Overview

URL assr.crescendo.ma/
IP94.23.45.221
ASNOVH SAS
Location France
Report completed2022-10-03 02:30:24 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-10-03 2 crescendo.ma Sinkholed
2022-10-03 2 crescendo.ma Sinkholed
2022-10-03 2 crescendo.ma Sinkholed
2022-10-03 2 crescendo.ma Sinkholed
2022-10-03 2 crescendo.ma Sinkholed
2022-10-03 2 crescendo.ma Sinkholed
2022-10-03 2 crescendo.ma Sinkholed
2022-10-03 2 crescendo.ma Sinkholed
2022-10-03 2 crescendo.ma Sinkholed
2022-10-03 2 crescendo.ma Sinkholed


Files

No files detected



Passive DNS (13)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS unpkg.com (4) 11693 2016-01-07 23:26:01 UTC 2022-10-02 12:08:22 UTC 104.16.122.175
mnemonic passive DNS fonts.googleapis.com (1) 8877 2013-06-10 20:14:26 UTC 2022-10-02 23:25:00 UTC 142.250.74.10
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-10-02 10:20:02 UTC 52.89.255.30
mnemonic passive DNS assr.crescendo.ma (23) 0 2022-06-02 14:12:41 UTC 2022-10-03 00:30:01 UTC 94.23.45.221 Unknown ranking
mnemonic passive DNS r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-10-02 05:33:45 UTC 23.36.76.226
mnemonic passive DNS firefox.settings.services.mozilla.com (1) 867 2020-05-27 20:08:30 UTC 2022-10-02 22:37:38 UTC 18.164.68.8
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-10-02 04:45:21 UTC 34.117.237.239
mnemonic passive DNS ocsp.pki.goog (2) 175 2017-06-14 07:23:31 UTC 2022-10-02 05:01:45 UTC 142.250.74.3
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-10-02 05:00:42 UTC 34.160.144.191
mnemonic passive DNS ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2022-10-02 15:44:45 UTC 93.184.220.29
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-10-02 11:24:29 UTC 34.120.237.76
mnemonic passive DNS kit.fontawesome.com (1) 1868 2019-03-29 02:12:52 UTC 2022-10-02 11:43:45 UTC 104.18.23.52
mnemonic passive DNS ka-f.fontawesome.com (1) 3598 2019-12-17 06:36:13 UTC 2022-10-02 11:43:46 UTC 172.64.202.28


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 94.23.45.221

Date UQ / IDS / BL URL IP
2022-12-08 07:27:47 +0000
2 - 0 - 0 femmessnrt.ddns.net/ 94.23.45.221
2022-12-07 06:27:48 +0000
2 - 0 - 0 femmessnrt.ddns.net/ 94.23.45.221
2022-12-07 03:27:28 +0000
2 - 0 - 0 regiesnrt.ddns.net/ 94.23.45.221
2022-12-07 02:27:31 +0000
2 - 0 - 0 regiesnrt.ddns.net/ 94.23.45.221
2022-12-06 09:36:36 +0000
0 - 0 - 54 ecosiam.ma/ 94.23.45.221

Last 5 reports on ASN: OVH SAS

Date UQ / IDS / BL URL IP
2022-12-08 15:35:35 +0000
29 - 0 - 9 montakhabfuns.com/montakhabfans/en/login.php 135.148.149.123
2022-12-08 15:35:33 +0000
29 - 0 - 9 www.montakhabfuns.com/montakhabfans/en/login.php 135.148.149.123
2022-12-08 15:24:41 +0000
0 - 0 - 1 217.182.199.178/Oceanofgames.com/The_Walking_ (...) 217.182.199.178
2022-12-08 15:24:14 +0000
0 - 0 - 2 217.182.199.178/Oceanofgames.com/The_Walking_ (...) 217.182.199.178
2022-12-08 15:23:48 +0000
0 - 0 - 3 her-cupid.com/DgAA/10064/oth?i=VYdcoGOSAXA&u= (...) 54.39.22.228

