{"report_id":"ebad4959-6622-4f1e-b30d-c6f469153e3d","version":6,"status":"done","tags":[],"date":"2025-10-16T18:08:38Z","url":{"schema":"http","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":0,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"title":"Croquedisney | Accueil"},"submit":{"url":{"schema":"http","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":0,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-20T18:08:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-12T22:16:17.945241Z","alert_count":0,"request_count":9,"received_data":534361,"sent_data":4759,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":2,"received_data":15197,"sent_data":962,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":1,"received_data":421001,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-12T22:15:22.841346Z","alert_count":0,"request_count":1,"received_data":9513,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"croquedisney.com","ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"domain_registered":"2021-05-02","domain_rank":0,"first_seen":"2021-05-06T06:04:09Z","last_seen":"2025-04-19T11:06:47.516838Z","alert_count":0,"request_count":65,"received_data":9879180,"sent_data":77911,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.0.10","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":6,"received_data":180492,"sent_data":3237,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"4db8e2cdb6a484f36d75768219b6e653","sha1":"d86188c0e0e9c04b9e423609dd6653b761d0d9e5","sha256":"10531d7f9c7ae6897d39b9772fbdecac2cd706d7022f8744dbb46a22851e70af","sha512":"1bdd5f559706153620cd798fa7966485f5a1c83821c41f33f5759fc18b35e3df8d667dcb18434211f043c70a30f70f9ba92006319cc10faadde38d417ab2d6b9","ssdeep":"","tlshash":"5851b17345aef1b6ce0bb545249c39b4d04b28aad420a4daf56ccc9593aebf04f1d11f","size":2700,"data":"","first_seen":"2025-10-16T18:09:00.664244Z","last_seen":"2025-10-16T18:09:00.664244Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"0ab62a62cf9d76509743cc431f39693b","sha1":"63ab5d4650508a8d14cb54420be9ed7582ee9e77","sha256":"39890d6dc0c5a1907a64300aa7559f5b8794298d28d63e1a09ac4e2d7cb81592","sha512":"7e5193c51c4d6de233127b45d6919052563ec2236f44374c4abda14f3204c5327e6186668001466ef4cada1324fc796047bc204bf37578077c2569a6282bbecd","ssdeep":"","tlshash":"8931c262057de1b2cd4be016256dbaf0d45669ebc03060d6fef4cd2446eeab04b1e12f","size":1592,"data":"","first_seen":"2025-10-16T18:09:00.66724Z","last_seen":"2025-10-16T18:09:00.66724Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"8fe4daea1736b2963360604d93ea78a9","sha1":"099bcb866edb1391fd2bd3f6f271ba60a7d7ef02","sha256":"efff3af52692174d68796c162d56071b9f19e9f897ca38adf32ae54ceec19721","sha512":"2a55a232a58f620a0744f5747df6870d69bf4888bc276b20e3c3c86d1aca6622753788fda575e322cf407174ee2d02529b2c1c48a9286cf98f369550f5cfc75b","ssdeep":"","tlshash":"e5718b1301bfd5ba8d4be22531ad3af6e18654bbdd11e0caa5e4cc91824daf0cb0d25f","size":3580,"data":"","first_seen":"2025-10-16T18:09:00.670569Z","last_seen":"2025-10-16T18:09:00.670569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"7c182ac13f162f24839773a4795595f7","sha1":"84bc6a6419ee22d48c5cac794080a41616eaf959","sha256":"2136a39ccfdb450e97375974ef8bb3e0b325311c350445c00f044a51f3704ba3","sha512":"c723dff5121c6be0d4ffc00a98bbb4530b7ac18967c44b975f4c2c91245879f4a9955d9c6a6ed730483e06ab1864511362f81b6dcd280df9bdbd78de35ac254e","ssdeep":"","tlshash":"1f413d1322bdf2f2cd46a202285db9b0e09d19ead06064c2f5b7cc6492dd9f1671e25f","size":2310,"data":"","first_seen":"2025-10-16T18:09:00.673786Z","last_seen":"2025-10-16T18:09:00.673786Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/js/frontend.js?id=d7611f857ae62650b7f7932c46810aef","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7611f857ae62650b7f7932c46810aef","sha1":"b396757e4970ffb403c1768dd59bacb4367ed46f","sha256":"e0f363935aacdf36d89c86993d9dc9819151ea1695acfd5eae01b278a0b362e7","sha512":"7934991675a51178767b280d7cf474fd20caf355f245cf4f780282954ba71434fe7b3558bd0099566ac602d9098ef24cf39484c2f80fda0196495374ecc8283a","ssdeep":"1536:L+CWHbI+nL8O3L/2IzMg+hjYN2bLcUEXuGf0wQZB3Yhsbd4mcA6b50+qcAtz0b6A:LTWEsXUVY6btcA6bOtz0b6xcCy","tlshash":"f0e3f9dcb295b07113ab20b5407f550bf23a6915a84ec590f262e4d63c78c8ea1bbf7d","size":149415,"data":"","first_seen":"2025-10-16T18:09:00.589067Z","last_seen":"2025-10-16T18:09:00.589067Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/js/vendor.js?id=d504232ba9d8248558823df39c9e61c8","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d504232ba9d8248558823df39c9e61c8","sha1":"09da31ceb67d03c20d02103c2c5b54f4110e71dd","sha256":"800722addc3f8c5104b16e1c94073545e51017b2b69f107cdb51af49b5012a04","sha512":"4769cf711369cf040dc6a7e8e825133d2ac0cb3c8fb9f39954cdcceabd811b764f13cb8b513a3b9ea4d95a05f2f0457a191d2f57f695f2fb37d0f2ee576e9554","ssdeep":"6144:c30aBlNmAFdTulBTDk5KPoZuo/DHc1fKcxhCI0nsoxg7inf:c3N7NHTubDcnZuWY1fKc8TnaGnf","tlshash":"1784f8c97282b02253ab60b6407f410bf33a5955b84e8418f128e8dd7d7ad4ea277f7d","size":386752,"data":"","first_seen":"2025-10-16T18:09:00.46415Z","last_seen":"2025-10-16T18:09:00.46415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-03T21:27:58.033583Z","times_seen":77070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"eabeb0add2459aa3258ae2825b281b36","sha1":"4c69f9d258a6c721467186ca8d7cd1bb38bb1922","sha256":"badb392108ba8ee749b667d3d36675ce1b6a2ba31f620c060cead6e97a3f5587","sha512":"04b633222da105cfa249cda8baa5bc6ded820c723b0816b53fe7925a4d1e4fb76df61b252c602a25f49dad39c0b0ba800af361c4c6c2de7bc160236aba0f0f88","ssdeep":"","tlshash":"55e0a0b3246dd4b68c56e921603cbda0d99a64e3cd14a0e7b898cc1c84dd9f08b0922f","size":431,"data":"","first_seen":"2025-10-16T18:09:00.677089Z","last_seen":"2025-10-16T18:09:00.677089Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"67c3dc69b3e18fd935c2c306b1a46caf","sha1":"829d260fb185611584f4458b6bbd5316899c6804","sha256":"f546a2b6d17860d56701a076c941630b4670a39d09a97c901e95b7447706375d","sha512":"675d4f24bd90f2e7ea18494dd376137408483d396204cc533c83612734bd5499858b50075ad97226132b4e0fb487ed2d720f0f52532372327e1f218ec8abef3f","ssdeep":"","tlshash":"55f07da354fee3f28f5bf5501058bba5d06a19eac431e0c2a424cd25a17ebb0470e02e","size":625,"data":"","first_seen":"2025-10-16T18:09:00.680158Z","last_seen":"2025-10-16T18:09:00.680158Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"8c007e5ecd7e7bc7a061d2c0f3d00c91","sha1":"78cca3301603c6857b56da1ce31b1be1d4273f14","sha256":"b338e4b6f2949bb2e83c06027df49227aad8c6674bdbe536ae6564d67e92d7d2","sha512":"a6668121fe11e20b3b14451b341a6594953b230bd1a9a31ec1219fccf3268712015a132ba721b0154bca1d247b7619dc52bc84fa1d31b3205c645894daa5462f","ssdeep":"","tlshash":"1761777264aef6b5ce4be51121ac79f0c06665efd06064dab9b8cc50826dbf04f1e06f","size":3307,"data":"","first_seen":"2025-10-16T18:09:00.683286Z","last_seen":"2025-10-16T18:09:00.683286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/js/fresco.min.js","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5fccf0333d2f885a62803ecf13e2c35","sha1":"154b6372b70a6a4caa26c15c70679b1152702655","sha256":"af4885ef61608f59c2715974e61acdbbc4a4cd1d5af401751617a1763ef1b4b9","sha512":"10d15ca448d6548f666877587d21097612438b5936db4584e64d4960a638bf8dcddcc20759eda49dac9e1f9c75e2f96ce1a61db3b927fe42c5960df4f2be5751","ssdeep":"1536:50QhO8MN+N6Do9j5Csf24uDoTlWkpwzPryAvoN:BhTDbzuDoB","tlshash":"f173b689b164391580ffb162a03f170f723296256a04428cb134d9cdacadd8a7677fbe","size":74190,"data":"","first_seen":"2023-03-07T01:42:31Z","last_seen":"2026-04-01T06:28:37.219133Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"70e911ed88ff0b0b5453dcf5afc24d59","sha1":"cb52b48216fb0cf9defefa131ed7781bfae3c6b3","sha256":"510cf35de57d3031c6ae093010140cfc706a067c98b0c718b9e31d63411f03b9","sha512":"d4ab4fe2e99ec8c797ef5677cde4950b1248ac9d4731818b8999cc8e0e4eecfdfdb420ae3cf4b3f875e7892ee3ce60f8648d307b3dc323115041c744f775c8ff","ssdeep":"","tlshash":"2441f40b88224077416ba13e5d6fd602