b3c86dd932736a80270a9
1060091178cbd6c843b802f516f230f1a3a1e85f1afbd6ef84d80e5430ba457e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.6 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/javascript
content-length: 4182
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=luTxi4CSRaLmBbqHDaljrH9FEQ166iir%2FgQOBtURDXNUWtQHBNegO05WXec%2B5R77FCA4erJYSZFjp9mu3uphtH%2FSlq7H9pBzLpQzlwbG2qlRXPYWgJc%2FO0Rqy0eUm3YUfb%2Fx70to2HGF"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:48 GMT
etag: "328f-6398a7bf22200-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fab857b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1813&min_rtt=626&rtt_var=1560&sent=112&recv=74&lost=0&retrans=0&sent_bytes=73477&recv_bytes=17187&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=992&inflight_dur=195&x=40"
GET www.amiparis-france.fr/wp-content/uploads/img/free-shipping-white.svg
104.21.55.194200 OK 1.0 kB URL GET www.amiparis-france.fr/wp-content/uploads/img/free-shipping-white.svg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type SVG Scalable Vector Graphics image
Hash a097914999e0a1210ceae16551339e3b
cfa739879fc4b438fa69a023c588d154e4ac51cc
4495a07f8a4e7ac27a9f1f4fca180143508faedf5fdb6905e67578e898ed1843
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/img/free-shipping-white.svg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: image/svg+xml
content-length: 612
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G3q55Bc3KFAYMVfk1hf7zAH4o%2F7CMHSJstHQ5EkYgxfL09uIYl2pmacMdNdsk7q%2FWOIicEGAf8JEWL6hGciunaAWtJyz4Giq09J%2B50NgAeGocUl7eJEiYtCHeJasltingWv%2Bznppwvmy"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:43 GMT
etag: "3fb-6398a7ba5d6c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa984db500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2348&min_rtt=626&rtt_var=2240&sent=116&recv=75&lost=0&retrans=0&sent_bytes=78453&recv_bytes=17232&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=1010&inflight_dur=203&x=40"
GET www.amiparis-france.fr/wp-content/plugins/wcboost-wishlist/assets/js/wishlist-fragments.min.js?ver=1.0.6
104.21.55.194200 OK 1.6 kB URL GET www.amiparis-france.fr/wp-content/plugins/wcboost-wishlist/assets/js/wishlist-fragments.min.js?ver=1.0.6
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (1583), with no line terminators
Hash 59ef7ce0d8ae7d8152d0fceb7c6d4ca5
30b677cf66154cd00821f9402108076af2a93945
28c4097b16b389544cdda2a57f8cd081c1112dc6d5679f36eb390a5a72db3685
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/wcboost-wishlist/assets/js/wishlist-fragments.min.js?ver=1.0.6 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 595
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zs2th0fpVKa97qBUc11l41taYOHsCzrLRgHeu%2BrBpsfxF8jXIafd%2FkuuubmnqfDneEDSm97sTFLpZo2ybMgZpJa%2B44jr01ALMiBLV0OxzvCzLOEfnNRse3be7cRezgqvfuXKmIhc7YcR"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:46 GMT
etag: "62f-6398a7bd39d80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fb9883b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=931&min_rtt=496&rtt_var=304&sent=214&recv=94&lost=0&retrans=0&sent_bytes=199299&recv_bytes=18109&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1176&inflight_dur=264&x=40"
GET www.amiparis-france.fr/wp-content/themes/sober/css/font-awesome.min.css?ver=4.7.0
104.21.55.194200 OK 31 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/css/font-awesome.min.css?ver=4.7.0
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/css
content-length: 7053
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D2EHUakaNTs5eiTn1kKXI7epbsPm6p5xcaTj48SJYTrVUFdQbkM7pNTZYnM4hCPgf8gpkrT6aU8ee9Xn7BOSfIryIrMDeSJDdg4ptk%2BClrTvQaLl7PFDyIK6s%2B%2Bv%2B2pOZSOfXKqFh99n"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "7918-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa683bb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2378&min_rtt=626&rtt_var=1864&sent=87&recv=66&lost=0&retrans=0&sent_bytes=44338&recv_bytes=16817&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=934&inflight_dur=167&x=40"
GET www.amiparis-france.fr/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.6
104.21.55.194200 OK 10 kB URL GET www.amiparis-france.fr/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.6
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (10241), with no line terminators
Hash 7be65ac27024c7b5686f9d7c49690799
241ada4a86443adc5623d1a3a8018a96d9de6d5a
52db930f81d97113dde679cac624cb5435b56d4ac486e91a0b6692d2cb615a84
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.6 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/javascript
content-length: 3010
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s6%2FnOrmwcMVWVmQiXfDQJ41lTMHosTFcb5AYV3DQeEyCxaXH8j46mu3hDyPTiS3UPu8CO6X6l2knov29T4XHin4J4NR3bcT43OE1qldizEk89uX49%2BVIDkzSuS3LzNFMQRIlwGckaygU"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:48 GMT
etag: "2801-6398a7bf22200-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5faa856b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4362&min_rtt=1062&rtt_var=2366&sent=42&recv=37&lost=0&retrans=0&sent_bytes=8014&recv_bytes=11589&delivery_rate=698737&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=20174&unsent_bytes=0&cid=3db48a08702844a6&ts=625&inflight_dur=61&x=40"
GET www.amiparis-france.fr/wp-content/themes/sober/js/script.js?ver=3.4.7
104.21.55.194200 OK 73 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/js/script.js?ver=3.4.7
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text
Hash 2d66171eb32539e812615604aa388428
10249e30fdfad0a558f2bc8a9b09fac3efd1839c
baf84ce318ef6d949ed7097b1cd7c77e6e320cfe58bbc7c793e74282193db334
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/js/script.js?ver=3.4.7 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 17186
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6PBgHP7xB23Ubhwp40h7aN6mAqI2t4La4jlrdJt%2FxFLJNkFrmLay0ppBENpvUVwCh2Zcn72IoUIY12BG8%2BNGOje0TGBz635gkU9peMmIQv8wz0%2Brwc%2BQtgtykJ6MHoSORbXCCs%2F3a2WO"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "11e09-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fc08afb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1031&min_rtt=496&rtt_var=659&sent=377&recv=125&lost=0&retrans=0&sent_bytes=407125&recv_bytes=19569&delivery_rate=12024908&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=22631&unsent_bytes=0&cid=3db48a08702844a6&ts=1387&inflight_dur=339&x=40"
GET www.amiparis-france.fr/wp-content/themes/sober/style.css?ver=3.4.7
104.21.55.194200 OK 384 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/style.css?ver=3.4.7
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type ASCII text, with very long lines (64958)
Size 384 kB (383867 bytes)
Hash afeb83ee922d26a3d039c8b37540f5e2
9c8d2e4b373a1eb3cc449e9ef867b13be8253c8a
e258924fce57eb71e5db5b1026a45b463e5067001342cf61591bbc53888eeb3c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/style.css?ver=3.4.7 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/css
content-length: 55419
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XIEEF3D4%2BsgZqP0TeFsJrXP5W4Ll8N3xTwuJg2EDyJTIjMmRn4aIy1QxAAYKDhnBS2h2E%2FMP7S1xptCeoM5r2iQxwUC7swQ1o8ZweuGJdlEzo6FOQGWJhzhUqc6TLdoQdt14F556PXoC"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "5db7b-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa6842b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=931&min_rtt=496&rtt_var=304&sent=205&recv=94&lost=0&retrans=0&sent_bytes=189980&recv_bytes=18109&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1165&inflight_dur=254&x=40"
GET fonts.googleapis.com/css?family=Roboto:400&display=swap
142.250.74.10200 OK 5.7 kB URL GET fonts.googleapis.com/css?family=Roboto:400&display=swap
IP 142.250.74.10:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintB7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type ASCII text, with very long lines (1572)
Hash de7e697b2ba2c2cc63ea8a9f63d22ad9
726cd824dedfe6246875cbd81bfcf95da1efb4e2
7eeaa18ea1e4245acccd54af188f48004ea2f276f7457cbbe97adf4552791bfa
GET /css?family=Roboto:400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 10 Jul 2025 11:49:06 GMT
date: Thu, 10 Jul 2025 11:49:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.amiparis-france.fr/wp-content/plugins/revslider/sr6/assets/js/rbtools.min.js?ver=6.7.5
104.21.55.194200 OK 165 kB URL GET www.amiparis-france.fr/wp-content/plugins/revslider/sr6/assets/js/rbtools.min.js?ver=6.7.5
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (45047)
Size 165 kB (165339 bytes)
Hash 0a7176e860c4303f557950b75fb8a898
c292eb1b902ed06fccd65a684d6b311e1290caa9
c4596b16b126326b0d8fc2fb8bf91389ad3dc4671a269187913c19a8f2ad1094
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/revslider/sr6/assets/js/rbtools.min.js?ver=6.7.5 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3VtVtIQI9%2Fh7E0BODrKdjdTE2ycN%2FsyOxOlN6sTGtIUMXL5eSgyDHs6dcqJMLSAoakLWi3mal8jngz4dCeq1pI14qk6V6Ti7b%2BzevmBOTQiIDwnUa5V5NvCFeOR2aMz0CfrEnMaqrs%2FZ"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:45 GMT
etag: "285db-6398a7bc45b40-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fb1866b500-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1207&min_rtt=496&rtt_var=454&sent=273&recv=109&lost=0&retrans=0&sent_bytes=269580&recv_bytes=18814&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1252&inflight_dur=305&x=40"