Last 5 reports on domain: crescendo.ma

Date UQ / IDS / BL URL IP
2022-10-26 03:30:10 +0000
0 - 0 - 2 assr.crescendo.ma/ 94.23.45.221
2022-10-23 00:23:13 +0000
0 - 0 - 6 crescendo.ma/ 94.23.45.221
2022-10-22 07:30:13 +0000
0 - 0 - 13 assr.crescendo.ma/ 94.23.45.221
2022-10-18 04:26:09 +0000
0 - 0 - 1 adserver.crescendo.ma/ 94.23.45.221
2022-10-15 01:26:12 +0000
0 - 0 - 5 adserver.crescendo.ma/ 94.23.45.221

Last 3 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-10-26 03:30:10 +0000
0 - 0 - 2 assr.crescendo.ma/ 94.23.45.221
2022-10-22 07:30:13 +0000
0 - 0 - 13 assr.crescendo.ma/ 94.23.45.221
2022-09-27 00:30:15 +0000
0 - 0 - 4 assr.crescendo.ma/ 94.23.45.221


JavaScript

Executed Scripts (12)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (51)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; expires=Mon, 03-Oct-2022 04:30:12 GMT; Max-Age=7200; path=/ ci_session=raas37uk90mm3cmsqqlmsnskua1shd76; expires=Mon, 03-Oct-2022 04:30:12 GMT; Max-Age=7200; path=/; HttpOnly
X-Powered-By: PHP/7.3.11, PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (568)
Size:   27485
Md5:    4b89f2b7d29a6ac29237816e16d6eb53
Sha1:   8e0aa53f41d33a6cc61fd09a93148c8e4ae157bd
Sha256: a59dbcfd2e022059527146a3a4440f960fa1c49bf0bc8015dcb776c3525e7f24
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EB128AEC099DBF1919EE5D965221E904AD3A2162583683CEC44518640B505447"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11795
Expires: Mon, 03 Oct 2022 05:46:47 GMT
Date: Mon, 03 Oct 2022 02:30:12 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         18.164.68.8
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 03 Oct 2022 02:03:24 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a455b0542ae02d17ddbe081579777502.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: lPRjWkj-R7z3FWcnZnhEaHTKpmV_FjzZktD4JTmkodrNcOM67o9GHw==
Age: 1608


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "69D097718CAC37CC6B77D417711C4356557F2B47C78026303BFE5F985B94A5A5"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5671
Expires: Mon, 03 Oct 2022 04:04:43 GMT
Date: Mon, 03 Oct 2022 02:30:12 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: QkZ4RwsC+uZFPa2LaiwkVGiUAgQNEn0uk1XggzL/FKEZ+xRl/aU4uu6hdLjb2T1k51eqzanMSuI=
x-amz-request-id: SCQK53YE19N9BMWE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 03 Oct 2022 01:53:15 GMT
age: 2217
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 03 Oct 2022 02:30:12 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /assets/assr/owl.carousel.css HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:17 GMT
ETag: "e0c-5be5fabd49ff7"
Accept-Ranges: bytes
Content-Length: 3596
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (3596), with no line terminators
Size:   3596
Md5:    c9da937e20beb60ef5bd24640b1142ed
Sha1:   e70a839b5b15f2c4303bd04c412f061299195d8c
Sha256: 19957273ecb6357818d03f61b8a83c37bace65ecab29ac776c71b10194210c4c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5898
Cache-Control: 'max-age=158059'
Date: Mon, 03 Oct 2022 02:30:12 GMT
Last-Modified: Mon, 03 Oct 2022 00:51:54 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /assets/assr/bootstrap-datepicker.css HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:15 GMT
ETag: "4326-5be5fabb0ad23"
Accept-Ranges: bytes
Content-Length: 17190
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   17190
Md5:    1d3e74cba6f866d5ddbeaae87811109f
Sha1:   cc304e28d277d358a7540bcf63dc4c3bcc532058
Sha256: 6cb3541f348c12fc41868cac044ec45d8948ae6a3bfa7ec5e2826b6b522039a3
                                        