a7db91135ead7d20bacc16448f9c61e7af87f4","size":2223,"data":"","first_seen":"2025-10-16T18:09:00.68657Z","last_seen":"2025-10-16T18:09:00.68657Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"b0daa44298e59ae1b3fbe62baa3156d5","sha1":"326a54155acd0c869ec83bdefc2020792f70e803","sha256":"5c73269bab431edb8c933197b0b8064511a3637a5d5713268c969d5f2ae94fd0","sha512":"5173ef1e487e17ea61e6006e28298361bddbca9a6ab403798eb299a1d535933ed604b9ef379f950bbfb688724dc40b8243b4d89fa6e76e4e5ea923632f00b0a1","ssdeep":"","tlshash":"7b21a13206bee076cd27e201281da1fce45954fa95a020c2f4b5dca595dfdb0571d25f","size":1199,"data":"","first_seen":"2025-10-16T18:09:00.690771Z","last_seen":"2025-10-16T18:09:00.690771Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/js/manifest.js?id=df04d80edd1398d7a29e88c950de6a6b","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"df04d80edd1398d7a29e88c950de6a6b","sha1":"6a9c15816b6050b99ca803df0ac072eb5aa7a078","sha256":"8542ff0829c6c9e028f79c392d2c37e9b075880e61e1b8cf2a38d7172c2c452f","sha512":"d7f18e3c7e130ed3eb41087d511c25e6b2c91e9f9ce8d727a5a96c0d1f3a27510b30baf352643fbe076dd99159ff53b005e3e3854455eee961585d1b7db8daee","ssdeep":"","tlshash":"c531629431f4a4a53be399c50a1f8047f2226973703fe9e1f703cca925689960672fa2","size":1500,"data":"","first_seen":"2025-10-16T18:09:00.63643Z","last_seen":"2025-10-16T18:09:00.63643Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"2bf09054655be90765244e9f7bea56cf","sha1":"ddb232d9a55e51b33c4c2504928a4e258e31248c","sha256":"c85321d753ecef7af890a680a05a9a1ef03102d4919332b98074b526e4016746","sha512":"a253d60cd191d911b1248bf7f75a37f2d01d75ac4c8a2c50a27816da4418fd691bd111400fd5419c010c6910c42164a4efe3797f397afb51c66c2c7280520ea3","ssdeep":"","tlshash":"ce51046b09adb731ed0a640028343db0d49995fbc17452caf9adcd2453f96f40b0f91e","size":2702,"data":"","first_seen":"2025-10-16T18:09:00.694172Z","last_seen":"2025-10-16T18:09:00.694172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"67b7d11e764a6333a51554ea59462415","sha1":"07d2bab8cda78f2cebf86a1ff6015d5309b34404","sha256":"74060569476c6131ba70c20571312db0a8fd3b65ad67456ed4c76f75727239fe","sha512":"d212df7fdab6525a7953a512adedb085f024e470dfea18a3c22fa7bdc98131b2407053554ed5636536cf7192462e16fddad8ff017a74fe975edcfd927ea38918","ssdeep":"","tlshash":"ae518e1314bce0f38d5fb488127778f2f25f65aee83150d5a0a8c9998a4dab10b5f16f","size":2974,"data":"","first_seen":"2025-10-16T18:09:00.697201Z","last_seen":"2025-10-16T18:09:00.697201Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"f88f8660dc45db27e4c6a8267df08fe1","sha1":"31b0df04cc55446e43ff9d408c6b15dc45bcb180","sha256":"7ed91b86c9f0bb7ecadabb88a2aa1dfc4b4c1976f9b629b235aefa7bd195fd15","sha512":"70f0d916338dbba517b3382b0c5b42645046745d19f8dd5f1d1ded80120529d7e2d8f4b4f83a72a923dbec99661f3779c92159419646d767401a385ca6768150","ssdeep":"","tlshash":"9fe0ed9260e9b2f68e476462106d6af1c46928fb9060e0c4b8b4cd065a6d6b44b0e86e","size":418,"data":"","first_seen":"2025-10-16T18:09:00.700331Z","last_seen":"2025-10-16T18:09:00.700331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/SlickNav/1.0.10/jquery.slicknav.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e39d4e80470a2838d2f4cf6f1cc940a","sha1":"8d283a5b31156347f08bed6ca92eb717db3a169b","sha256":"87f4f0b8142a441884c70d2c2bf1ddc33248eee60506b27611ba3b827f401b3e","sha512":"1660973496975b0d5f7371bcccedd6770476376dd84d60c50d3337bab7adc5521b67b96f9e31e47225b8cf2e891af9eb82391c34493c50db5d1932ecd8613103","ssdeep":"192:kBt6YAHrZQKkMBxkg4ef4xXoSGon1q3IkeRsbTW:kBgZQSyewFDn1q3Ike2bq","tlshash":"4a024149b1143ab375fb7bea4237880aa333412dc40b80b97963daa54d3a45d3523f7e","size":8492,"data":"","first_seen":"2023-03-07T22:39:22Z","last_seen":"2026-04-03T06:17:02.783619Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3a9778c87518eb50efb411039e8add9","sha1":"f8e9d1eee92a2d43c7b9e53c0607bef91af18ef1","sha256":"5ab49bdcc7f73d529aa0f146ffc5f2a41bac945b1394b818b3077913c856369d","sha512":"0049f151c6e503cdf0b5d2826f12b41050369de310317a330036e68a7bc08239f0a18d5b766b89f8fc1984ca731298b43478e8f0bae45e41b7dca015bd52f358","ssdeep":"","tlshash":"41b012d311811821017b60579225834c2920a0933c028027b90c13004b60841c43d541","size":100,"data":"","first_seen":"2025-10-16T18:09:00.710596Z","last_seen":"2025-10-16T18:09:00.710596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee05f4b2937999f494e926fcc1eade3c","sha1":"bfb0b301249461b54e1ef7af128214d148fe85e9","sha256":"a6a4f898803df38ad8c441792dd9de06e460041ca3cc8cc418b57f6e502bc00a","sha512":"e7b342308d0055f5ac09121a243424673594124782c7b78581ff818c0b2d64a3eab5d9efc71cfe03afcfcbb1e0807750e4dcb9bcf4ac886f43e870defb58900d","ssdeep":"","tlshash":"5fc08c88210b0c7046ab2a050fafb600b00a3222a4909931390e63444f30e13d788864","size":172,"data":"","first_seen":"2025-10-16T18:09:00.714061Z","last_seen":"2025-10-16T18:09:00.714061Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"1e225b554210eb06decde590701f5c4d","sha1":"2593fd3962fa312f2a793fbba10ec12121c4b91b","sha256":"51bd2641279944e6b52956cf3bdcd81fa9e24b87549b9c0b26141fb2317fd5a4","sha512":"8d06f954eef8c499eaab3f61cdcab5b59e1d09aacd43197d9d31c9c56e1de3daa7b45a58665e170ff61590b4e38b2e754490467f0bf56466adefb264ebd3b853","ssdeep":"","tlshash":"a7219ca2097dd1f2dc4be402257db9b0c90798e7c12051d6bef4cc2455deaf54b2d12e","size":1443,"data":"","first_seen":"2025-10-16T18:09:00.717439Z","last_seen":"2025-10-16T18:09:00.717439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-738X5SF9FX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b58ee6db555445cda01340ed3f23889","sha1":"0ba994daec57d577ff2b2a3fc6d0a1d941d726e0","sha256":"531acb14c2e9f6753d7efc9c39b7b4e5ee258628b98439672dbee75d6e38b0c7","sha512":"128924b87b17d8a7999204c03fb04d267c54ec352e2135c1490de87830d82681eda22e5611df5b6f69497952291954a04d2b3b98e9ec1143d3b520e9ba66342a","ssdeep":"6144:JK5c6tQSyOh+3y4nkEt7F8wUjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:Jb6rRE3y4nkEt7F6EqPeKRy1bv","tlshash":"9094198e73c674269396f078503f018ba57b29a2f45cc895f189cce42e74a9a4277f7c","size":420397,"data":"","first_seen":"2025-10-16T18:09:00.566085Z","last_seen":"2025-10-16T18:09:00.566085Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"introduction_type":"Function","is_inline":false,"md5":"88789a2d54a463168cfea32db3e31166","sha1":"4359557dcb07befab21dbf61d8487cdc1117a661","sha256":"0af5ef98f327f6ca8fc30ffd0a4572f8bd5adc1119375774bac7c27d7dcf7df7","sha512":"290ddaca62a1cdbda5bd85a2d68ec3d02040e660c31bf1bcab1debc4f156c8553d840ac5f26d1052c1ebd49aca41f6b14c255a561200853665555b8da423a95e","ssdeep":"","tlshash":"c32137a311bee2f1cd5bf891116cbeb1d04388eac02150dabdb4cc2054edbb04b0d62e","size":1155,"data":"","first_seen":"2025-10-16T18:09:00.726238Z","last_seen":"2025-10-16T18:09:00.726238Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/preloader.png","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/preloader.png HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 11432\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-2ca8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 146 x 146, 8-bit/color RGBA, non-interlaced","md5":"dbb2b7ad91085d1d138f00350f0ea041","sha1":"f73cd999564ba82c6f2638e37440ecf651a02153","sha256":"aede38e2a059b152945a1cba5f80544d5915bad3b9ee651b0d300102d486ebdd","sha512":"3322cc757c15b896d3140137d8001877bbbb9e2a0c658fc571dc45b6411cb81d7a81fe3be472343e394356245e69fdc25337543c1ec8acfc0a15ef3ba1cebabb","ssdeep":"192:8STBrHL4QsUFhNcUF0RKkpsylzTFyuvTE3tGqKsKCNAqTJQIaCZnVY+7iMB:7TBrHEWhNNFqzlnnvTENKAAqTJ7aCZnV","tlshash":"5032d0c5ab4c5711e484baf8207a48209f8d0006da54a262f191e9ded9fe0b8f3ded5f","first_seen":"2025-10-16T18:09:00.3903Z","last_seen":"2025-10-16T18:09:00.3903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/pixar.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/pixar.