GET www.amiparis-france.fr/wp-includes/js/jquery/jquery.serialize-object.js?ver=0.2-wp
104.21.55.194200 OK 769 B URL GET www.amiparis-france.fr/wp-includes/js/jquery/jquery.serialize-object.js?ver=0.2-wp
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text
Hash 062a8544d0420d750f9f36aae4d3f221
62edc653486605304238c4077fb7cb1b52c393ad
6879fbda93174f19926cf0409f828450b4035740384cb1c46462becf3aa5367d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/jquery/jquery.serialize-object.js?ver=0.2-wp HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 440
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T53g85mLMwOZX64g7T6yCA9fwDFif2G12FxXDgw4MXQ6dN6tpw4N5LxpEwgNeENVreoXUpnJ0pM7D0f9n788T0UmSO5bGf%2Bti561%2B%2FAsSyjm29shwVL0ZQwfiWyUBuWXC3O0gTFaJqSS"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:51 GMT
etag: "301-6398a7c1fe8c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fc08b0b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1021&min_rtt=496&rtt_var=512&sent=256&recv=104&lost=0&retrans=0&sent_bytes=250643&recv_bytes=18580&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1207&inflight_dur=283&x=40"
GET www.amiparis-france.fr/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLCz7Z1xlE92JQEk.woff
104.21.55.194200 OK 10 kB URL GET www.amiparis-france.fr/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLCz7Z1xlE92JQEk.woff
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type Web Open Font Format, TrueType, length 10432, version 1.1
Hash caa3ffed6646c2e465f375f7e5e5fb09
a0bcce161a4c4442c345cadd1e38e48386e34a34
927ba66258ea405f06205be694080f1126d186633c3c69cb839cfd0cfc5ee8ff
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/fonts/poppins/pxiByp8kv8JHgFVrLCz7Z1xlE92JQEk.woff HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: font/woff
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yg6vtQnQy7BnYBrnbljGEBfDiJytHTsocQi8246py01%2FtnXQSUWMjrQfb5KkY4i1%2Fzjbzu%2FP9s9lZjiZh5aMLHAixrMBeyvPhjAJqgDK7sYuoUOZzrj6%2B8NcqaE3NOKq5frq9lFD54Dc"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:21:30 GMT
etag: W/"28c0-6398ab0846280-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 95cfd6024a0ab500-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2116&min_rtt=496&rtt_var=772&sent=664&recv=173&lost=0&retrans=0&sent_bytes=754190&recv_bytes=29002&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2399&inflight_dur=484&x=40"
GET www.amiparis-france.fr/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=9.8.5
104.21.55.194200 OK 10 kB URL GET www.amiparis-france.fr/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=9.8.5
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type ASCII text, with very long lines (10435), with no line terminators
Hash 535bc19ca40020871971f227877089ad
c0ad4962f28f0cee21998d39977c27de284799cf
b4d38ebe31a12e6c88de4f40af63dd23841c9879f168a8824aa475029ef59dd1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-vendors-style.css?ver=9.8.5 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/css
content-length: 1966
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yy2i2yi1e20RiF5FfhXlcywkev0yw3AZiFj8HCpmrMaxeFe6WfLSWLYwcTj7e%2BIcjCVPHRMB92fx6y%2Bh1e87V6aLSCEaq9ZMZ9w71RWQWdxcnheNdoFlTSUd%2FuIsnVNk9B7ZyeJBy%2F9S"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:48 GMT
etag: "28c3-6398a7bf22200-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa5835b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2686&min_rtt=626&rtt_var=2494&sent=98&recv=69&lost=0&retrans=0&sent_bytes=56533&recv_bytes=16957&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=950&inflight_dur=180&x=40"
GET fonts.googleapis.com/css?family=Poppins%3A300%2C400%2C500%2C600%2C700&subset=latin%2Clatin-ext&display=swap&ver=6.2
142.250.74.10200 OK 6.0 kB URL GET fonts.googleapis.com/css?family=Poppins%3A300%2C400%2C500%2C600%2C700&subset=latin%2Clatin-ext&display=swap&ver=6.2
IP 142.250.74.10:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintB7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
Hash ad4adb190041d04e6164c90fbb8760ae
1eaa231c33964ad82a8391543bb074bbfb682dc9
bbdc0a431c4cc4d77f5ac24eb9233cef584e4d15702683b84b76a57eade5e712
GET /css?family=Poppins%3A300%2C400%2C500%2C600%2C700&subset=latin%2Clatin-ext&display=swap&ver=6.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 10 Jul 2025 11:49:06 GMT
date: Thu, 10 Jul 2025 11:49:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.amiparis-france.fr/wp-content/themes/sober/css/bootstrap.css?ver=3.3.6
104.21.55.194200 OK 146 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/css/bootstrap.css?ver=3.3.6
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type ASCII text, with very long lines (540)
Size 146 kB (146040 bytes)
Hash 3345c0dec2ff179fdc89c45daa771600
9063f092a827696364dca5dc8eaf43c58671fa8a
b01a132d67911824c606f6138c75960eb09ce8e4ad06c0045518603dcd2e4afc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/css/bootstrap.css?ver=3.3.6 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/css
content-length: 21293
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5QwD27GhzrMp6WGE%2BXL1n8pVHoy6Eawgwv%2FWtqalbQD3fTDy94U%2BPzuVA9161VWQC4BbHd9QGIG7%2FGShXWySclzq1KbtTEEMElLt5nSn%2FOP1r2Gq0%2BD7wtSiOiIPYwbGH9lSizIeZMTp"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "23a78-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa683eb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=930&min_rtt=496&rtt_var=666&sent=155&recv=88&lost=0&retrans=0&sent_bytes=126165&recv_bytes=17833&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1134&inflight_dur=223&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.001_1-433x541.jpg
104.21.55.194200 OK 13 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.001_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 9e128119a26eb8e949af003eff2ded6b
bebbb684133bac2445f91133ae5903aeb09194a2
b61c8f96daa3403af5ae20655bd3d62562ba7eefa887268b7a0260f743d62be2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.001_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/jpeg
content-length: 12959
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=82Dq4E9xfwY6OWevLG6AhP8N%2F3f4BEeW72B%2FLJ9%2BFQ7ukZsBgeQ%2FtRUS%2BIOGrT42cS2OLztmlVIePdslJZjzNPrUiCsf%2F46mhF9bwUHnV0e79DkmBtGoZ5fknlPl7t%2BMU4s30gfavwSU"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:56:55 GMT
etag: "329f-6397b423823c0"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6113db1b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2817&min_rtt=496&rtt_var=2828&sent=965&recv=201&lost=0&retrans=1&sent_bytes=1121747&recv_bytes=34418&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4728&inflight_dur=706&x=40"
GET www.amiparis-france.fr/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
104.21.55.194200 OK 158 kB URL GET www.amiparis-france.fr/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (65266)
Size 158 kB (158005 bytes)
Hash e53ec3d6e21be78115810135f5e956fe
523892839b88351523e0498ba881c4431197b54e
b15c3ea03d50c2430490e7416733a254feea4237bb60b54181bd3473ebe4149f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 38789
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RofgbRA3O897WIUcEKrYc6lp1l6VPGvLUsZJhSlzFIfZJ1D7fgmxn5HHMmZbAINIfVoo1CuLmzYnkkIXU4ipZqECLIRopg3szjFAd727UUG3mdY0i1Bb9lquv4CpM4gGiKxvi88PlmXY"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:51 GMT
etag: "26935-6398a7c1fe8c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbf8aab500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=999&min_rtt=496&rtt_var=559&sent=391&recv=126&lost=0&retrans=0&sent_bytes=425394&recv_bytes=19614&delivery_rate=12024908&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=22631&unsent_bytes=0&cid=3db48a08702844a6&ts=1392&inflight_dur=362&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/upl164.kn0064.136_1-433x541.jpg
104.21.55.194200 OK 13 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/upl164.kn0064.136_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 33cab3234bc1e1dedeb35533e3e21845
54586f6c208c8113a4e4f3a5e149555f65af3396
242f504cdbaf1feec03b9f0df1c466dcbedf177a3884365b86d1f2b037a1eae7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/upl164.kn0064.136_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 13213
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TWPTko1UsRgjdl4Nedvj0micOntqrKhTipBw8CfkQMWQKfK5ohQulLsk3prbGESZkI3vqR1%2F4FfT0vsoPHYO3pL%2BeSNz%2F%2FyTKJl3i%2FwhzpamAXVavsbTe1xvJh5ZsgjPObEzsl3v7JUw"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:54:44 GMT
etag: "339d-6397b3a693d00"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6049aa4b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2222&min_rtt=496&rtt_var=891&sent=793&recv=179&lost=0&retrans=0&sent_bytes=917615&recv_bytes=29303&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2585&inflight_dur=558&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts235.724.001_1-433x541.jpg
104.21.55.194200 OK 15 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts235.724.001_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash edb335b420be378b358b6052467e8b0f