                                            GET /assets/assr/style-rtl.css HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Mon, 05 Jul 2021 15:11:16 GMT
ETag: "65c7-5c661b78a159f"
Accept-Ranges: bytes
Content-Length: 26055
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (316)
Size:   26055
Md5:    77d8561e3f5ea7b3d5952bdcb75d4851
Sha1:   d6db81f8d88ad171778f4ab07622d0a2305b0626
Sha256: 66bf147f8b51eb646bf94778abc508bcadbace482025b474bbe0bbe1925f1800
                                        
                                            GET /assets/assr/bootstrap.min.css HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:15 GMT
ETag: "235ed-5be5fabbc650a"
Accept-Ranges: bytes
Content-Length: 144877
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65325)
Size:   144877
Md5:    450fc463b8b1a349df717056fbb3e078
Sha1:   895125a4522a3b10ee7ada06ee6503587cbf95c5
Sha256: 2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d
                                        
                                            GET /assets/assr/popper.min.js HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:18 GMT
ETag: "4af4-5be5fabdd4aa5"
Accept-Ranges: bytes
Content-Length: 19188
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (19015)
Size:   19188
Md5:    70d3fda195602fe8b75e0097eed74dde
Sha1:   c3b977aa4b8dfb69d651e07015031d385ded964b
Sha256: a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66
                                        
                                            GET /assets/assr/animate.min.css HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:15 GMT
ETag: "11848-5be5fabb05f04"
Accept-Ranges: bytes
Content-Length: 71752
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65346)
Size:   71752
Md5:    201217c17c7f58f86549030d82f8b4d5
Sha1:   9c483362ebcd2740e666595b70af579ad096b8f5
Sha256: ea1a8732a5d354476cd51f0780a8ac2e6de5fdda27790b3ead2d5ae4d2e6c30a
                                        
                                            GET /assets/assr/bootstrap.min.js HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:16 GMT
ETag: "bf30-5be5fabc29ebd"
Accept-Ranges: bytes
Content-Length: 48944
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (48664)
Size:   48944
Md5:    14d449eb8876fa55e1ef3c2cc52b0c17
Sha1:   a9545831803b1359cfeed47e3b4d6bae68e40e99
Sha256: e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/assr/bootstrap-datepicker.min.js HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:15 GMT
ETag: "839d-5be5fabb8fa11"
Accept-Ranges: bytes
Content-Length: 33693
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (31941)
Size:   33693
Md5:    37807363a13de55c2184eb0777ff8b13
Sha1:   ac34b8e4a2363c231f5a0bb8224d69959efcbd4b
Sha256: 6ea55ea86749ee1fe560fabac6b3effd81b33046fa74dc657e24d41d28110a9f
                                        
                                            GET /assets/assr/owl.carousel.min.js HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:18 GMT
ETag: "9dd1-5be5fabdc0287"
Accept-Ranges: bytes
Content-Length: 40401
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32068)
Size:   40401
Md5:    ffaa3c82ad2c6e216e68aca44746e1be
Sha1:   2fa7c468110fa68f1f3df6718daf971871623ee9
Sha256: 83553d22ccd56e5576d544f6ba93475c712b3c02d312893eea2acc16de5fcf91

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/assr/jquery.validate.min.js HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:17 GMT
ETag: "5f7b-5be5fabcd2dc7"
Accept-Ranges: bytes
Content-Length: 24443
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (24304)
Size:   24443
Md5:    014e81dd1a31bde533ebc11828eaf248
Sha1:   e1c9b3564b2676967cb2663f250bbae4590d6fe9
Sha256: f8110a988bd0e88b0bf2c1dcbe276d0eb34e7593b70bd2ed14fb45d87d1d3872
                                        