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17788\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-457c\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17788,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 263x263, components 3","md5":"54928faa007592df1145c524ff902091","sha1":"474ff364a55cba704b0c7e68641f74b6bba5b35b","sha256":"ecd57324d0c8ea9576816785db1b19083703c79c0fb2532fe6200c828137c506","sha512":"774534e1a9a36bd422957d08aa6fb229725a3a2fad96edb9d38564dd5b80b98d1ad0cadddbe2576aef7384ef4c1fe59744450b9c68a9e7c157339de25ba1b74d","ssdeep":"384:nNdfSfKEeAQmuc810XnBtoeMFatOkbuZ2b:N9SfKvkj81UV6QO2C2","tlshash":"4882c034b11fe95ecab83e7182428961c6dbe35c54ffc560edca5083c34f5b941b2964","first_seen":"2025-10-16T18:09:00.395169Z","last_seen":"2025-10-16T18:09:00.395169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/pocahontas/HappyColor_60163.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/pocahontas/HappyColor_60163.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 340478\r\nlast-modified: Wed, 08 Oct 2025 01:41:42 GMT\r\netag: \"68e5c156-531fe\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":340478,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3","md5":"6fd3d81dbbf704ae84135b03f1f9d7c0","sha1":"3d622fa07b898610b7aa97103271fc83334ba972","sha256":"e006bf08d32c0644b6ee4fce89db15647f9526c623fa851d26289145f6896bb9","sha512":"eccaf5b20160729f96a3248a100cfa65ca506335fb64be08304756c7df4749f40f698886d3e1d96cd41cb20bbb53e2734868a9c933ffeea265cdf09ea0369363","ssdeep":"6144:AytcaTqHXpC8YMSjwxGTD6aGpReOUjzUQzJd8Dx+QvD0pmB4j/p+xYsAW4oPGrT:bS7oiS5YeOUjVzrsXSZ/IRAWfPGrT","tlshash":"7d74235e3071de23f1fc097eb7f28932c6674709d8445a214245cbeafb16a2adee46c1","first_seen":"2025-10-16T18:09:00.398538Z","last_seen":"2025-10-16T18:09:00.398538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1400,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/minislider/image1.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/minislider/image1.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 444445\r\nlast-modified: Fri, 03 Feb 2023 19:19:35 GMT\r\netag: \"63dd5e47-6c81d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":444445,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", progressive, precision 8, 1536x1536, components 3","md5":"6c07021731b74dba0912b26c5e06ecb1","sha1":"b45698cd3df4bc485924dd1b517fb726b5677c1b","sha256":"c70ab0ee65f09031aa256851d2243be1da429303f66c0685b21e043b52fc00f5","sha512":"410b6adf13369364cf5748e005c958a5920455c7009749c485d4d2433b8bc7fa6dd97130d9c1a0f6de208176c359351c87ce0039a8622f8e4604b7389266543f","ssdeep":"12288:cAekNKgYUqxz4EMU7FMyFQdke1D/TxqTumSgJP:ci+UgzFMU72rkGrk17JP","tlshash":"3294237f06315dd88d428df68b4950c1b96763202d19b136ee0f913becb2e3a7b521e1","first_seen":"2025-10-16T18:09:00.402231Z","last_seen":"2025-10-16T18:09:00.402231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":1356,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/networks/youtube.png","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/networks/youtube.png HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 50917\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-c6e5\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 195 x 192, 8-bit/color RGBA, non-interlaced","md5":"8d0f1b516d51eb702efef9ab06d2ed80","sha1":"57c13e23bc6f28f8f02a4ce8f82c3027a9f8a005","sha256":"80c069fdcc8b148df2e033c893dbd31022bb439c4df5a4b6fe1a2c73e09dc3b9","sha512":"94dad90afa9096babc77ec18dacb815addd3fa79eb83026d4dc466f2e3086bf352cb2873efabc000e25a57fdebf94d2205c81728b21ae018f8c9dda9bb7518f0","ssdeep":"768:hJZBbcvcpgAVEaeFrfvFvgeIbAiF1blLBjw4NynknZqLBGH+4bDHtX0nsWUK3XRA:3ZBovyBmvFKx9jw4NykZy4BtX4COXRA","tlshash":"6233023577b8de2c1c6a6b809630f4ab84ff9bf01510166675a4dcef589d09a85b03b3","first_seen":"2025-10-16T18:09:00.405587Z","last_seen":"2025-10-16T18:09:00.405587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/instagram/5.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/instagram/5.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 161203\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-275b3\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":161203,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=310, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=320], progressive, precision 8, 320x310, components 3","md5":"314e4c07792588fd336ad6690efc9e0e","sha1":"d1e691b7f7bbfd48daf5c0afc8207e4018d5f277","sha256":"f3f7f4e70162991d3455e49d8bc999b163116e8e9fd352a8e63a3e02fbadc5fc","sha512":"28bd49dcc9f85d372e34c2ebefa60aae982d0e0f4b02a72f49d24882fd2cafc718b0d91f98e0e313c9e9cec6342a6121a6b690d56ae58bfcda89ade9180ee8da","ssdeep":"3072:JcozOo3kcozOo3/vS/0qgdW1fVtprdyb1hjShU1qJh6ATlOFogkbY1SK9lY:qoZRoZP6cnw1NtZAb1Jq+qJUglOFoLh","tlshash":"27f3121f7b08fd8ad0c4157ce400c34b6b39ab861b8b496f7c5e5da86bf49a2c1d8167","first_seen":"2025-10-16T18:09:00.408977Z","last_seen":"2025-10-16T18:09:00.408977Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":971,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:05:01 GMT\r\nexpires: Fri, 16 Oct 2026 12:05:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 21794\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-04-03T21:36:37.606998Z","times_seen":5097,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":92,"dns":1,"connect":7,"send":0,"wait":10,"receive":11,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/gravity-falls/HappyColor_44239.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/gravity-falls/HappyColor_44239.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 195210\r\nlast-modified: Fri, 15 Dec 2023 18:20:16 GMT\r\netag: \"657c98e0-2fa8a\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":195210,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3","md5":"d4094f1bd81b3a51acf710b07ab37549","sha1":"00166604d80db80638f9d7a34bfbe60cbfb2ee90","sha256":"2266e23dcf37bb9ffab33229a4f547955d05ae9c90ae38bb5ea9a9e65dabbeb0","sha512":"4a728d8aab93e286854c690d3d084cebca0bf533dceee70c88973f9d263117c8f45a3d507e734a2b63393c49ab67eddb06c302effe406610ee50eee84006b0f4","ssdeep":"3072:cLRMwolLDP8xvvuiihndUkft0hnO0AEnG1k9JY9HssLItBLupnZhR/yp1:c9ud8xvvuiihnd7mhO0AoGwY9gtBLAnO","tlshash":"7b1412e25796e8e2e70603f59ce58962fce8453741366ee441a34a02d34ef7fc47281a","first_seen":"2025-10-16T18:09:00.415479Z","last_seen":"2025-10-16T18:09:00.415479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":878,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/networks/facebook.png","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/networks/facebook.png HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 27516\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-6b7c\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":27516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 195 x 192, 8-bit/color RGBA, non-interlaced","md5":"0372db878206b6d50664e55485b148ec","sha1":"954e4db5a5e581a79ae593423ee7e275243f6696","sha256":"48bd4a8c9b14aeaddf198e2b8b14f63abfde39716b1860f8eb2078e74586a567","sha512":"e72dae98da682f59a87dcd9591f4c000a6d33ed6801030fe5a1f140516e94028fb2d5bce6f0bf48a19ffdb9e4b48e1e1aa9723ade2be86bc9db9854b094572ef","ssdeep":"384:UeJnIxovpxvC6eHsf32P+IonpFCLReCBbm0c253RstEJoGAgGbQ9X/AUvM5xdtDG:lJievCX+3p/ybmuumJo3u6FqW9nE","tlshash":"2ac2e1e9f1d437910423d4103d7b67bf60b343824d62f1ea37a85b0789556fade884b6","first_seen":"2025-10-16T18:09:00.418703Z","last_seen":"2025-10-16T18:09:00.418703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":406,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-light-300-5.11.1.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-light-300-5.11.1.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10860\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 4cac1a6\r\nx-jsd-version-type: branch\r\netag: W/\"2a6c-T54YsQCwSbdO+48AhOgXVquq36o\"\r\naccept-ranges: bytes\r\nage: 21955\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\nx-served-by: cache-fra-eddf8230071-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10860,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10860, version 331.