a864914d1b556a638626b8ed92494efeb9a1f004
7a341f4758b778953e1d814cb28abb7d739931f0e44de8bdb18cb427deb19fea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts235.724.001_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/jpeg
content-length: 14942
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RnLFNwNHHY27ll6iGbG%2Bf7RLqpSZ3%2BY3dzOhNX5YXvFgZMPef6nrsCaB1XFjMYPThxrNebpQyT%2FNo3bc9xvME5KYuuGmAFwdgJ09cJhhlb%2FvTH2zmb6bAE5UH2L%2BiTeRS%2BDLQttCif5w"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:59:44 GMT
etag: "3a5e-6397b4c4ae000"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6118dcbb500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1703&min_rtt=496&rtt_var=750&sent=896&recv=199&lost=0&retrans=1&sent_bytes=1032365&recv_bytes=34321&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4699&inflight_dur=667&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts071.je0101.001-433x541.jpg
104.21.55.194200 OK 9.4 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts071.je0101.001-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash b3bcf1abb9a336c364f09d93100ef9de
537f299ca2ca50fe6de585d719bcff50223a67f3
04f0076e002cdb8babe2a9099f1604c82f832c35c9ae1f7753d3be5e03f0bbd3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts071.je0101.001-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/jpeg
content-length: 9361
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BUitKojZlUrbtVi48ZG%2Bnp8Ma0gVqm5DpV6gsuMpCd6GHAnG5erPMQKajybdpuJt04fe3UwrEb35VxmJHRV3uTHUvRMtPFPzamasQi%2FU0szZV63qf%2FOjiwSHfody1mlxIKGPkaqB9ZE8"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 09:00:15 GMT
etag: "2491-6397b4e23e5c0"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6114dbcb500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1795&min_rtt=496&rtt_var=755&sent=887&recv=198&lost=0&retrans=1&sent_bytes=1022084&recv_bytes=34273&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4685&inflight_dur=664&x=40"
GET www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK&co=aHR0cHM6Ly93d3cuYW1pcGFyaXMtZnJhbmNlLmZyOjQ0Mw..&hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&theme=light&size=normal&cb=x4nbdvntf8h3
142.250.74.68200 OK 74 kB URL GET www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK&co=aHR0cHM6Ly93d3cuYW1pcGFyaXMtZnJhbmNlLmZyOjQ0Mw..&hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&theme=light&size=normal&cb=x4nbdvntf8h3
IP 142.250.74.68:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subject*.google.com
Fingerprint0E:29:D7:DB:FC:32:8C:DD:65:47:B5:CC:0F:62:04:EE:7C:AE:80:42
ValidityTue, 17 Jun 2025 20:01:48 GMT - Tue, 09 Sep 2025 20:01:47 GMT
File type HTML document, ASCII text, with very long lines (56491)
Hash b074027bd432276169038cb88bc5bf17
8300d0c137c8e10fe11bd9b8b0e1c18e25811e9d
cd9257e4db56ccf5fffe6595444969bc23e3cb266dd6693cfac8a0648e251108
GET /recaptcha/api2/anchor?ar=1&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK&co=aHR0cHM6Ly93d3cuYW1pcGFyaXMtZnJhbmNlLmZyOjQ0Mw..&hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&theme=light&size=normal&cb=x4nbdvntf8h3 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}, {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 10 Jul 2025 11:49:10 GMT
content-security-policy: script-src 'nonce-rSGYQOkzG5AzwIB24imnkg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.6.1
104.21.55.194200 OK 3.0 kB URL GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.6.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (3029), with no line terminators
Hash f449e3e4a7c058f7c48f57e05c788fb0
e7b0c58a1a14c14a92e452cc544b312ed91fa52e
bfd861dc2936299f52adca1da826c273dced7c77ad4c33d31916ad55ab354e89
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=7.6.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/javascript
content-length: 1088
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IPq5emcpqligiwxFd%2B5IWJSw1DbEi5hLvfUCeLwLmKVJ1eWgQuKDiiM%2FxBDqSwljrQQjUZwfW4g1kTyc7vJ8tCGbi%2BSXhHxrfyNTGqiGnvIGbFKP3YmOMg7PgcGNmSWKZ0kU2UuIaMUr"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:47 GMT
etag: "bd5-6398a7be2dfc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa7848b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2746&min_rtt=626&rtt_var=2220&sent=82&recv=64&lost=0&retrans=0&sent_bytes=40762&recv_bytes=16723&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=922&inflight_dur=159&x=40"
GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.6.1
104.21.55.194200 OK 2.1 kB URL GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.6.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (2139), with no line terminators
Hash b72c1cbb1530a011a27bd9800f26765a
27b825c5d8255f33b8427a059d4545ebd65e1746
a256fccecac3b32ab73c91d79a18747519a1a18023be05465c933b03523a82e8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=7.6.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/javascript
content-length: 794
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tJXl%2FHD88pOfvjeQ7ClM2lnJ5IAmK8hadDo%2BUaEvzEd3U6dywqnHzXe9BpXHCZFqwIshq3xbOikcfcKBCGnRCohe06TpyX0V9rQXWesJMf0IKXUMqA7dQnUxKTZ2%2FeBRD2g695s3okLZ"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:47 GMT
etag: "85b-6398a7be2dfc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fb2869b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2148&min_rtt=626&rtt_var=2080&sent=118&recv=76&lost=0&retrans=0&sent_bytes=80531&recv_bytes=17279&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=1064&inflight_dur=206&x=40"
GET www.amiparis-france.fr/wp-content/plugins/sober-addons/assets/js/jquery.countdown.js?ver=2.0.4
104.21.55.194200 OK 8.3 kB URL GET www.amiparis-france.fr/wp-content/plugins/sober-addons/assets/js/jquery.countdown.js?ver=2.0.4
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text
Hash 4090eede0be32f5a0b40fe11afc5abaf
46dd0ad12fe19a9911dd400f56eddbb737cc825c
f755a55387b636554759fe64e2f6fa7203cef5bae979bd3ff97548889bbfb086
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/sober-addons/assets/js/jquery.countdown.js?ver=2.0.4 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 2590
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BwC2pPOjwMQjJ5cPYqRMXlf8zobBA2Gb52Ei3IWUrfmpLNy%2FZoauzB%2BK%2Fc5hOXp0BOiw5q1YM10Ic0UKigVFyHBtJSfZ3T4ybgdTqxDM%2FfvB6c04TYSpJ8jfOOthtHQeifdG5bp%2FGSro"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:44 GMT
etag: "2074-6398a7bb51900-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fc28b8b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1207&min_rtt=496&rtt_var=454&sent=270&recv=109&lost=0&retrans=0&sent_bytes=266222&recv_bytes=18814&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1249&inflight_dur=305&x=40"
GET www.amiparis-france.fr/wp-content/themes/sober/js/simple-scrollbar.min.js?ver=0.2.1
104.21.55.194200 OK 2.0 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/js/simple-scrollbar.min.js?ver=0.2.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (1986), with no line terminators
Hash 5da801b2748a93a1b65bf395f7c42608
c0789d8a47daf0f4ed3bcb1ab3701b9697622df5
28f798aec5e239e01578871e041bc817b941ba405cd4df4552b8038387e16546
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/js/simple-scrollbar.min.js?ver=0.2.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 840
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hj4LUmK9Qb57P%2BvJbYs2OfT%2FVMEK%2FkiIBeiEtPkfrDaXgjnGeILAYAfZ51woG8PCgy2bmH%2B%2FE8IxHTo1ilhEqZ0LLbznGGR%2BjumI4POMsTmhWkHgX%2F2JtXEHW%2BolVDh9di3FkTWExeAW"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "7c2-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbe8a7b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=931&min_rtt=496&rtt_var=304&sent=214&recv=94&lost=0&retrans=0&sent_bytes=199299&recv_bytes=18109&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1176&inflight_dur=264&x=40"
GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/select2/select2.full.min.js?ver=4.0.3-wc.7.6.1
104.21.55.194200 OK 74 kB URL GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/select2/select2.full.min.js?ver=4.0.3-wc.7.6.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (64065)
Hash 54d7e21e672fd3bea9a7fd9658a78cd8
1e259ce61523266eedae5aa5ab6dd551960e0ab2
538858a94442a36ea4eaf8a8c9648012a234363ae92ab725585486dcfb482cc3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/select2/select2.full.min.js?ver=4.0.3-wc.7.6.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 20824
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aXtR%2F2jQPwFJLFqHBmwUGqDEBm8DYKRnS3qlcVfejJFMdM6Me57G%2F6FhIZ7WeAyevEHaIqKpi6F0oX4EAvjKYB70ebCxnFzgNPna9a2JdyyeFALhmuPohH5vy9RCB4sBFlEi23YwFrXS"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:47 GMT
etag: "12143-6398a7be2dfc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 95cfd5fc08b1b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1028&min_rtt=496&rtt_var=611&sent=404&recv=129&lost=0&retrans=0&sent_bytes=442813&recv_bytes=19754&delivery_rate=15031147&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=30810&unsent_bytes=0&cid=3db48a08702844a6&ts=1403&inflight_dur=369&x=40"
GET www.amiparis-france.fr/wp-content/themes/sober/js/owl.carousel.min.js?ver=2.3.4
104.21.55.194200 OK 44 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/js/owl.carousel.min.js?ver=2.3.4