                                            GET /assets/assr/main-rtl.js HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:17 GMT
ETag: "68b-5be5fabd22efc"
Accept-Ranges: bytes
Content-Length: 1675
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1675
Md5:    a87c9fa7451034b7d0b92755a746d4ce
Sha1:   5c384e02a8bb0b886922625be1dc228f19379df1
Sha256: b985c111693ee242c8932ff5ed7fb25d16175966c3bcd266c5d701b4cafb59dc

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/assr/img/test.png HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:30:58 GMT
ETag: "1d46-5be5fc75058d8"
Accept-Ranges: bytes
Content-Length: 7494
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 143 x 132, 8-bit colormap, non-interlaced\012- data
Size:   7494
Md5:    2ae9cd814fb4caa8606ebf873d016d87
Sha1:   e90c064fdce4b5f267a5869ac7c127a5cc813480
Sha256: 3c6cc489e6b86005c477078ddd6ae3f3886c33635f9b7e90dd6e3b2ecd1c56a9

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/assr/img/faq_home.png HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Tue, 30 Mar 2021 16:39:13 GMT
ETag: "13b4-5bec3a36fed0c"
Accept-Ranges: bytes
Content-Length: 5044
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 143 x 132, 8-bit colormap, non-interlaced\012- data
Size:   5044
Md5:    39eb1e0c85e72f5bab144c743ec1f9cf
Sha1:   9c133db635cfc37f7643f1137f4d9a67a1cc4db8
Sha256: 2315b1891e87c19dd92f8525c7848a2d89cd4f8febc1c493e345bc6bdf124982
                                        
                                            GET /assets/assr/img/logo-narsa.png HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:33:33 GMT
ETag: "3b6e-5be5fd090fbdd"
Accept-Ranges: bytes
Content-Length: 15214
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 300 x 122, 8-bit/color RGBA, non-interlaced\012- data
Size:   15214
Md5:    9e070b96891d71e488f74097888627fe
Sha1:   f4a827ffbcab43ab0e3c076eea3b25ad1423ee11
Sha256: 9e89dec8dfafa213ba48a94aa1a1c9b46adbd06e19f4dfd886757ad9d92cbc27

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/assr/img/ressources.png HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:30:58 GMT
ETag: "15ba-5be5fc74d4b9f"
Accept-Ranges: bytes
Content-Length: 5562
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 143 x 132, 8-bit colormap, non-interlaced\012- data
Size:   5562
Md5:    390e64c2884ba8bbfc72b2320ddb56e0
Sha1:   ccf38fa0a36ef4be757f78a5737621ce9dda4745
Sha256: 6cc9c83224b9601b03aea94869f9d0f44df5efe328a6e78ad6a5278414dad80d

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/assr/img/info.png HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Wed, 16 Jun 2021 10:23:38 GMT
ETag: "25c1-5c4df7bd7febe"
Accept-Ranges: bytes
Content-Length: 9665
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 131 x 135, 8-bit colormap, non-interlaced\012- data
Size:   9665
Md5:    af116a8131531668c66692279121a5e9
Sha1:   62481e395b64fe8e6a3234df156801cca42804cb
Sha256: b5544b007cee52355c9a75528c98aa0575df4768cb708c16d0708909d628bb82
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/assr/img/prepare.png HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:30:58 GMT
ETag: "245b-5be5fc74888e9"
Accept-Ranges: bytes
Content-Length: 9307
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 143 x 132, 8-bit colormap, non-interlaced\012- data
Size:   9307
Md5:    1efca104f5f8b4c3284f3ac3b9ae789e
Sha1:   3f219435157438ac3c0890a42ffdb5e17bdab6e3
Sha256: 133172d5119fd1ae33c7665e1f6beb201cd368635c38889b6057d962f9da5d0e

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /Job%20V1_files/sd1.png HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Set-Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; expires=Mon, 03-Oct-2022 04:30:12 GMT; Max-Age=7200; path=/
X-Powered-By: PHP/7.3.11, PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1130
Md5:    fc10f358967a59750ef6fd9a698e2d60
Sha1:   3fc472d167c41a4193625aff84ee6e599b302002
Sha256: 16ce845440c38f491f80553aee7a8144dcc0a82c46258deaffdd10a0fa3d2db2
                                        