-31196","md5":"eb7a13166c2efdd5b305c75d341ce222","sha1":"4f9e18b100b049b74efb8f0084e81756abaadfaa","sha256":"b2698da8df8781bf12a07d76bab5c6353fbb730a8138fcaa1371c4950ad7c461","sha512":"435b4603b92fe12f4540797f1f22e6a6627ae3cceb12eb7ba9d177e20ee4b7dad2505610f844728ce7a7e2ed85426f6a16f90492fa3be011498017c79abe53c9","ssdeep":"192:xyrSr8F69G0f8ETMP35Br30N6fdW8M68xusmMx2K1yLvyVC7PAeu/gzPXY1ZhGMS:wrWmsbtQP35FkWE8MSPMxKqVC74/4zGC","tlshash":"5a22bf17aa47cdbac90de532b12a28d687974ea2e8b2684949c606cd58647533cc23d6","first_seen":"2023-05-12T09:41:21Z","last_seen":"2026-04-02T12:18:50.646656Z","times_seen":171,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/baner-right-image-02.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/baner-right-image-02.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 93905\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-16ed1\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93905,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 453x388, components 3","md5":"754ce4e7875364ac2eabfc3dff8ba154","sha1":"cd85407b8d86fc3c626d54f499077e6fb5027e5e","sha256":"0f6a7e33a7c5c3af16b830d61e34b5690aeabffa0f20a25c8d705883c09472fd","sha512":"0bc29e701286f766d258e8b7663e5e6871e207b373ca1e7f3a9385aa0d99fd21acd6afe8a13f9f5304e52bedaa218627af1a889cda9bf5ac9d282b3873cce2f1","ssdeep":"1536:ls0TI28R19wi0b4afGC1Opcnpn6UHCq4JGrZxG3PAMQmzOkGmd7q3jxDvQN/ydc:C0ZSx0b4wUpA6yCNIrjSPAGS4dExDvQP","tlshash":"19931287e717706360f6d3302fe09a740a676bb8d4b65d38a77f6075369a8b095cec20","first_seen":"2025-10-16T18:09:00.424129Z","last_seen":"2025-10-16T18:09:00.424129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/la-petite-sirene/HappyColor_268424.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/la-petite-sirene/HappyColor_268424.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 206153\r\nlast-modified: Wed, 08 Oct 2025 01:42:29 GMT\r\netag: \"68e5c185-32549\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206153,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3","md5":"4741ce56528e6e1ae5bcb57ba80aaa5d","sha1":"87946a00715b51ab4e27aefb1999fccbdce543a4","sha256":"9cb06b5a02ca8fc5a6be53cdc4c8aaf5821f654e2e98253112e7367e61a8b043","sha512":"7747977b6ab8b6e8d79e6e9dd2434354fae2845941227339eac73e8c544bc8654ab604fc365c3ff93829413d451c0619437f0ebb57dc127f94f027c7aa49c637","ssdeep":"6144:bTe5P5gRAOoM4tpB4kxklqcPu4T3yda9J7Cd:4OoztEdq6hIM7m","tlshash":"6e14227ac36d8d31f002673aa251296ec83594cfa4c650d4b2384ab6b720dd67fa7c73","first_seen":"2025-10-16T18:09:00.432367Z","last_seen":"2025-10-16T18:09:00.432367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":958,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/instagram/2.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/instagram/2.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 149735\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-248e7\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":149735,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=310, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=320], progressive, precision 8, 320x310, components 3","md5":"5a163ac24570e8db8d71ff8cf2e226cc","sha1":"f96b684bb19a3ee0e4c1709c56a4b2124f4f2475","sha256":"649af4d782f8a346945f299164285fcac34e5db4074c50dc8397f36a26446474","sha512":"ad60b019fd68715196cd6f89c2483288010bb13f3c920116566722f5e800725bdcbe2502e77e3ce6d500a1a2b48e724a41f5637a4a519cde8bbc4a47985fb404","ssdeep":"3072:EQAbJ3QAbJLg2ZsVlaSdnCSJU5fi37yFtXVPKitNFV8LY:EN3NN+dn9XutX9TV","tlshash":"74e302963222af30ece936748485ddc8172067e58c7bb780785d9d96ff357e8d9290c1","first_seen":"2025-10-16T18:09:00.435525Z","last_seen":"2025-10-16T18:09:00.435525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":962,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/js/fresco.min.js","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /js/fresco.min.js HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: W/\"63836ff4-121ce\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74190,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65351)","md5":"e5fccf0333d2f885a62803ecf13e2c35","sha1":"154b6372b70a6a4caa26c15c70679b1152702655","sha256":"af4885ef61608f59c2715974e61acdbbc4a4cd1d5af401751617a1763ef1b4b9","sha512":"10d15ca448d6548f666877587d21097612438b5936db4584e64d4960a638bf8dcddcc20759eda49dac9e1f9c75e2f96ce1a61db3b927fe42c5960df4f2be5751","ssdeep":"1536:50QhO8MN+N6Do9j5Csf24uDoTlWkpwzPryAvoN:BhTDbzuDoB","tlshash":"f173b689b164391580ffb162a03f170f723296256a04428cb134d9cdacadd8a7677fbe","first_seen":"2023-03-07T01:42:31Z","last_seen":"2026-04-01T06:28:37.219133Z","times_seen":35,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 11:52:11 GMT\r\nexpires: Fri, 16 Oct 2026 11:52:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 22564\r\nlast-modified: Thu, 04 Sep 2025 17:12:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28528,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28528, version 1.0","md5":"4316a5aa6c074dfbfdcfb60023405316","sha1":"0ff5ba86b13131add1157861d2fbc830432f94a4","sha256":"21efe1559a026f9ad7f880772917faa3a621186688e8e79e0568e4308c0bafa9","sha512":"3b136256cb1ab4ecd3b36d52ca9508cc45019a37ae2497388a3f1f7af7b29feb5df1adef533cb5a47b172c6e95c54e84254163d604b5ace76986f1d0da5152ec","ssdeep":"384:CVyhp48UoZw2f7NoTIwNviYobclKfQ9rSuNsztMKBSn8/Ex20kAOc0fqvV3dLnXs:BAU5NMcbl4JShaaOIEGAQ+TXKve+Tgi","tlshash":"a4d2e13745891dbad2720db2abc0adc0b600883bf7197d7ed2cf80836d2eca45d5264b","first_seen":"2025-06-03T08:29:57.615496Z","last_seen":"2026-04-03T21:38:08.096512Z","times_seen":6640,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":181,"dns":1,"connect":8,"send":0,"wait":10,"receive":2,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 11:52:11 GMT\r\nexpires: Fri, 16 Oct 2026 11:52:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 22564\r\nlast-modified: Thu, 04 Sep 2025 17:12:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28528,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28528, version 1.0","md5":"4316a5aa6c074dfbfdcfb60023405316","sha1":"0ff5ba86b13131add1157861d2fbc830432f94a4","sha256":"21efe1559a026f9ad7f880772917faa3a621186688e8e79e0568e4308c0bafa9","sha512":"3b136256cb1ab4ecd3b36d52ca9508cc45019a37ae2497388a3f1f7af7b29feb5df1adef533cb5a47b172c6e95c54e84254163d604b5ace76986f1d0da5152ec","ssdeep":"384:CVyhp48UoZw2f7NoTIwNviYobclKfQ9rSuNsztMKBSn8/Ex20kAOc0fqvV3dLnXs:BAU5NMcbl4JShaaOIEGAQ+TXKve+Tgi","tlshash":"a4d2e13745891dbad2720db2abc0adc0b600883bf7197d7ed2cf80836d2eca45d5264b","first_seen":"2025-06-03T08:29:57.615496Z","last_seen":"2026-04-03T21:38:08.096512Z","times_seen":6640,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":50,"dns":5,"connect":20,"send":0,"wait":27,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/instagram/1.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/instagram/1.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 141741\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-229ad\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141741,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=310, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=320], progressive, precision 8, 320x310, components 3","md5":"289ecef37c24472f8e6508f68dc8edbe","sha1":"d0e14dca55348476fa259d0ef916d4a597e6f19b","sha256":"5c0d054ab76ed33579a140ca2951b4a2a6284f8908e5ce1f4b6f0bf7f93024a1","sha512":"a2a85721712a30910c7cab0fe2c9ba1e734fba92781f19fb6bee222d66482f5672c3427ee8c0be432b73d96199b065721edb46ce66aa5497cf0db142c4245a72","ssdeep":"3072:a3Dau+GCluLe2FWkUL0+sBk2M4BlZq14dj6fQ/WU:PzluLe2rT+sqqvHj6f1U","tlshash":"90d31283b7bcbd0ae6f11631c2a1c5b65b01abd80a77839b755dd6813f9a0f05e05247","first_seen":"2025-10-16T18:09:00.446038Z","last_seen":"2025-10-16T18:09:00.446038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":956,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/instagram/3.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/instagram/3.