e-commerce

English

bm_sv

priv

mktck

consent

gdpr_consent

ak_bmsc

bm_sz

platform1

cookieconsent_status

_gcl_au

_abck

xsrft

xsrfp

akacd_PR_Iris_Assets

akacd_PR_Iris_permanent

euconsent

Within the French country-code top-level domain (.fr), 'boutique.fff.fr' is registered; it also runs on subdomain 'boutique'. The registrable portion 'fff' spans 3 characters holding zero vowels versus three consonants. Tokenizing the label suggests one word: fff. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

html/d5/59/d5593539-b138-4dfe-8207-fd15b2f5abc8_fallback.html.gz

Access Denied

html/d5/59/d5593539-b138-4dfe-8207-fd15b2f5abc8.html.gz

682c2461685ccab9440db6922fcc1e08743ee9e15866549c190a7906fce8b7ee

83a3dad0e2b07d3ec4ece31d37fad1e8156060b2ff3003342395e3d5edb689bb

viewport

Welcome to the official store of the French Football Team. Buy your official FFF jerseys and products!

description

keywords

https://boutique.fff.fr/content/assets/__0-1257765551029.3533.svg

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


      window.NODE_ENV = 'production';
      window.ENV_GROUP = 'ecomprod';
      window.IRIS_API_VERSION = '1763194241690';
      window.IRIS_GO_API_ROUTE = '/api/data';
    


      (function measureLoadTime (win) {
        if (win.BOOMR && win.BOOMR.version) { return; }
        function boomerangSaveLoadTime(e) {
          win.BOOMR_onload=(e && e.timeStamp) || new Date().getTime();
        }
        if (win.addEventListener) {
          win.addEventListener("load", boomerangSaveLoadTime, false);
        } else if (win.attachEvent) {
          win.attachEvent("onload", boomerangSaveLoadTime);
        }
      })(window);

      (function(window) {
        if (!window) return

        var locationHrefBits = window.location.href.split(/\/+/g) || []

        var URI = '' + locationHrefBits[0] + '//' + locationHrefBits[1] + '/log'
        var loggedErrors = {}
        var isBot = false
        var pageTypeCode = 'HP'
        var logLevelFromSetting = 'NONE'

        var fn = function (message, source, lineNumber, columnNumber, error) {
          console.log('_irisLogError: ', message)
          var errAsString = JSON.stringify({message: message, lineNumber: lineNumber, columnNumber: columnNumber})
          if (loggedErrors[errAsString]) {
            return
          }
          loggedErrors[errAsString] = true

          // Avoid send error when isBot is true
          // but still keep the errorsSeenOnPageList updated.
          if (isBot) {
            return false
          }

          // Send Error logs if log level is anything but NONE
          if(logLevelFromSetting === 'NONE') {
            return false
          }

          var errorObj = {
            message: message,
            source: source,
            lineNumber: lineNumber,
            columnNumber: columnNumber,
            userAgent: window.navigator.userAgent,
            url: window.location.href
          }

          var req = new XMLHttpRequest()
          req.open('PUT', URI, true)
          req.setRequestHeader('Accept', 'application/json')
          req.setRequestHeader('Content-Type', 'application/json')
          req.setRequestHeader('X-FRG-PT', pageTypeCode)
          req.onreadystatechange = function () {}
          req.send(JSON.stringify(errorObj))
          return true
        }

        window._irisLogError = fn
        if (window.addEventListener) {
          window.addEventListener('error', function (err) {
            fn(err.message, err.filename, err.colno, err.colno, err)
          })
        } else {
          window.onerror = fn
        }
      })(window);
    

var __platform_data__={"ssoConfiguration":{"clientId":"643e9d9cfac3af5cb80173d5_3ibnif7tp6uc4cs4448k8k40c80ow0k0k0kkswso08s8k4o008","ssoConfigId":"fffidp","login":{"loginFlowType":"oidc_authorization_


    var ajax = new XMLHttpRequest();
    ajax.open("GET", "/content/content/common/images/svg-sprite/46ebba77d5355d2b0f1ee01407252697.svg", true);
    ajax.send();
    ajax.onload = function(e) {
        var div = document.createElement("div");
        div.style.cssText = 'border: 0; clip: rect(0 0 0 0); height: 0; overflow: hidden; padding: 0; position: absolute; width: 0;';
        div.innerHTML = ajax.responseText;
        document.body.insertBefore(div, document.body.childNodes[0]);
    };


Google

✅ Low Risk - https://boutique.fff.fr/en/

Requests	IP Address	Location	AS Autonomous System
13	142.250.184.196	Unknown	Unknown
3	142.250.185.130	Unknown	Unknown
3	142.250.186.136	Unknown	Unknown
3	142.250.185.162	Unknown	Unknown
3	142.250.185.136	Unknown	Unknown
3	142.250.184.228	Unknown	Unknown
3	142.250.185.100	Unknown	Unknown
3	69.192.160.129	Unknown	Unknown
3	142.250.181.226	Unknown	Unknown
3	142.250.184.195	Unknown	Unknown
82	24	-	-

Security Scan Report: boutique.fff.fr

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History