                                            GET /assets/assr/fonts/LHLamarPro-Regular.woff2 HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://assr.crescendo.ma/assets/assr/style-rtl.css
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:21 GMT
ETag: "62b8-5be5fac09c8e6"
Accept-Ranges: bytes
Content-Length: 25272
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 25272, version 1.0\012- data
Size:   25272
Md5:    cbe8ef2c888ee194cd48b259c6b24158
Sha1:   16c98e0490ce722ade6fe75c9c57fab99caa8353
Sha256: 8803be5f8e70a728f11d9da6c402bf706d0cd244f330c8e55579d2745afbb60c

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/images/pageloader/loader-64x/Preloader_3.gif HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Mon, 16 Sep 2019 09:06:13 GMT
ETag: "36af-592a7ea616b40"
Accept-Ranges: bytes
Content-Length: 13999
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 64 x 64\012- data
Size:   13999
Md5:    23060ec23044bcbdbc40a2c6ec428096
Sha1:   db91090dd60098086993953f88c37a332eea70d7
Sha256: 8d5a7d189e11a76787df0a116636d069e821462ffb3aeca533943ca953b8a4ee

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /assets/assr/img/logo-men.png HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Tue, 14 Dec 2021 09:07:14 GMT
ETag: "5e6c3-5d31783e7fd6c"
Accept-Ranges: bytes
Content-Length: 386755
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 3392 x 436, 8-bit/color RGBA, non-interlaced\012- data
Size:   386755
Md5:    e66b888d3c22355113a611a523144b05
Sha1:   eb0ebf47c74baa209a6ab43625899749d957ec1a
Sha256: 0cca3a89a08b13517e554ce1be3151c0d4f58df7689147906f04efc4342b9ae6

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /aos@3.0.0-beta.6/dist/aos.css HTTP/1.1 
Host: unpkg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://assr.crescendo.ma/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.16.122.175
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Mon, 03 Oct 2022 02:30:12 GMT
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"705d-miajSdIaS4cfRd/RJKQ/raT5S5g"
via: 1.1 fly.io
fly-request-id: 01F529PAQ8FBT7QKGWC0ES5DBR
cf-cache-status: HIT
age: 12874519
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754241288f70b500-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (28765), with no line terminators
Size:   5918
Md5:    c8266096dbaf7bf90a9890fc0c87f82e
Sha1:   c673a1ca7fce209f87e67e551f22de1e142432ab
Sha256: ff6d97257b9c10f27ff1e0852e7ac23394da89045f0034ddb01a801c221c9577
                                        