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 146911\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-23ddf\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146911,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=310, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=320], progressive, precision 8, 320x310, components 3","md5":"e7235140f80284b9c1fdc8bb6629ac90","sha1":"79087c36e3b1bbc036b4ccee2f0af14a4bec9e41","sha256":"8b83660478c23ccb870e4261268d121ee9b4aed70c13e50b80301dbbc93acd7b","sha512":"6ffae36299c77c954dedce146bf04f9bcd640ed559b4671c10197586e40b74c85037c265a9419503627ad6d8fa0395a5949c26da5138f9b3fb000d4e107592d6","ssdeep":"3072:3wJiwJ3DXJzvgmwDzXYHh6oeBfdmF6bNaeA6:c73B/CceBfsF6bsD6","tlshash":"13e302a0a7e14d65d7761873d09bc3432d1f92e4a86337c2384d6f90bbb52acb5b4b18","first_seen":"2025-10-16T18:09:00.460965Z","last_seen":"2025-10-16T18:09:00.460965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":958,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/js/vendor.js?id=d504232ba9d8248558823df39c9e61c8","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /js/vendor.js?id=d504232ba9d8248558823df39c9e61c8 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Feb 2025 02:39:47 GMT\r\netag: W/\"67a420f3-5e6c0\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":386752,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"d504232ba9d8248558823df39c9e61c8","sha1":"09da31ceb67d03c20d02103c2c5b54f4110e71dd","sha256":"800722addc3f8c5104b16e1c94073545e51017b2b69f107cdb51af49b5012a04","sha512":"4769cf711369cf040dc6a7e8e825133d2ac0cb3c8fb9f39954cdcceabd811b764f13cb8b513a3b9ea4d95a05f2f0457a191d2f57f695f2fb37d0f2ee576e9554","ssdeep":"6144:c30aBlNmAFdTulBTDk5KPoZuo/DHc1fKcxhCI0nsoxg7inf:c3N7NHTubDcnZuWY1fKc8TnaGnf","tlshash":"1784f8c97282b02253ab60b6407f410bf33a5955b84e8418f128e8dd7d7ad4ea277f7d","first_seen":"2025-10-16T18:09:00.46415Z","last_seen":"2025-10-16T18:09:00.46415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\nage: 497499\r\nx-served-by: cache-fra-etou8220026-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 533\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-04-03T21:34:46.768584Z","times_seen":52097,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":25,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/left-banner-image.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/left-banner-image.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 180784\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-2c230\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":180784,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 922x793, components 3","md5":"49f72073432dc3f6889f8a4a30c20a46","sha1":"7c0557464f058f5e1c02118096d05e967f145e48","sha256":"5c90096206c978da186173d8ffbe9d7f6aa0acef25e54c84f0fb8b1b97e33236","sha512":"0016f898acb2d940758348d4c29475ba91efcc77ff26332b126ee00d0421a20e7b47dfe56a71a884142ad03684b2616a08f7cae21437dbeaa4c7ae9c93b33da3","ssdeep":"3072:IgRp5zu8+Fhnwy69UTByggDGkAS/mywiYiohUqQTRjnS1Zg2pmkbSQZ3x+AWQzG5:X7q690BZS/mSYivjjn8HzJWAG+K3","tlshash":"03041219848d9daa7f67be32e2d4e1ce03ba7c5e1e8dcf842145bd29a1edf1240474c8","first_seen":"2025-10-16T18:09:00.473015Z","last_seen":"2025-10-16T18:09:00.473015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/robin-des-bois/HappyColor_41159.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/robin-des-bois/HappyColor_41159.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 457710\r\nlast-modified: Wed, 08 Oct 2025 01:44:09 GMT\r\netag: \"68e5c1e9-6fbee\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":457710,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3","md5":"b7015efa7dc3cf176a680db144863150","sha1":"08919f38cb1d930052875e30c92a503914e424c0","sha256":"b1b5d56b807defaa7df3f2be47124a5022b609cecc1b1e142645040d59569896","sha512":"043968d1323881b0bc3a562ce771dc66714c76eea885ad46f4d692db5394003a1d824f62401b1f14dab936cb3d2a33c8bfed7ae09721668355e8725bbaf1d2c7","ssdeep":"12288:78f7NKvEsaFM1PFuSg3Ul7wGYnDVvTwM9fd2Tdqn/b2:ozNrsaFM1PwSN7HkDVvTp9fdSq/q","tlshash":"85a423e05071d845ee8f3eb0ab178454ff5659bf3ee2f5490263e87bd500328a29ea5c","first_seen":"2025-10-16T18:09:00.476248Z","last_seen":"2025-10-16T18:09:00.476248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":1438,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/moana/HappyColor_28331.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/moana/HappyColor_28331.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 353544\r\nlast-modified: Mon, 20 Sep 2021 01:48:55 GMT\r\netag: \"6147e887-56508\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":353544,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", progressive, precision 8, 1536x1536, components 3","md5":"b7cc2a71e06ae2c000617db49b9adfd4","sha1":"1d11da321a82bf19fff099830adc97ab0ac9e32a","sha256":"d342ceaab73871bd05fc7d97ead2256fe4398a0c464f55a952d324cf2b3efa1f","sha512":"b6db1c44665736e874dcb57355df0c9d45c5952f06ac8ac3586246e28883af85efc439ce3271c9af80c73a3edf19ec31e76a23ea1b26addcaed07b9679910e6f","ssdeep":"6144:oDSRMvvSHlj0nFZJAZmhOh+rZPluM5F8Hahjk6UEDw4I21eRrGQW:omRMvAj0FZJAZmtNp86O6SR2MHW","tlshash":"4d742345fd46a127e355b7224378127211ea33f2b44208628d87ebf98a747fd74f61e2","first_seen":"2025-10-16T18:09:00.481132Z","last_seen":"2025-10-16T18:09:00.481132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1416,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/puzzle.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/puzzle.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48243\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-bc73\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48243,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 684x380, components 3","md5":"b99cb2dbf64e088998480d3758bc08fd","sha1":"1c8574a33edd92ce2a945871871168b82cd7ad26","sha256":"0e9a5ddd8832903acc0a31ea6d7eedbc84cd4ea516808b907c6ddc546472baeb","sha512":"6af8b59dd34bab404a0e84775b8beb697200d98f94a749014989b52c9f2035e7c6087c0665b0070b593a507e59340965e29f1b91eac1534bcda87d72bfa6e2ea","ssdeep":"768:y2h/JUhlm0Z887al8WKdQLBAcyyhB5DgSRc2TVWNBGTHKfUIxLFXlNFImsoqKj5r:y2h/JUhlmS8qVSiA5bRcQVn4JxL5rsoj","tlshash":"1a23e112394c6d06c00b1c3cb9d92dc22b16166e2aa1b55ab97e3e6aff603c27fc505d","first_seen":"2025-10-16T18:09:00.485563Z","last_seen":"2025-10-16T18:09:00.485563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Mulish:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Mulish:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 18:08:14 GMT\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7284,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cf09cba50c04cd1461f6593010553989","sha1":"acda8285b4564f1625a1fffde4e2f0553ddfa79e","sha256":"22d41d08be12282f1c6f1327a533590c4bc0982c27d4c4241203839dca90e649","sha512":"c964a9bfa888c82a76d5c53d75315cdb644636304155fcd84bf4e8fbc49ebe70504697d1daaebf08f553f6e21e8d297291336890f0079e18cf574ade40c5995f","ssdeep":"192:Xp4rHp4u7sp4Up4IVp4QAp4rgp4u7zp47p4I2p4Q5p4rZp4u72p4ep4Izp4QKp48:Kr6u7/H7QzrTu7WeiQArgu7V9hQ5rZuX","tlshash":"8ce18992005bb400ab471cc17bcf7e26ae8fe1557052857a6ffd49d99caac221368b0d","first_seen":"2025-09-19T21:16:31.775561Z","last_seen":"2026-04-03T12:45:59.764902Z","times_seen":71,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":311,"dns":0,"connect":20,"send":0,"wait":20,"receive":0,"ssl":324},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/css/slicknav.css","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /css/slicknav.css HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: W/\"63836ff4-1664\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":5732,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"74459401298110ced0a09c6543bae024","sha1":"a0a0a5b67291cb64b22441bf004d20223eab7dbe","sha256":"6c77ad2463a65b07ab16f6b13458b5d6480181fd01b307a1e9602dac63b25329","sha512":"dddc5f217cdc199c28b0d0aedc44d84b8638b5e776ffee6a0e80183d8c7eb4b5b04a7a343d9fa41d0c94407781272667605ef123bf805d54b91233d18d945c32","ssdeep":"96:yB5XQpQTsS99IqIOl8IaIFss/hHkNozj8b/jX1T/+BjfBEI2fS2iHrRdo:IAiTh99IqIOl8IaIFswH0oz4b/pTmfBY","tlshash":"e8c1cf8797ee0100652eb1586fd98347a7eb3103481dcd9cba986164cfad5cc7ce2d79","first_seen":"2023-04-13T05:16:49Z","last_seen":"2026-04-02T01:16:20.756546Z","times_seen":213,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/disney.