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (31997)
Hash f416f9031fef25ae25ba9756e3eb6978
e2a600e433df72b4cfde93d7880e3114917a3cbe
a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/js/owl.carousel.min.js?ver=2.3.4 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 11412
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5EosFqlkvVbuK1fJB2TzNgn6gMwb8nnB5MpVxWsVBCh7auudH3vf9z3Li0U8JQRReAMUSVXZqt7hO7BCMYQxKTrJd5AoJnw5K0PNSAzEKISs4V%2BUux%2Bw%2Bk3nb%2FxBP0ByB9TNKe9xy%2BW%2B"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "ad36-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbd8a1b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1335&min_rtt=496&rtt_var=358&sent=324&recv=115&lost=0&retrans=0&sent_bytes=337669&recv_bytes=19088&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=21834&unsent_bytes=0&cid=3db48a08702844a6&ts=1332&inflight_dur=323&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfupl001.760.001-433x541.jpg
104.21.55.194200 OK 9.3 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfupl001.760.001-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash ef708e21eac6ef58a3632ce18edf22a8
6bd4b8cbaed267e0780de01c523b6c4a2d3c1489
60ee22e18557ef629c8889d471e4c75752e830f3f5b0bf976c4778ae2d6c9c56
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfupl001.760.001-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/jpeg
content-length: 9251
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tJXV3QlanRoOF3RkGKIjXFGfXWEjwHuDyctBKxVDZZ7M7W%2Bvlg1KT5NTFtFkx1fRKZNG0xYGPB85hfCESHMQ%2FYbZRQ9vHDyD892clfCOflmQ53LK4FO97GdhH9qba6KcHGPWQGrdYoVM"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:59:36 GMT
etag: "2423-6397b4bd0ce00"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6116dc7b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1703&min_rtt=496&rtt_var=750&sent=937&recv=199&lost=0&retrans=1&sent_bytes=1086836&recv_bytes=34321&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4716&inflight_dur=693&x=40"
GET www.amiparis-france.fr/wp-includes/js/jquery/jquery.min.js?ver=3.6.3
104.21.55.194200 OK 90 kB URL GET www.amiparis-france.fr/wp-includes/js/jquery/jquery.min.js?ver=3.6.3
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (65447)
Hash 0e850a69bc7fd0acc2e92ce6eee87959
8be6d9e7f7a61ccf0b8eac8a8144d770b608a19c
afacce23cb4feaaaef37997f8439819d8f827df4951f3ff02704c9f16fb7f53a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.3 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 31049
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gD9%2FKBos4ByomykbLjupycAhNXniVwAKvuUneUuJz8WGwCwG1cNeTPGxHkhuCRgo0YVc8%2FIzEVCaBP3fIcVEmLR0PUvaT%2B1O8gt7HoaSMAY617vf%2BiJ1S%2FmkYL3VaIJR90JR9xCuVhmt"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:51 GMT
etag: "15ed7-6398a7c1fe8c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa6843b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1885&min_rtt=626&rtt_var=1636&sent=122&recv=78&lost=0&retrans=0&sent_bytes=83782&recv_bytes=17373&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=1120&inflight_dur=210&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts055.726.136-433x541.jpg
104.21.55.194200 OK 7.7 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts055.726.136-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash e39d99904525dd0e79234daaf92a86bd
2db6cb9b41331c936fe62ba927b80549b91fa75d
a103400f573989f402f79b02d483071506b281cd4b1428715d9e08b97b15cecc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts055.726.136-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 7671
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o8kbccye9e1jS2%2Fx3Jwx3BZbzWawrL4JCr%2Bfb48nOQac1356IYO8WAFoPS9lRwixjrk7mxUxQ2jcdJPzv398%2BqzM3W9i%2F%2BSCSikXszk6FdIiDmQs5gzrb1Kx0uVRQigiItJJD5mnvJh2"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:59:55 GMT
etag: "1df7-6397b4cf2b8c0"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6047a93b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2365&min_rtt=496&rtt_var=966&sent=759&recv=177&lost=0&retrans=0&sent_bytes=878508&recv_bytes=29199&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2550&inflight_dur=521&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts075.726.136-433x541.jpg
104.21.55.194200 OK 7.8 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts075.726.136-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash a9f6ddd6e4dbc9a4f1e47ca7a353f541
3d945bed3a30018ca54132e2cb14bb0ac1636204
c811bcec53b7180a4d643cd68b85ba613c3cc8b5ded89e262c390d0fc7f1cf82
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts075.726.136-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 7789
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QFnUNK3bhpGsHRNlCU5WDb3dRC%2B9WQH9W1BSlDmOiIlzzTtjqJDv7bASWC%2Bf%2F0FRMmMtVNtQdolmS8qV0rDS%2FfGAcvbIU4Zy6xpQPSg%2FhOUwIU1EKWVx6FNhiQYky8xbs82bVJY4wk1v"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:55:01 GMT
etag: "1e6d-6397b3b6ca340"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6047a9ab500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2365&min_rtt=496&rtt_var=966&sent=754&recv=177&lost=0&retrans=0&sent_bytes=872295&recv_bytes=29199&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2547&inflight_dur=521&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts235.724.001-433x541.jpg
104.21.55.194200 OK 10 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts235.724.001-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash ae30ba34c3860e0eb5e6bfeafc9f5a1f
57cc2d88582eb08eb8928be599bfbde0f7556eb7
3c6973cb6ba38858e459aead4c18590cc008ec24ebb9d407e0186a63f6476d5a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts235.724.001-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/jpeg
content-length: 10198
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8JFRs5sQGHunASRrefeKavrFkdK0RKTZtEUZJ5u1jiqCETgTM1ZRx9sC2P5snAL227MVjH0IlR8ieZruvbgebSU%2Blt2GG0WZdSIxfIgh993uAxTWHCMBmly1Cqn0YRFYEkDhXBoHp7%2Fw"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:59:44 GMT
etag: "27d6-6397b4c4ae000"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6117dc9b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3027&min_rtt=496&rtt_var=3210&sent=955&recv=200&lost=0&retrans=1&sent_bytes=1110599&recv_bytes=34369&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4726&inflight_dur=698&x=40"
GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/styles__ltr.css
142.250.74.99200 OK 79 kB URL GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/styles__ltr.css
IP 142.250.74.99:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK&co=aHR0cHM6Ly93d3cuYW1pcGFyaXMtZnJhbmNlLmZyOjQ0Mw..&hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&theme=light&size=normal&cb=x4nbdvntf8h3
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9f4a1a9c69cf6660943401497e2b5f91
ade51c9647d063948704ecbaacabb1708bed1b45
d3de3db369f6cafb26a9fb7709e1cc1c8b51858c60dd8888746c09acb354466e
GET /recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha-scs"
report-to: {"group":"recaptcha-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha-scs"}]}
timing-allow-origin: *
content-length: 42038
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:31:47 GMT
expires: Fri, 10 Jul 2026 10:31:47 GMT
cache-control: public, max-age=31536000
age: 4643
last-modified: Tue, 01 Jul 2025 16:48:13 GMT
content-type: text/css
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.amiparis-france.fr/wp-includes/js/imagesloaded.min.js?ver=4.1.4
104.21.55.194200 OK 5.6 kB URL GET www.amiparis-france.fr/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (5477)
Hash 3a56752b736635bf69cb069b8818cbfd
42e0951fe74bb3f56a30f51291823bcd4a84d76e
ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 1834
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GexT9nZEd9GtkZP0QM6H%2BYi54eGdwrt48hFNfku6RlZ2pvgwkDwAK1e%2BZLMhshyVNfWDvG7C6or00q1vgDeq%2BTjChT04oWB7ugIcktu5iMZjL4RUZJel8Y%2BwLhFim49u%2FYX5gyJXdn%2F9"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:51 GMT
etag: "15fd-6398a7c1fe8c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbc89ab500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=950&min_rtt=496&rtt_var=495&sent=253&recv=103&lost=0&retrans=0&sent_bytes=248044&recv_bytes=18531&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1204&inflight_dur=280&x=40"
GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js
142.250.74.99200 OK 792 kB URL GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://www.google.com/recaptcha/api2/bframe?hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type JavaScript source, ASCII text, with very long lines (688)
Size 792 kB (791775 bytes)
Hash 6dbbd249df18061c1db8902b45271648
aa188a6fd94457b382c134d0ab2cf49b3b1ca7ac
c5c7449312a185b3eeaf553524a6229ce91349ba8894b6ac7d99d20ca6980f96
GET /recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha-scs"
report-to: {"group":"recaptcha-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha-scs"}]}
timing-allow-origin: *
content-length: 337754
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Jul 2025 13:18:00 GMT
expires: Thu, 09 Jul 2026 13:18:00 GMT
cache-control: public, max-age=31536000
age: 81073