                                            GET /css?family=Poppins:400,600,500,700|Roboto:100,300,400,500,700&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 03 Oct 2022 02:30:12 GMT
date: Mon, 03 Oct 2022 02:30:12 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   14207
Md5:    a045c2a0828423ebaa79306e2e9c3a8a
Sha1:   5d6115be98aa36acf3abbfff3190e1234ad69908
Sha256: ac8fe7f865cddf536b00a845e0cd9aefa2031c15262d85de66dc895b8d024f03
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1262
Cache-Control: 'max-age=158059'
Date: Mon, 03 Oct 2022 02:30:13 GMT
Last-Modified: Mon, 03 Oct 2022 02:09:12 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ovu7lunHU4+H57rI9TTnoQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.89.255.30
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: VBupfuQo2kdwq/59R0ZXwitnkfI=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10245
Expires: Mon, 03 Oct 2022 05:20:59 GMT
Date: Mon, 03 Oct 2022 02:30:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10245
Expires: Mon, 03 Oct 2022 05:20:59 GMT
Date: Mon, 03 Oct 2022 02:30:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10245
Expires: Mon, 03 Oct 2022 05:20:59 GMT
Date: Mon, 03 Oct 2022 02:30:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10245
Expires: Mon, 03 Oct 2022 05:20:59 GMT
Date: Mon, 03 Oct 2022 02:30:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10245
Expires: Mon, 03 Oct 2022 05:20:59 GMT
Date: Mon, 03 Oct 2022 02:30:14 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd0be942-f345-4da4-974e-a9fe16b90b3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9083
x-amzn-requestid: fda71fd3-ef25-4a63-94ae-1bfc8aef8d14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXD2H0DIAMFjrg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-198915fc17ce3dab571b7575;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _JxPe8uPQIgRKoJxtJAKjXpVy1hCW0rFcs8K_erJOHbVNpw339Pz6w==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:45:27 GMT
age: 17087
etag: "8118ee462077c291b9d6f1402b85b55a9ceba8c2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9083
Md5:    523edd86af4757d0bc5fa5b3b8a3596a
Sha1:   8118ee462077c291b9d6f1402b85b55a9ceba8c2
Sha256: c27de9970317636df8c4a517a9ed38e573235b351bf92c9b8bb1f964cd100031
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fda34e4-86f9-4fb4-94af-575d6201fccb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5383
x-amzn-requestid: 19106579-5727-4220-82ca-e9b7887d9896
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZM7OfEwuoAMFnXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63350bf6-2d80c27d185f114c4c512edb;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 03:07:34 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gWL6QKfR02p9RhhXL9Sn8Jw19qRKcJM5uW4u2Cv5nZvH2FkTJQ9gTw==
via: 1.1 6785379936d15b44a779e5f13a6567de.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 02:10:48 GMT
age: 1166
etag: "481ec2135ca0a96484c36cced30776c871aedf8f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5383
Md5:    e6c9691e104001fe54d3c6273b7b8596
Sha1:   481ec2135ca0a96484c36cced30776c871aedf8f
Sha256: f9e5e087d8b6e9b357c9f93b00c5919d89d90ac9b48d2dcd1ac72bf775a5cf49
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 04:41:00 GMT
age: 78554
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6315
Md5:    206fb65e75dbadf119512f71e0b78402
Sha1:   58ff0bf8ce7528b303d28bab01a80ad721705569
Sha256: 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb4b91592-bb2f-4b2e-9c62-80d06ad4b698.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3695
x-amzn-requestid: f1f35cb1-9fc2-4694-8bf4-9d9e41f9bd7f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZWabEM8oAMF0RQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a0442-3140202b1a3b892702978a7e;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:36:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: kxxeDkHccWmlQFBbBf-5gKzqY0utY15Czvx0Ms7QS1lJMXExRmbjjQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:48:46 GMT
age: 16888
etag: "6d0cee63012a8f79aef1f1e751e2940582b981e1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3695
Md5:    e3dfda0e06e989942bf45f4c2bf18d7c
Sha1:   6d0cee63012a8f79aef1f1e751e2940582b981e1
Sha256: a79d4015713255da4475ff9193ccfeed72737f5f03027a42fd86cc7b095ddf03
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4dcf393f-77c1-48ed-9c3e-ab160d7b4829.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9721
x-amzn-requestid: 1825bd73-4760-43e8-97f7-c9d2c06a119f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZXXxRHYkoAMFaHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633939a1-4e92f3265ead21e876cfb556;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 07:11:29 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: l-YyB6m2kDzmbo7Mo4vBedg5_c_N4U3PrCkpNlicpARH0-BrwjnEOA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 07:44:09 GMT
age: 67565
etag: "b64aff132fdfc91cf59f70170b3d4bd3fc025294"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9721
Md5:    b7660e05c8a7b32db05f8c56693bc774
Sha1:   b64aff132fdfc91cf59f70170b3d4bd3fc025294
Sha256: e1d523c385cf05ae2d432526a387f43443d14b4b68129aa76229687366938805
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98a090b5-0736-4ddd-b6ca-3c76661e7051.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8158
x-amzn-requestid: 424c8c6c-7075-4ace-97e6-2b0a609d1b7e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZZXDxGRlIAMFZrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633a054b-046d963a345c15e81dc74e4d;Sampled=0
x-amzn-remapped-date: Sun, 02 Oct 2022 21:40:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: AM8Ox9ObWGoXI-QnnoI7QkY5mOh8j6xBPetTrhyVktVO40ekk4X2Eg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 21:45:27 GMT
age: 17087
etag: "3fc3aeae907a0ce0db21753c67c1000681e48b8e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8158
Md5:    721a8d8f94c3796abf021978fcdbc831
Sha1:   3fc3aeae907a0ce0db21753c67c1000681e48b8e
Sha256: cb497b15e7c2e49930b99f8d6659f0394acefb7b11613ca04397ee782dac759d
                                        