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/disney.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33905\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-8471\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":33905,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 263x263, components 3","md5":"e0cccb434a5440cf728ec26b1a3edfa4","sha1":"1e9accddb9f930da32e75f04f0125f9ea06b3c46","sha256":"e17ff4ceb310323fe6abc0f7dae38fed1c29ab49be2d56b99dbc8394926bf99e","sha512":"581de9ca389c2e7643b9334fd666dafd8b4866fa3c18c6b28545f3b30c605071216570978580f228b3ad433daff37b0554c75b81cafe5627d42d2f059edeb0dd","ssdeep":"768:Xsxwe6iWULn0yNg5nm2IsKIzsAGne6NinDBF0:RRiWULn1u5nmfsKsMetD0","tlshash":"eee2e1ebb6201c72b88c8b2591f3c61bab42ec95d26379897e54287c3d36e0b74dd315","first_seen":"2025-10-16T18:09:00.492697Z","last_seen":"2025-10-16T18:09:00.492697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/le-roi-lion/HappyColor_59795.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/le-roi-lion/HappyColor_59795.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 210262\r\nlast-modified: Wed, 08 Oct 2025 01:42:45 GMT\r\netag: \"68e5c195-33556\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":210262,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3","md5":"687800bbe0109730eb55f616be815a96","sha1":"2bd71e775f4a43b32995a2bb862c611bd22ba500","sha256":"7c2ed5fed70980c1a552134a8f954a9569afbc987e14611579752b003f050f54","sha512":"b89c57e410ce9f7e15e552e2be485cac6d49a112cf1eaaf8c80746b665fc39aed160d4338f89c3e516be13f5e83afcd6b45810adb53de751945e2ff6c7730d59","ssdeep":"6144:rbRBNewKmCfqeuZ1jE+coxWUGwyWFWs/MhxVagvY:ZfMmSRKNNd8U7PFWPxVC","tlshash":"d42412018653d848f18f8f73e5ef85386e248c4e15dc94aabba7639976a435b7c0b381","first_seen":"2025-10-16T18:09:00.495687Z","last_seen":"2025-10-16T18:09:00.495687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":1019,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/le-livre-de-la-jungle/HappyColor_59956.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/le-livre-de-la-jungle/HappyColor_59956.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 230041\r\nlast-modified: Wed, 08 Oct 2025 01:41:55 GMT\r\netag: \"68e5c163-38299\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":230041,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3","md5":"d8045349c5dc733fe647b1c9ba49b2d8","sha1":"d781c8ea14213641995d913da79a0cd82f6901dc","sha256":"6ba3983e026a0d4e85c2319ccb4f9f6b45f957649424d0ab6b23b0fa4616ffed","sha512":"2cd68eb945765c5105c0da72273517ffec4555f7b351103d16d5f440b441503c40e1effa32bc9d1e981ee4df082afacccb9bd44ec9fdb084a107d756c71fc1da","ssdeep":"6144:BGxwFqwwkYIi2HS4b4+v7cECwXjW0pSa1bZv:BGSqas2HS4b4+YECwXS4pb","tlshash":"b924125baf46fc2ee9c7fbf42da7c45902aa5a7742605660b23d653075e0b0ec4bc270","first_seen":"2025-10-16T18:09:00.498846Z","last_seen":"2025-10-16T18:09:00.498846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":1199,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/preview.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/preview.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 170292\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-29934\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170292,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3","md5":"330eb7523549d4dbe72906bfe1c13d5d","sha1":"4019818366547f606bf0237807957c7a999f6582","sha256":"3bdb20559777a58e3418f1feb9180967bc611fd26cc979dcf5d296520415bfb0","sha512":"cfd294abdad3cfd437c332bc6afd2d981789b5610cfa50a465e4c6793c57f3c774a9986a1e4ced7fb24e2075171893373166d31634c2b874780287199554d3c8","ssdeep":"3072:1s3TGZ1hhhJPEchYBMmoiId27fG+D5mEZ/0o0flKVob2sUoh2OImLNGLshzT:1r1hhhJxsMmNF7fG+D5mus5flK+8OhpH","tlshash":"04f3122e21e5cb71edebb73a208d5b281ea108faf3519381950285d1bde302ce765fc5","first_seen":"2025-10-16T18:09:00.502067Z","last_seen":"2025-10-16T18:09:00.502067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":845,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/les-dalmatiens/HappyColor_23512.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/les-dalmatiens/HappyColor_23512.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 394404\r\nlast-modified: Tue, 15 Jun 2021 02:49:44 GMT\r\netag: \"60c81548-604a4\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":394404,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", progressive, precision 8, 1536x1536, components 3","md5":"7535d831f73a4c5bfacc48391897b2a3","sha1":"d0a3513a21759f489729c1e5ebf4804f16779356","sha256":"f6c528269a9e20e726736bea24e2cb85aee662b40750ac58e4f4162f03e610a0","sha512":"ce1eeefd465a54affd8035b851fc62aaba0d8fe78bf18b692e1973926fedc3b7b4bfaabf6b8cef82a8c5e7c38023d0e2a24df89f638f4a2fa370b6cbe7082f45","ssdeep":"12288:zfx0rkYC4wD9BIOEuNUV6jEkk5X2khbRwkgOLAV8LV2EZfn2:zZskBpaXvMEkkhWkvV2d","tlshash":"b58423871274b8b643db342776ac2ad0913c5c5f69778c6db038a5f0a3440eba3955fe","first_seen":"2025-10-16T18:09:00.504957Z","last_seen":"2025-10-16T18:09:00.504957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1459,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:05:01 GMT\r\nexpires: Fri, 16 Oct 2026 12:05:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 21794\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-04-03T21:36:37.606998Z","times_seen":5097,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":164,"dns":1,"connect":8,"send":0,"wait":10,"receive":2,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/langues/fr.png","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/langues/fr.png HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 115\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"73-5ee7453102021\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 2-bit colormap, non-interlaced","md5":"4c6431d4d121c5a68a9d258e94ca8900","sha1":"9b42bebf1bf4572726f5d3095299244adbe39928","sha256":"11bc47bd501484046f79509406f2691e93e1a366f15039a38d4f1514f4cabed3","sha512":"1250d6990dc502ea9a9e2e843ed6cbb6c61ec8bd3c65f6e44ee684f7fe031909b65a14b0e94b2beee24ae401f86783052a82a59a140dc9ef10cfa3c14438f7c9","ssdeep":"","tlshash":"7db092dbb2000cf196884133d60d811aee2282082975660b0a19d8662a8a34881cca0a","first_seen":"2025-06-28T10:06:32.469576Z","last_seen":"2025-11-20T16:10:03.046981Z","times_seen":4,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/moana/HappyColor_58733.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/moana/HappyColor_58733.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 343843\r\nlast-modified: Wed, 08 Oct 2025 01:42:10 GMT\r\netag: \"68e5c172-53f23\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":343843,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3","md5":"defcbde91b5e1b31e8945ba4d60a7297","sha1":"e52ef4d160ecfb0b46c9241025156f3e35dc259e","sha256":"710c11fec2e1b6784d0fcbc6d377ec38de8892d5276753c8044e2b280a8ee9c9","sha512":"a313d239cec00326728327e0f0e58287c72316ce1190c92a87b415900e2be4f1cf0bf3b731867d91b7d532497fc996ea1812e5569b5bb7c0dad7b55455d66071","ssdeep":"6144:zFhyfxPN3zCoWvWqZWhcF5dvCYAq7jGkKp1BFtzAqZQapqzr+bH8K6:zFMb3zBWv5ZZ5Yq+kCYW8K6","tlshash":"9574230e0862c7d7e62cb0792b2b071d1792cc6ee99d2498438e33fa75b6b53ce46535","first_seen":"2025-10-16T18:09:00.512348Z","last_seen":"2025-10-16T18:09:00.512348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1676,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":1408,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/programme.png","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/programme.png HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 785\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"311-5ee74530f35c0\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"bb4d4e7ab463647d7ce0d06ea24f559a","sha1":"41ba7464c711d1d990904f55f737847828839d2b","sha256":"d2cc21b85c84d6804852d3998ad92cccc34755ba3c00c08f38080ccbbc74f038","sha512":"2f1b6210d0d97bc98b8dcdfb2421bd985468bf9576d448e32f6de49f0b0143d9882046e99d8ec4313cc19d86176a2701334c8cd521998e8ace4ed57468926bf7","ssdeep":"","tlshash":"550125d2cb60e447d8ae0171d9c98d76fae700cf2e56a7d358d60d3202753d519e0061","first_seen":"2025-10-16T18:09:00.51538Z","last_seen":"2025-10-16T18:09:00.51538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/minislider/image2.