last-modified: Tue, 01 Jul 2025 16:48:13 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.amiparis-france.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0
104.21.55.194200 OK 13 kB URL GET www.amiparis-france.fr/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (13326)
Hash 5cfa2b481de6e87c2190a0e3538515d8
0fccf3c8ab2c10b4dcc7970e64ce997ab1622f68
9810aee7e6d57d8cceaa96322b88e6df46710194689ae12b284149148cabc2f3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/javascript
content-length: 4795
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sEIfdF9sh3F0CrH9iKCZOLLIAbDkm0TjqqGQ6FvxVaOBIVekjjJQ9g1qEh0P1islEP3nZSxEZK2soJgur411vgQlDVyGtzUPales4WJwucgyZtzp4tzqUPYBJokhjw6afhvLQ6r1jsHh"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:51 GMT
etag: "3470-6398a7c1fe8c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa6844b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2086&min_rtt=626&rtt_var=1944&sent=107&recv=72&lost=0&retrans=0&sent_bytes=66816&recv_bytes=17097&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=971&inflight_dur=192&x=40"
GET www.google.com/recaptcha/api.js
142.250.74.68200 OK 1.0 kB URL GET www.google.com/recaptcha/api.js
IP 142.250.74.68:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
FingerprintEB:D6:F8:30:DB:49:AE:9E:EF:B9:5D:FD:FA:0C:31:CB:DB:06:4E:F0
ValidityTue, 17 Jun 2025 20:03:45 GMT - Tue, 09 Sep 2025 20:03:44 GMT
File type JavaScript source, ASCII text, with very long lines (1017), with no line terminators
Hash 07f2cc2437ce13ccbc63217d1423a7b0
620e5fab74d755383415c347071de503807b6a81
6dd223e5f3596fc3b41a7add9fe9fab379f5f5c4a34e465cc404bfbdc19e64ad
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Thu, 10 Jul 2025 11:49:06 GMT
date: Thu, 10 Jul 2025 11:49:06 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d"
report-to: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.amiparis-france.fr/wp-content/themes/sober/js/notify.min.js?ver=0.4.2
104.21.55.194200 OK 14 kB URL GET www.amiparis-france.fr/wp-content/themes/sober/js/notify.min.js?ver=0.4.2
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (13780), with no line terminators
Hash 37ad78b7c171c572c10ec77084ac1f08
168f1bdb0a5e071aaab878c36e796ee62c33301a
23efbfd67a8f05a7e077879326c0bfd8db30cca53baec92cec4bd4c03b43104a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/themes/sober/js/notify.min.js?ver=0.4.2 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 7443
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T9DVSr2gPV9GPRKgwkU3d8USjBTbqTOB5yytek4zbeQK09y37USd%2FBNQkoK1WeW9LkwQ2PTHMDOeOPSqKrD0vzmhD0oSKiYgNXulzgknkpvIPJGsFm%2Bz%2B60Gvg3tXRzOi7ZvVkmKz%2BMU"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "35d4-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbc896b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1054&min_rtt=496&rtt_var=790&sent=240&recv=100&lost=0&retrans=0&sent_bytes=231866&recv_bytes=18387&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1186&inflight_dur=273&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts055.726.136_1-433x541.jpg
104.21.55.194200 OK 14 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts055.726.136_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 5f6511db6ad434d7a5f819fc2f6f2794
a4b03b9569377bd915486da4a490be15293f1a1c
cba1f39828557d3f901b1ca53270199250ce9819cd3bf4b0483bdde958148c00
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts055.726.136_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 14486
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tcKk4k7GEv0ge9qB3CtC4s3Vk99l1Rlu%2F5eDSJLFjGYnlzurYPHMH4FfRo9zyxM4ljxnNB0aMAZ5whjyErJuHILzB8XuhtBTNkwMPTWfECKEuATEhY5ctIk59BHD187CVPdbKkFJA98f"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:59:56 GMT
etag: "3896-6397b4d01fb00"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6047a95b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1871&min_rtt=496&rtt_var=1349&sent=596&recv=167&lost=0&retrans=0&sent_bytes=667932&recv_bytes=28717&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2193&inflight_dur=431&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts027.726.725-433x541.jpg
104.21.55.194200 OK 7.9 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts027.726.725-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash ca16b9e28cb6c56dd2bc4ac0120fc657
e7ae6db9e5fee370253c847d8d08f2ca76f209e2
90db9234ca242fc713ec116d175de9771ae5590ebfa41c3674d3929b0d5a4dbc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts027.726.725-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 7943
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b1H8L7S9eN1uVO%2FrPx%2FGzhRtcgSJmwIeJLlOdqc2AXxjSuor6Vs7%2Fu48OuCZVVOYIFD%2FPwjEHkhozqmYlpIwvzib%2BKtkBNAf4qnLmhUu2soT8qgQHwCwTH2Ngoi6JGLOrtMAJMXLkc%2FH"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:56:26 GMT
etag: "1f07-6397b407da280"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6047a96b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1871&min_rtt=496&rtt_var=1349&sent=595&recv=167&lost=0&retrans=0&sent_bytes=667235&recv_bytes=28717&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2193&inflight_dur=431&x=40"
POST www.amiparis-france.fr/?wc-ajax=get_refreshed_fragments
104.21.55.194200 OK 275 B URL POST www.amiparis-france.fr/?wc-ajax=get_refreshed_fragments
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
Hash 4072e9108ebb1bdd30acfdfbaa486afb
21bc70b8b8d8fb06487984dfddceacc3085c66c1
5d39646b4bfdf6b548bb2b59258032ffdfcd6f7ac28ceb8310ae2d5a999dde02
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://www.amiparis-france.fr
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:12 GMT
content-type: application/json; charset=UTF-8
content-length: 187
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iKvUYPTqYN9MYQirtQ9PUCROiTaEsGvfp2jjByO11Yoj3AEmMYZF0Wz%2BnHO51Iw71OtnZ4%2Bsq5v2XX2Ibsuz6ZpPyrxvmmyj4zIt8Gb9mH75KIK9MiiIfFbth6YopuElAD0rtQSAW4%2Bh"}],"group":"cf-nel","max_age":604800}
access-control-allow-origin: https://www.amiparis-france.fr
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: 95cfd60fdd31b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3203&min_rtt=496&rtt_var=2145&sent=3678&recv=281&lost=0&retrans=2&sent_bytes=4866733&recv_bytes=39250&delivery_rate=66162638&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=122036&unsent_bytes=0&cid=3db48a08702844a6&ts=6613&inflight_dur=1002&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.221_1-433x541.jpg
104.21.55.194200 OK 14 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.221_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 1bd5f66071d041c898db095019b9eefa
4f20c382206b2e7c37865d6598e0be9a41a70413
d91d31b0e0164f06be2e7533fc00c9f4b18b25309fa93c3a805f0b8657be7bed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.221_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 13739
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ODewWFaZL7IaaFi7t%2F%2BiTqpJk7SBoms1WTaqJHNWK6O0fCsn1CGYXcfQQoRWX5waYfvoY7cQJcOS%2FdXUoHq02dQy8C9zxe%2FDHR96rzJAUTALEaZweOj418r0hSUlsyoETqZuvpbFPe2j"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:56:14 GMT
etag: "35ab-6397b3fc68780"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6043a85b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2365&min_rtt=496&rtt_var=966&sent=748&recv=177&lost=0&retrans=0&sent_bytes=864092&recv_bytes=29199&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2547&inflight_dur=518&x=40"
GET www.amiparis-france.fr/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.11.0
104.21.55.194200 OK 463 kB URL GET www.amiparis-france.fr/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.11.0
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type ASCII text, with very long lines (65358)
Size 463 kB (462702 bytes)
Hash 4c348dcc9f75f14af534ec81462f9d74
ab03af7512bb03004317bc5ba49e3776c52c5402
e97075bd70ab8a70cc576b5d90bd13a3e715313272cec401c9342f4665a4c353
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=6.11.0 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/css
content-length: 44142
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MfXxHEtMc%2BdWV6GMLyACjcC2s2Cp6h%2B9F%2BLF4UEmPwByXznPM1o8j4q73eRNid5DGXKDnA2Jp%2BU9dGWNpfzbqiYQ7WdodTfKfLAyhHoPdQHJQie44f2pwygUXOGZUiwyDwtOIN4HzuTX"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:46 GMT
etag: "70f6e-6398a7bd39d80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa6845b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=888&min_rtt=496&rtt_var=453&sent=182&recv=90&lost=0&retrans=0&sent_bytes=159240&recv_bytes=17927&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1150&inflight_dur=240&x=40"
GET www.amiparis-france.fr/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.11.0
104.21.55.194200 OK 992 B URL GET www.amiparis-france.fr/wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.11.0
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text
Hash 787fe4f547a6cb7f4ce4934641085910
c2dee88d5bdfef214ce9c56f71a1df51cda0f328
654aaebdea944313257827be97eb196a8218a2cdfc9ba399db23e2cd4c02bd79
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/js_composer/assets/js/vendors/woocommerce-add-to-cart.js?ver=6.11.0 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/javascript
content-length: 374