                                            GET /aos@3.0.0-beta.6/dist/aos.js HTTP/1.1 
Host: unpkg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://assr.crescendo.ma/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.16.122.175
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Mon, 03 Oct 2022 02:30:12 GMT
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"35e8-44lQwbzmXp8EjjBbNWf/kKDJI+M"
via: 1.1 fly.io
fly-request-id: 01G4XPMRK60WFNVK2QWFYNAZ5A-fra
cf-cache-status: HIT
age: 10205076
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754241288f71b500-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /388eefa923.js HTTP/1.1 
Host: kit.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://assr.crescendo.ma
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.18.23.52
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Mon, 03 Oct 2022 02:30:12 GMT
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FxpuOyZRTx4apJ36Bzyh
cf-cache-status: MISS
server: cloudflare
cf-ray: 754241287bc41c12-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /assets/assr/jquery-3.3.1.min.js HTTP/1.1 
Host: assr.crescendo.ma
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Cookie: csrf_cookie_name=4b6e9181628b5897fd234cf245f69ecd; ci_session=raas37uk90mm3cmsqqlmsnskua1shd76

                                         
                                         94.23.45.221
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 03 Oct 2022 02:30:12 GMT
Server: Apache
Last-Modified: Thu, 25 Mar 2021 17:23:17 GMT
ETag: "14979-5be5fabce6644"
Accept-Ranges: bytes
Content-Length: 84345
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /releases/v5.15.4/css/free-v4-shims.min.css?token=388eefa923 HTTP/1.1 
Host: ka-f.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://assr.crescendo.ma/
Origin: http://assr.crescendo.ma
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         172.64.202.28
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 03 Oct 2022 02:30:12 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0014cc5ed6f7d7422fe78da5a10aa120.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: Tpzb5pIqrTxXw73iWIhEz1pqtNylH9pcDHqaXEKPFzr6SZl0o1BxlQ==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2vMEtcLJqmLtRXMchBP9O7z5rnvEvF%2Bsz8E4sERDTB2kL0ML5svTwa%2FqsbLpfa%2Fzg10dyXXa0ewhPYkIf004n0%2FCJ7eabUVM6Z373fZNvAm%2ByW2g%2BhOwVXutXSFEQIO83QDWnkPEcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7542412adfe27756-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /aos@next/dist/aos.css HTTP/1.1 
Host: unpkg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.16.122.175
HTTP/2 302 Found
content-type: text/plain; charset=utf-8
                                        
date: Mon, 03 Oct 2022 02:30:12 GMT
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /aos@3.0.0-beta.6/dist/aos.css
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GEDTARABA88ECX6VARA22CGS-fra
cf-cache-status: HIT
age: 562
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754241283f37b500-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /aos@next/dist/aos.js HTTP/1.1 
Host: unpkg.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://assr.crescendo.ma/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.16.122.175
HTTP/2 302 Found
content-type: text/plain; charset=utf-8
                                        
date: Mon, 03 Oct 2022 02:30:12 GMT
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /aos@3.0.0-beta.6/dist/aos.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GEDTP59RW85VDMW6DZAPSBJF-fra
cf-cache-status: HIT
age: 188
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754241283f3db500-OSL
X-Firefox-Spdy: h2


--- Additional Info ---