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/minislider/image2.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 179160\r\nlast-modified: Fri, 03 Feb 2023 19:19:35 GMT\r\netag: \"63dd5e47-2bbd8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179160,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3","md5":"fc2dcbc2f76c85da9d53a74a4b52e39a","sha1":"78c08d59e7da4051913be9d0d69c3713981ebd91","sha256":"b6b3d4dc853619e999ab87eb2f66491c04f587811e118d8b0a2e226778708f3f","sha512":"2e36622bf63e4f77363da0ddacc5a50afb8b58d8dcb7811f261aa7d24b0b4d67986246d9885d42c546544eacfda8eb2898886635b197111d4f35691597c8a2d4","ssdeep":"3072:l77yoIuBLdfjWMPn4hR7lg7er9/CMOfYY8Mb7urH0w+:8vuHiOC7lgIuYgZw+","tlshash":"0904125d2f18e9f9d34a733627948ea92a73cab30561f49ca041475cffeae92d406078","first_seen":"2025-10-16T18:09:00.520224Z","last_seen":"2025-10-16T18:09:00.520224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":936,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/minislider/image5.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/minislider/image5.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 182141\r\nlast-modified: Fri, 03 Feb 2023 19:19:35 GMT\r\netag: \"63dd5e47-2c77d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":182141,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3","md5":"555ceed8739bdd526e77e521039db941","sha1":"5cd0a80618af5598530bf3828f26a41abeb7eda2","sha256":"8f0b15a3dac3c0ab666f569a6f95507bff0547948aefa780b4fd5948f48a175d","sha512":"ed1b6df356e67aa3825431fb070f0900096357b1a1cd146778964d505148545d01dc8508b35b552f94bcfada054ab270bf734570229a0158769066387b283aa5","ssdeep":"3072:3WWl/waCVVVrFt68a60dxFFAeI9UNQOobosMi7/pDFR7///D9C/aNkLHJt:Xl/7CVVVxS60d7FAeI999osMi7/5FZDC","tlshash":"d10412dee708604ef9b8faf2688303adab46c4939913edb57b4357240725d94e8f1076","first_seen":"2025-10-16T18:09:00.527131Z","last_seen":"2025-10-16T18:09:00.527131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":968,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/instagram/4.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/instagram/4.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55983\r\nlast-modified: Thu, 06 Feb 2025 02:39:47 GMT\r\netag: \"67a420f3-daaf\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55983,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x310, components 3","md5":"1e6f89bc6c0245f8f0cb011e527ce3b4","sha1":"741e51f0bf30ad4c83971c8a97291537eff03d2d","sha256":"511559578892e48fcbb646b8a1c9b93ab17a0909e825ef55e4e9dc3dd003f034","sha512":"3e8d4f90f88dee1bbf213d3f42b9e5181bbb8e3943ec394dc97cee3ff363e69119ac8e06ed311fca51c9fe0ed89be3d59bfaff27d095f25c5d0814b6f8dbec5b","ssdeep":"1536:fJemrS8At9+ngZl2BclqJsVJQaZZPOQ45:UmDq9+ngZl2Bcl1xZZU","tlshash":"cc430156e16f2982918260fc2d52d0605fdbf8265a733c1fb62aaaa1b3cc45b1f1717c","first_seen":"2025-10-16T18:09:00.531091Z","last_seen":"2025-10-16T18:09:00.531091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":427,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\nage: 3216101\r\nx-served-by: cache-fra-etou8220084-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 10910\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-04-03T21:27:58.033583Z","times_seen":77070,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-brands-400-5.0.0.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-brands-400-5.0.0.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 37796\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 4cac1a6\r\nx-jsd-version-type: branch\r\netag: W/\"93a4-SxH4MO4bhSuKpG6n5M/nCaMnv1g\"\r\naccept-ranges: bytes\r\nage: 15060\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\nx-served-by: cache-fra-etou8220131-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37796, version 331.-31196","md5":"6cdf281bc8af0068561fe6aa361a6a0b","sha1":"4b11f830ee1b852b8aa46ea7e4cfe709a327bf58","sha256":"49fd3e0c64f247cf56cb828bc37b88cf139df6e5c7bb4c3a4507f740e9a52c17","sha512":"28eaa2437dbbbdbc12f6d7390e4d40ecd81bccdccbee81e00bc722239b5c10610a4607b5a77c5902a51142d03f9097f03b843e619a2742c534329bcf95d0263f","ssdeep":"768:S+3FHcR5Bq0daPoAeKI8H6TATQ/iZR6wZPHPYiB04y9Ig:SgY5Br8PoAQsIJuRhol9Ig","tlshash":"9103f2f8312e5a925a83bfbe3abe80160858adb9e4d93cd53574d79d1313dd542e2c80","first_seen":"2023-05-01T16:40:20Z","last_seen":"2026-04-03T18:23:45.526504Z","times_seen":2208,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T18:08:13.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5812\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; expires=Thu, 16-Oct-2025 20:08:13 GMT; Max-Age=7200; path=/; samesite=lax\ncroquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D; expires=Thu, 16-Oct-2025 20:08:13 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PHP/8.3.26, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.26","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:1.0.10","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36770,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c2978968077238b63124d55c604a7670","sha1":"8c0a84c4d4f96e61ed123d5b2a9cc539eae65666","sha256":"9f042bf73548d303617dd88b7235298fd1b53ece0d53f096fae316e5565d2579","sha512":"e58bb3474b114761d088a4334da846e594c48d1a8b01e3ca502ec6dd4d43a838c4a1d932c2f2748eb7bc9f1d45c15ff703636b0dd93dd42324a1aea7bda3fd14","ssdeep":"384:UwFORvUdOta79MhbBMkMpMJMEMOjgKkWr+gBX8TmnNMW44+p5h1j:UwFORMufCgBsTWXePz","tlshash":"b6f2993250f440a30583c0947aa13a4bafc2f647da1b868672ed4bc65f8bdd7ce5760b","first_seen":"2025-10-16T18:09:00.538466Z","last_seen":"2025-10-16T18:09:00.538466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":114,"dns":39,"connect":31,"send":0,"wait":67,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/css/animate.min.css","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /css/animate.min.css HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: W/\"63836ff4-10c5d\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68701,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"845cdc0806ac3d4153f409d29a02e8a5","sha1":"cc020237acaa1153ea3ab2b5fd760b86d27e9b70","sha256":"c5ff768c1724b8ee7b8c9fba6407f7afe83ddf4f138e8214a73765028d03469a","sha512":"0f982bc06e150e7c7e8ebda59c1d0d26f3ad3a926596abd15408a14e984c25d1da97072656e6c6ebaabd9d70672719c8e9c07d15570be59df035dc0f5f76dfc4","ssdeep":"192:LIQHnkwf2TBawfDZ0iduG+MONjX7As5BHMxymDSVbyPiV2R3uk9AD7XU+qLmfRvJ:LIWbfHf7SpS/fjf7","tlshash":"e963196929e1114466330a15c7df9f78263ce1a31826ecfab3d2588bcf51fac63c9617","first_seen":"2023-06-28T08:02:02Z","last_seen":"2026-01-20T14:24:08.477756Z","times_seen":39,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 11:52:11 GMT\r\nexpires: Fri, 16 Oct 2026 11:52:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 22564\r\nlast-modified: Thu, 04 Sep 2025 17:12:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28528,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28528, version 1.0","md5":"4316a5aa6c074dfbfdcfb60023405316","sha1":"0ff5ba86b13131add1157861d2fbc830432f94a4","sha256":"21efe1559a026f9ad7f880772917faa3a621186688e8e79e0568e4308c0bafa9","sha512":"3b136256cb1ab4ecd3b36d52ca9508cc45019a37ae2497388a3f1f7af7b29feb5df1adef533cb5a47b172c6e95c54e84254163d604b5ace76986f1d0da5152ec","ssdeep":"384:CVyhp48UoZw2f7NoTIwNviYobclKfQ9rSuNsztMKBSn8/Ex20kAOc0fqvV3dLnXs:BAU5NMcbl4JShaaOIEGAQ+TXKve+Tgi","tlshash":"a4d2e13745891dbad2720db2abc0adc0b600883bf7197d7ed2cf80836d2eca45d5264b","first_seen":"2025-06-03T08:29:57.615496Z","last_seen":"2026-04-03T21:38:08.096512Z","times_seen":6640,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":202,"dns":1,"connect":22,"send":0,"wait":12,"receive":2,"ssl":182},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-solid-900-5.0.0.