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kpYYlMClA9knWcEeyZZY9SGJ1eDHO%2FPCFFjLUziHPFZdflxMk1C5bVuFBpasJkkZk9ZbE531OLO4whq00szYI%2FM28UIVJY4uSlHj0Oj92OAqkwDzKrH8yd%2FtPAg%2BGXbxFQCTbw4gmmy4"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:46 GMT
etag: "3e0-6398a7bd39d80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa784ab500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2086&min_rtt=626&rtt_var=1944&sent=111&recv=72&lost=0&retrans=0&sent_bytes=72393&recv_bytes=17097&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=972&inflight_dur=192&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts035.724.001_1-433x541.jpg
104.21.55.194200 OK 17 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts035.724.001_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash ea3f29c8cbbd0f3b0fcba41098644bd7
22f583949817ce6034d223c02df59a6fd845be8a
db0fa796f84224d9def1644a7cd84497092d25f5ab5b5a0b4071e666c69991a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/bfuts035.724.001_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/jpeg
content-length: 16887
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PPqZyX2BFjS1dYl23xnvtNCZbZ%2Fj0BIQOFISpNfy2gCsGG9%2FWZ%2Fcng1I%2BVx%2FWVVpBriztED36qy97NDOQh%2B5Cu%2FXH5pAPcNIQdCgsAYhIvTgK7vGkNj7Bs0SNug9cXV7XUN7PUlvYT7G"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:59:28 GMT
etag: "41f7-6397b4b56bc00"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6115dc3b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2585&min_rtt=496&rtt_var=2584&sent=976&recv=202&lost=0&retrans=1&sent_bytes=1135693&recv_bytes=34467&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4730&inflight_dur=707&x=40"
GET www.amiparis-france.fr/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=9.8.5
104.21.55.194200 OK 261 kB URL GET www.amiparis-france.fr/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=9.8.5
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Size 261 kB (260560 bytes)
Hash 6aee29488344475b6a10f198aa5e88da
a62660a2f5fe983c698b8122782fcb7728a43ad2
da6ddf6fcf69c628ddc218360ef295a5964d7c27b0cbb79d917b24fb8ceb3d88
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/wc-blocks-style.css?ver=9.8.5 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/css
content-length: 27292
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HC64XWyG7Q3rHVinGJ7xxw%2FMSk%2FzsgVOOO98rk42yzh8N8YE%2ByJNIhAMXrEK%2FdQBQBmhEz6cqj5O8%2FOdUYOCFk2JfzDUL%2FM8Rzbs9arWUek1xa7aFf81%2BTQWyaqW57R7JfBqwI4smhXP"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:48 GMT
etag: "3f9d0-6398a7bf22200-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa5836b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5116&min_rtt=724&rtt_var=5271&sent=60&recv=56&lost=0&retrans=0&sent_bytes=12180&recv_bytes=16361&delivery_rate=2046222&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=23947&unsent_bytes=0&cid=3db48a08702844a6&ts=735&inflight_dur=105&x=40"
GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=7.6.1
104.21.55.194200 OK 14 kB URL GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=7.6.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (13892), with no line terminators
Hash 8dfeaed0e059c5dcf42fe30a5e70b0aa
cba9579441ff2b561cc07e9dce1e3a50a3d1ff31
31fa01fc8e93ce50c1dad096b125294f1f079f82d1e1df61520cb20f88eb359b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=7.6.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 3648
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mLUGOtnGKytXoz7JR4%2BQcWumKAX%2FjWwzBfjnGUrfXEMakaUk221Y%2FaHXnxqE1sEiTEt4tusQgz8dK65164HaRNb29FqnMBErFjKIE1E6vagLTITFK%2BlnKD%2BrUjqzkV4wQBjfKyZegSfU"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:47 GMT
etag: "3644-6398a7be2dfc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbb88cb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=931&min_rtt=496&rtt_var=304&sent=206&recv=94&lost=0&retrans=0&sent_bytes=190670&recv_bytes=18109&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1167&inflight_dur=254&x=40"
GET www.amiparis-france.fr/wp-content/plugins/sober-addons/assets/js/circle-progress.js?ver=1.1.3
104.21.55.194200 OK 14 kB URL GET www.amiparis-france.fr/wp-content/plugins/sober-addons/assets/js/circle-progress.js?ver=1.1.3
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text
Hash 6816a923a10ae7680223d740150448a5
d0b3b3b1b28f8d0585fc44cb455a9f029bc79684
8e66938dc60763b5706ce779ca119e9eda349c2e8aa8136ca1bc72666be13128
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/sober-addons/assets/js/circle-progress.js?ver=1.1.3 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 3668
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sZahNFAdtL93Ne2D9KaY1%2FEsXJUQaw7a1eoKUNYeyKrqfJOQNa5NQ3RAgdk3znaeLrjfRWQCuhpaHl8VTVT9FeWDRxn9lgIUR10Lx6By9%2B2ENl6cn%2F6Dv6OEKGjflCVqCCRCB2j8P7X%2B"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:44 GMT
etag: "379e-6398a7bb51900-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fc28b9b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1093&min_rtt=496&rtt_var=414&sent=266&recv=107&lost=0&retrans=0&sent_bytes=261759&recv_bytes=18724&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1232&inflight_dur=298&x=40"
GET www.amiparis-france.fr/wp-includes/js/wp-util.min.js?ver=6.2
104.21.55.194200 OK 1.4 kB URL GET www.amiparis-france.fr/wp-includes/js/wp-util.min.js?ver=6.2
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (1391)
Hash 19d386c9004e54941c1cc61d357efa5d
0a77594006c8d86fdcc0adbc2b9aecaef3869586
3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/wp-util.min.js?ver=6.2 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 756
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z3TtYMlXXTXTDQK8UzsAnRgd%2F59ZAckt812niyiZBnwqDo5ssTuVvUArHRJ0VMkFibE1ymJ7SffKs5CpoT4EMo1JDd95DFCjpLeB8f1W1OooSn6ufjTeTh7K19U26mZL35mE6VT9vmz7"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:51 GMT
etag: "592-6398a7c1fe8c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fba889b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=913&min_rtt=496&rtt_var=263&sent=222&recv=95&lost=0&retrans=0&sent_bytes=208073&recv_bytes=18156&delivery_rate=7695887&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19697&unsent_bytes=0&cid=3db48a08702844a6&ts=1178&inflight_dur=266&x=40"
GET www.amiparis-france.fr/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLEj6Z1xlE92JQEk.woff
104.21.55.194200 OK 11 kB URL GET www.amiparis-france.fr/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLEj6Z1xlE92JQEk.woff
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type Web Open Font Format, TrueType, length 10600, version 1.1
Hash eb6945b4340d8e46ffea3efeb8cb6082
a9e8df0c86732c13c125a92ad28f04b25a72c05d
55fffef7b100460605349fa5215eb7dcd6e558e195d08e43eddc64c4b27d43b3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/fonts/poppins/pxiByp8kv8JHgFVrLEj6Z1xlE92JQEk.woff HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: font/woff
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jjs1T%2BXM1zinb2BnPbpEpZOnZfguT%2Fa%2Bvr0qw%2FMoDr8Y2vacd79cla%2F4DhnnUzJzIccMbYCnIVCHeL7iMW15so%2FfQoUUbsFQsZV2UkJeR4LFkTJs6xk2eFn1OY6bbHQUQDUZHA9WIghn"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:21:29 GMT
etag: W/"2968-6398ab0752040-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 95cfd6029a1bb500-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1034&min_rtt=496&rtt_var=396&sent=550&recv=148&lost=0&retrans=0&sent_bytes=629158&recv_bytes=21929&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=1917&inflight_dur=395&x=40"
GET www.amiparis-france.fr/wp-content/uploads/2025/07/Ami-Banner2.png
104.21.55.194200 OK 3.0 MB URL GET www.amiparis-france.fr/wp-content/uploads/2025/07/Ami-Banner2.png
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type PNG image data, 1920 x 1539, 8-bit/color RGBA, non-interlaced
Size 3.0 MB (2965392 bytes)
Hash 43deb1aea5923d4a24e45909900d5e73
13e4ae7b3537e0a242767ba17e02ac951952928d
f946613c18545db6b041b62d2d6a2179218a17c37227e2b0ba24bcd474034a14
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2025/07/Ami-Banner2.png HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:12 GMT
content-type: image/png
content-length: 2965392
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6N28D1tk24zydMWLrPE8La%2BtA9HHdvrGpL4D%2BBT2T3CZfB8QGsIIxlRvEctxKXggqj%2FF3gSFl2IN3xdnaGXnRd96yRahc04ZkmnyythbsVvgZwuUXvKjx%2FT2uYW9dll7LLmWk%2BvZdKci"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:23:21 GMT
etag: "2d3f90-6398ab7221c40"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 95cfd619df6db500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2964&min_rtt=496&rtt_var=2816&sent=3110&recv=272&lost=0&retrans=2&sent_bytes=4079313&recv_bytes=38765&delivery_rate=66162638&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=100458&unsent_bytes=0&cid=3db48a08702844a6&ts=6157&inflight_dur=941&x=40"
GET www.amiparis-france.fr/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.2
104.21.55.194200 OK 1.2 kB URL GET www.amiparis-france.fr/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.2
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type ASCII text, with very long lines (1191), with no line terminators
Hash 51300497928562f8c86c7aaba99237cd
e5826832b85c6afc6502b74cbb8ac5394b04c363
6d161e98e47ae150b51211443eef37040fb6269dcf85ad2048548066dca99e6f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.2 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 540
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QOHQVwrplOPdb88b4wknDeOUyhlk%2Fc57oAkVrvjSuIQdjp6OUzUUmSxOxljP6wbaPAyT%2B%2FXPinnPntTyDsUaeLmzVCz9CoYu47IafXI1I9N2qsGDd9QIqiMU5Co9EgZlKYPjUMURt0UC"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:51 GMT
etag: "4a7-6398a7c1fe8c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fbf8acb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1002&min_rtt=496&rtt_var=423&sent=258&recv=105&lost=0&retrans=0&sent_bytes=253038&recv_bytes=18629&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1218&inflight_dur=285&x=40"
GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js
142.250.74.99200 OK 792 kB URL GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type JavaScript source, ASCII text, with very long lines (688)
Size 792 kB (791775 bytes)
Hash 6dbbd249df18061c1db8902b45271648
aa188a6fd94457b382c134d0ab2cf49b3b1ca7ac
c5c7449312a185b3eeaf553524a6229ce91349ba8894b6ac7d99d20ca6980f96
GET /recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha-scs"
report-to: {"group":"recaptcha-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha-scs"}]}
timing-allow-origin: *
content-length: 337754
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Jul 2025 13:18:00 GMT
expires: Thu, 09 Jul 2026 13:18:00 GMT
cache-control: public, max-age=31536000
age: 81072
last-modified: Tue, 01 Jul 2025 16:48:13 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET www.amiparis-france.fr/wp-includes/css/classic-themes.min.css?ver=6.2
104.21.55.194200 OK 291 B URL GET www.amiparis-france.fr/wp-includes/css/classic-themes.min.css?ver=6.2
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
Hash 1a0804b1a9d09705657f91fe7cad4c5a
feeece6f0b3e0bcf090547c475329a2772f6b26b
dcd9f488bd62ba0ee403b07a97e40b9ffd63a0eff61091588c913b16d5153d48
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-includes/css/classic-themes.min.css?ver=6.2 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/css
content-length: 210
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tv5mWbE3b7usjyEAszzDZpKq%2BgT4RfcJQZ2ZMeG8%2FyYhUm%2FWIe08pjcfaqd1xDjixowudVjBIYocuDYDZJDVA4f5HRnjQjNnwmMiXAPKpNJIyyXgeFfmgywhg3Ryp0qohdzvgHTpYCYD"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:50 GMT
etag: "123-6398a7c10a680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fa5837b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2453&min_rtt=626&rtt_var=2337&sent=100&recv=70&lost=0&retrans=0&sent_bytes=59220&recv_bytes=17003&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=960&inflight_dur=182&x=40"
GET www.amiparis-france.fr/wp-content/uploads/2025/07/Ami-Banner1.png
104.21.55.194200 OK 2.7 MB URL GET www.amiparis-france.fr/wp-content/uploads/2025/07/Ami-Banner1.png
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type PNG image data, 1920 x 1394, 8-bit/color RGBA, non-interlaced
Size 2.7 MB (2678761 bytes)
Hash 0efaf236385dca099dbcb38fbd47de9e
37547b01a0b50daa626be276398dd438286e9770
07413de9039c189cbcee55fed7a0097e8bce17fee0ec7026812ae83d573dd45f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2025/07/Ami-Banner1.png HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/png
content-length: 2678761
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FZnPJFyFILKsNfyqfe4%2FyGl3UjfFatN2EBPZmXOeMInOJ7IauzwD7%2FtTgrxJFXtKhX%2FtRuPFSf%2B%2FYxhN08PeBqVnFvQBIXEQrHJQjHtQ2TX3wdvFlON6OQKZFWuR%2B%2Bl%2F%2BXekarBahJlP"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:23:17 GMT
etag: "28dfe9-6398ab6e51340"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6110da6b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2585&min_rtt=496&rtt_var=2584&sent=976&recv=202&lost=0&retrans=1&sent_bytes=1135693&recv_bytes=34467&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4730&inflight_dur=707&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts071.je0101.001_1-433x541.jpg
104.21.55.194200 OK 13 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts071.je0101.001_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 58e6fafcd6f8847715bba4595e60e59b
faa4750f58224327dbafe64d00d238b7b97e1b96
256251fae525839a626aca82c8521046975883e3ed8983f98ddbbfa501b23147
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts071.je0101.001_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:10 GMT
content-type: image/jpeg
content-length: 12649
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=09SaBOHbNVYLWAqAytpSmFc0Z6qCyN3swfIdDg8fJmQQq4PGZySnIMTD5XZ%2BQziq%2FO8BzFIOT%2BqAjtAMYeaA7fXJjzOYWG7JcawqP9ocgBnZeONEH%2BKlFs0xnaOkRA%2FbMiKVPNIRtJkr"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 09:00:16 GMT
etag: "3169-6397b4e332800"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6115dbfb500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1703&min_rtt=496&rtt_var=750&sent=939&recv=199&lost=0&retrans=1&sent_bytes=1089373&recv_bytes=34321&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=4717&inflight_dur=695&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.221-433x541.jpg
104.21.55.194200 OK 9.9 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.221-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash a6bd9d969c28a5127b84dc7376c9de2f
792076c338dea97fefe0ccb7bcc1567594c716a6
6e4e56517c037487d9648d33b697855d43ab8b61fde85e5d7a83a7a4959bbe7c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.221-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 9923
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mE%2BCn3DgEWl7beAKu1vZkxz8ZwQCDc3Qc21uhAMTqM7c1vcI3tb7LANboBBzNq1GNKUPc1XXndKNql6iF2cZAHL36rjsEI6K53tverMFJb1c87SH8LdIheHaTX5PRmHt2SXKml63ASVA"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:56:14 GMT
etag: "26c3-6397b3fc68780"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6042a81b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2523&min_rtt=496&rtt_var=868&sent=708&recv=176&lost=0&retrans=0&sent_bytes=810661&recv_bytes=29149&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2525&inflight_dur=503&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/upl164.kn0064.136-433x541.jpg
104.21.55.194200 OK 7.5 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/upl164.kn0064.136-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 0e972d36a041fbcc858b9511353777f4
e5a5b105ea2d6285bbda5a55ebe5fd1632b966db
7f51a68ba0f73572cb94d498a69b2abc7a01ba5da4e8afc79bcc0419f9cc4f11
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/upl164.kn0064.136-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 7544
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X%2FUmT%2BCj8P9%2FovRtqIJ5kDgTvxLfw8coyucYfEH%2Fwed9hKvmN1IIYckdWKf59D8nM6Yz%2Fd3sP8fkIBqycAnhQLTkiZIIAM%2BmL1PUrc%2B5Tt%2B5mqA1EOLzdZ99QH21Mv%2F2VbcxwMU%2BNDsp"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:54:44 GMT
etag: "1d78-6397b3a693d00"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6049aa5b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1893&min_rtt=496&rtt_var=969&sent=638&recv=169&lost=0&retrans=0&sent_bytes=721979&recv_bytes=28811&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2212&inflight_dur=448&x=40"
GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.6.1
104.21.55.194200 OK 1.8 kB URL GET www.amiparis-france.fr/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.6.1
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text, with very long lines (1668)
Hash d0a6d8547c66b0d7b0172466558d1208
ff93916519c7b9483251f609e4d29f38c30a66e3
3b1384ff918d4b7f95f9ee5c8fc388203dedff7344d3d96598c9562162788612
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.7.6.1 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:06 GMT
content-type: text/javascript
content-length: 982
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8KVj4122gw%2FBPwYkmDyf2rVp%2Bhkvklqflhj%2FBbBtGetC64wfH9zkd68eCLHPNg9SzwB4W79arnvt40eKV38AIZVhHml6JA7C9meHWsc6kq8oIiEPpf%2BiPQIm9VT%2FQTEhcKhXVVwgACx7"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:47 GMT
etag: "72a-6398a7be2dfc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fb1867b500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2028&min_rtt=626&rtt_var=1799&sent=120&recv=77&lost=0&retrans=0&sent_bytes=82062&recv_bytes=17326&delivery_rate=4884282&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=3db48a08702844a6&ts=1085&inflight_dur=209&x=40"
GET www.amiparis-france.fr/wp-content/plugins/sober-addons/assets/js/shortcodes.js?ver=20160725
104.21.55.194200 OK 18 kB URL GET www.amiparis-france.fr/wp-content/plugins/sober-addons/assets/js/shortcodes.js?ver=20160725
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JavaScript source, ASCII text
Hash b633bbd1265ef214dd39ec5ee527ff98
6f786c24b9824755950f09d547beed6c73602866
c43b47b649f370b6e858a08e5e9c9ed8a5110e086a9aea0eaaad7b7a206d7022
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/plugins/sober-addons/assets/js/shortcodes.js?ver=20160725 HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:07 GMT
content-type: text/javascript
content-length: 4150
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n43nGNPdXt0t5s%2BRym0mI7quJzHn9XlBj7Wu5oLE%2BLlKTVr8wr0Q8zJvtHjNjBZNPsB9pinmBKmBMlE3B3mzb005FtScakqhiMkLYb0wRC7liQXCZpjCLKRnsfrCVs%2FxbD%2BwTqmr8TLE"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:06:44 GMT
etag: "47cc-6398a7bb51900-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: EXPIRED
cf-ray: 95cfd5fc38bbb500-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1391&min_rtt=496&rtt_var=595&sent=291&recv=112&lost=0&retrans=0&sent_bytes=293467&recv_bytes=18949&delivery_rate=9619878&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=19811&unsent_bytes=0&cid=3db48a08702844a6&ts=1269&inflight_dur=315&x=40"
GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js
142.250.74.99200 OK 792 kB URL GET www.gstatic.com/recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK&co=aHR0cHM6Ly93d3cuYW1pcGFyaXMtZnJhbmNlLmZyOjQ0Mw..&hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&theme=light&size=normal&cb=x4nbdvntf8h3
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type JavaScript source, ASCII text, with very long lines (688)
Size 792 kB (791775 bytes)
Hash 6dbbd249df18061c1db8902b45271648
aa188a6fd94457b382c134d0ab2cf49b3b1ca7ac
c5c7449312a185b3eeaf553524a6229ce91349ba8894b6ac7d99d20ca6980f96
GET /recaptcha/releases/_cn5mBoBXIA0_T7xBjxkUqUA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha-scs"
report-to: {"group":"recaptcha-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha-scs"}]}
timing-allow-origin: *
content-length: 337754
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Jul 2025 13:18:00 GMT
expires: Thu, 09 Jul 2026 13:18:00 GMT
cache-control: public, max-age=31536000
age: 81070
last-modified: Tue, 01 Jul 2025 16:48:13 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK 15 kB URL GET fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.35:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf96n0rAAAAAJiDh4AfUMPLfk3Rk2ygxri_P5vK&co=aHR0cHM6Ly93d3cuYW1pcGFyaXMtZnJhbmNlLmZyOjQ0Mw..&hl=en&v=_cn5mBoBXIA0_T7xBjxkUqUA&theme=light&size=normal&cb=x4nbdvntf8h3
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:25:01 GMT
expires: Fri, 10 Jul 2026 10:25:01 GMT
cache-control: public, max-age=31536000
age: 5050
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2
142.250.74.35200 OK 7.9 kB URL GET fonts.gstatic.com/s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 142.250.74.35:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint31:00:3B:00:14:9F:47:29:F3:46:E5:7C:57:30:CC:88:CC:DB:A8:07
ValidityTue, 17 Jun 2025 20:02:59 GMT - Tue, 09 Sep 2025 20:02:58 GMT
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v23/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.amiparis-france.fr
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Jul 2025 10:06:17 GMT
expires: Fri, 10 Jul 2026 10:06:17 GMT
cache-control: public, max-age=31536000
age: 6170
last-modified: Wed, 23 Apr 2025 16:05:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts027.726.725_1-433x541.jpg
104.21.55.194200 OK 17 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts027.726.725_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash f61ac460a2699476f5e662ac79622eba
010e438ae161f58c4095909ebf5ceb1f531bcda3
5fe3b88df7b72af0e91f277854a61590610ec4fd66ecb8fb5730a52c38e88ffe
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts027.726.725_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 16679
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8EP0s65xMS7oN5Wnmss8ZjWTTAGNA9MIhf0S%2BB0NC9g4eRPfECpvnStOC%2FPYfFrWcN%2B3zk%2FBtIbofA7ngXO8%2BnHMc0cVOA6Z%2BoiGj%2FKi8OKwVI37JyMk9EU50hMK00MF0gImwdXjOJhm"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:56:27 GMT
etag: "4127-6397b408ce4c0"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6047a97b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2222&min_rtt=496&rtt_var=891&sent=804&recv=179&lost=0&retrans=0&sent_bytes=931812&recv_bytes=29303&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2590&inflight_dur=558&x=40"
GET www.amiparis-france.fr/wp-content/uploads/2025/07/cropped-Ami-Logo1-32x32.png
104.21.55.194200 OK 579 B URL GET www.amiparis-france.fr/wp-content/uploads/2025/07/cropped-Ami-Logo1-32x32.png
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Hash fcffdc28368004aa884875071ed60643
bcad3dd1c123ba82cce4a27cf061ba9be86f1bd7
a19644b22866f31869d2f87c65e74f74527feb76559bfafab932b05a85d36f47
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/2025/07/cropped-Ami-Logo1-32x32.png HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:09 GMT
content-type: image/png
content-length: 579
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lcQc%2FX7nkT7bs71WNVvk6yCSUchdKff4pXhtb7RF%2FwMcSJwF742XiUi0qAX83Ncj2a1RKXayqBOiXFlGFMFypxiYJgQK3z5%2FvTWwk5uqPhiqFfyPpY9Zxsgvj%2FbqfIfRhAwjQKTPNAie"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 10 Jul 2025 03:24:23 GMT
etag: "243-6398abad427c0"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: MISS
cf-ray: 95cfd60a9c22b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2038&min_rtt=496&rtt_var=577&sent=874&recv=186&lost=0&retrans=0&sent_bytes=1019235&recv_bytes=30184&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=3212&inflight_dur=616&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.4013_1-433x541.jpg
104.21.55.194200 OK 14 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.4013_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash ddaa77881757c0c82bb40f9ddf917971
a0c81c586de1e96aa373728ec86650b1ad7e12cb
9e46312ea06ebb5b59b43640e0aa7784d55e38bec2fe1aeb0fcc60aa44d779f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts040.je0090.4013_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 13879
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vfMe57TQ%2Bei8lFgJHoTao7oMY5W4K%2B1DKhE3FMybQaAoiaxsGXuPDr3HfvsW7NvaDckVIdBRf7PEond1%2Ftyp%2BhdWXWX07MdeQalfPdQQi1%2B9jggakXawsP0bQvkS9ZupduszUsuPHI%2BY"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:57:03 GMT
etag: "3637-6397b42b235c0"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6045a8fb500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1249&min_rtt=496&rtt_var=555&sent=575&recv=165&lost=0&retrans=0&sent_bytes=641123&recv_bytes=28623&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2170&inflight_dur=421&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts146.je0110.0952_1-433x541.jpg
104.21.55.194200 OK 12 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts146.je0110.0952_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash e8baa2fba8973f1de6a306b41a7807d7
74fbd4632519810030ebae93722b2fc379d144ef
b640e2729f37d0d7248691254b98dc37679a887d5688ad29635a09b5d62a5f40
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20women%20ready-to-wear%20t-shirts-tops/fts146.je0110.0952_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 12295
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6iTTyWgykFswrAH4mNQBD5G%2FF4Nv7mF5cfroolZyvl037L7WSZfTlpSXGD9aK3uT%2FjPx6Xphtt3yg%2B3rHHqvh%2FOHpHXrTBNFg5VoiOPs4hQ5yogZzHbaW59hB%2BI0wype4UgEyLAZuDPa"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:54:57 GMT
etag: "3007-6397b3b2f9a40"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd6048aa2b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1948&min_rtt=496&rtt_var=845&sent=653&recv=171&lost=0&retrans=0&sent_bytes=740913&recv_bytes=28906&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2227&inflight_dur=455&x=40"
GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts003.724.001_1-433x541.jpg
104.21.55.194200 OK 14 kB URL GET www.amiparis-france.fr/wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts003.724.001_1-433x541.jpg
IP 104.21.55.194:443
Requested by https://www.amiparis-france.fr/
Certificate IssuerGoogle Trust Services
Subjectamiparis-france.fr
FingerprintAA:D7:C6:5E:DF:51:29:A1:3F:51:99:B8:41:BB:1F:B7:84:7D:10:1B
ValidityThu, 10 Jul 2025 02:19:11 GMT - Wed, 08 Oct 2025 03:16:44 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 433x541, components 3
Hash 683556b79da561951656273b8fe7c2b2
6bdb906e15758205153bfc6c6c796b533b90add7
0fe3be292ace41655554ab2e04d69c85d616ee66958713e87afa69f3e9b493a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /wp-content/uploads/ami%20men%20ready-to-wear%20t-shirts-polos/uts003.724.001_1-433x541.jpg HTTP/1.1
Host: www.amiparis-france.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.amiparis-france.fr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 10 Jul 2025 11:49:08 GMT
content-type: image/jpeg
content-length: 14506
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9vlxomfS3hsvgaTfkTGAQtnhf%2BLb32IFYaPMCPGR1C17jdEYx8hlpP4hMF%2FecWEsVD%2BzD2%2Fk2nu0pvdEZW8Fwbwq%2BUIVzsow0E3q2PJ1UeY0hftGPJhCCQnjuQSXty0DtELQA8NUsgTe"}],"group":"cf-nel","max_age":604800}
last-modified: Wed, 09 Jul 2025 08:59:13 GMT
etag: "38aa-6397b4a71da40"
accept-ranges: bytes
cache-control: max-age=14400
cf-cache-status: REVALIDATED
cf-ray: 95cfd604aaa7b500-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2074&min_rtt=496&rtt_var=965&sent=819&recv=180&lost=0&retrans=0&sent_bytes=949588&recv_bytes=29356&delivery_rate=26934383&ss_exit_cwnd=24641&ss_exit_reason=2&cwnd=57033&unsent_bytes=0&cid=3db48a08702844a6&ts=2617&inflight_dur=582&x=40"