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-solid-900-5.0.0.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 19784\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 4cac1a6\r\nx-jsd-version-type: branch\r\netag: W/\"4d48-nilV5eVbMHPiKcIYckQGQlhi1KE\"\r\naccept-ranges: bytes\r\nage: 11193\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\nx-served-by: cache-fra-etou8220073-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19784,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19784, version 331.-31196","md5":"c7682b8035fc1d1672d6455631813794","sha1":"9e2955e5e55b3073e229c218724406425862d4a1","sha256":"1b50aa1d36ea249991fb44f8f6ad2aa74fe360df9cc04c564b5edf3b053b739c","sha512":"f1cde122b1f1ca23380e8bba10e27ee21e72bd7ba486228d12fa0056e2f172014952fc4c8b3c40fc119d5bc0ccbab5807995da4c62c0bbb0e0f7dcec72b0e24b","ssdeep":"384:xu3xWjTO/gQnvRRUvycKayTdVkFEANozWnDcFcsIOZD7FpT8W1YLx+9z:ixei/bnTcUDV65gxZh7FpTvax+9z","tlshash":"e592d05c91041a2892bbd6f84d4a6b18244f174624ae77fcb4ff2adc9065ffc16e3b84","first_seen":"2023-04-13T00:55:41Z","last_seen":"2026-04-03T19:18:42.312232Z","times_seen":2043,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:05:01 GMT\r\nexpires: Fri, 16 Oct 2026 12:05:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 21794\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-04-03T21:36:37.606998Z","times_seen":5097,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/preview.mp4","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:15.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/preview.mp4 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 936103\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-e48a7\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 0-936102/936103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":196608,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"37b7f020196fc07f37a5c5f140ad4cbd","sha1":"850c4d4694e9a7d822013704cc6928fd8c415e31","sha256":"d08e8b7833213e3ba1e39908482e84ab51425f6fd1f92356b975419157daa3eb","sha512":"31b7444a10b00c90bbfdb983acd6a5ca88b19551a92725f521e2bdd656138c4ca85499b92ab03816159066b3279a25265a09a016d31ad31347cef554070dd91b","ssdeep":"3072:RnoIKmqHFCaTfSfyI2RnfOddc76g1HLsrVKzMXg5OBy3NwNlwQ:S5pc92RnWddc2BKMQ5oyOg","tlshash":"6c1402a39be1f573dc6a91784992b3187646ffa6f423c64add00c12c12ad34fde125d2","first_seen":"2025-10-16T18:09:00.54597Z","last_seen":"2025-10-16T18:09:00.54597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/logo/logo.png","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/logo/logo.png HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 4266\r\nlast-modified: Sun, 30 Apr 2023 18:39:37 GMT\r\netag: \"644eb5e9-10aa\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 70, 8-bit/color RGBA, non-interlaced","md5":"9f83a66bd94a041035933217e00b3901","sha1":"8dad176d33c70aeee21f3df6b6eaa03e54faed68","sha256":"07f5319eedd7c4b16c97681ace6ddf61305c99ec425731d2cb68bde0aa4b9aae","sha512":"ca78e50e59585073d647aef39decdc2f3e2112deb3afb4a62f5e6262a50af12ad015c4aa12aebdf661bbdffd9f46c948868559e049e4996f96c3cbf399d28141","ssdeep":"96:felWARVX8qrjGeh1IP+RBpPeL49oGZbnuBvJqXl6IfUb7:UpV/Ge32aPe098JqI7","tlshash":"65917d96346a4a3dd077d138cbe0cfe68397e78a6d043a83273ea5014171f5a324a6f5","first_seen":"2025-10-16T18:09:00.549065Z","last_seen":"2025-10-16T18:09:00.549065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/merlin-enchanteur/HappyColor_43814.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/merlin-enchanteur/HappyColor_43814.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 192108\r\nlast-modified: Wed, 08 Oct 2025 01:45:00 GMT\r\netag: \"68e5c21c-2ee6c\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192108,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", progressive, precision 8, 2048x2048, components 3","md5":"4a197f1b4b2d0476f127515c31a10902","sha1":"dce182e516bcfcb6ffde5372ef6d3567950386fc","sha256":"72bbaa18841624a64d14938dfd9fa915d5e4b973cbe4da517cf69f26ff667864","sha512":"1149a13a1d1fdc76b60641e0d11e0faf3865e5d9cde001e048d610dbe499cc032b713f8ccbc95f661ae9c4f670a280ac99f636cf4eded475fd223f5138802b89","ssdeep":"3072:co5ucWL+RPHvxgEUAj56DM7ISLabBOXXr3VVwWrbDqH/SCXOmTPvmkv3xvtajZ4S:co9WKRnjl56DMsSLkibHwWrvP9mLmkvE","tlshash":"e8141370dfe936cde9c69938d91144757b9cdc2b460ee2710e60a69f448fc41f2e892e","first_seen":"2025-10-16T18:09:00.552175Z","last_seen":"2025-10-16T18:09:00.552175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":679,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/mulan/HappyColor_32563.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/mulan/HappyColor_32563.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 152466\r\nlast-modified: Sun, 22 May 2022 14:44:25 GMT\r\netag: \"628a4c49-25392\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":152466,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3","md5":"7f21616459b72be147f3892279e6ce13","sha1":"2a4fbbaf576f73e008b503219872afc98641c4ac","sha256":"dc486cc9ca5c1088471f23c0c36437d684c7a5af48100145e616dc7763e725a8","sha512":"49d5c290b1140fd80b6487765763e748b7b5313b06ba815107530fa5f9542c0b783f9fb205fb716a968a51ceddd9da66fae6b20d6f081188629daf5ee7fdf204","ssdeep":"3072:Q11Ia5YwvcDWdSjyyz7BoASlqow8Uo2QlmhUBNKJO25jK/3Hv9FLNxmI9J0k214p:Q11IaAWs7Cm8UbKm6uY39FLNxmI9Wl+p","tlshash":"05e312feb2270e13e28892764b5be8d5c89d560b521cfcf68a41ecc1d62ca183fe1345","first_seen":"2025-10-16T18:09:00.555294Z","last_seen":"2025-10-16T18:09:00.555294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":951,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/peter-pan/HappyColor_24353.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/peter-pan/HappyColor_24353.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 329672\r\nlast-modified: Sun, 02 May 2021 19:19:39 GMT\r\netag: \"608efb4b-507c8\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":329672,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3","md5":"f1f2dfe0cd90de6e975b3b2c71adc0f4","sha1":"a09ac1c20fc7e83bd8f272e9fcccc93b4164b251","sha256":"56b635e36a14d627633180a7f7f809d0a1bbe527ce2cbdcea766dd26ecd1fddd","sha512":"9486aaffd6febbd8cef94ea57f3c06d5f35a0b414374581b01d60312a27ad41279c0bd8bc4f13cb45f2963b41e14ec29ba197697bf98bd82c921fce584401dfe","ssdeep":"6144:IhBV8G8P5KYcMxNyqfGCD2sh/P9tC9yhC738VzO6VZhqSmiA:T//LzyqxD2sB90z7aOA7mz","tlshash":"4064238d55172921e1f76fce023eda5a53a5c1887d0dff887ba00a3591ab4c0e7b61f2","first_seen":"2025-10-16T18:09:00.558322Z","last_seen":"2025-10-16T18:09:00.558322Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":1421,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/winnie-l-ourson/HappyColor_32897.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/winnie-l-ourson/HappyColor_32897.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 225299\r\nlast-modified: Sun, 22 May 2022 14:45:00 GMT\r\netag: \"628a4c6c-37013\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225299,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3","md5":"648c8e1d75b937090c0ce8f18145e572","sha1":"f7a98d62a37bd6c3d2849636331f55bf0c9c287c","sha256":"038ca104f7d5e180a37667c85cdefadc4af5ca402783b46ca728806b725c90c3","sha512":"aa51f20533d050c10daf9987e7220101ea194d21126ec021405822fbe6ddb0af271b87a08628c8417a1d10a39f4efb33242e99640b73d469cd7ef3e67d3d39b4","ssdeep":"6144:JJLsC8s15YVadHTC6sLHrxZqF0LUl2gut0FWAcok7ppjic:zYJsTYVadzCfLOFOUUghF7cokPic","tlshash":"672423b3d96004f456bbf905b67c672d738fab05980ac40ebe0f3e592a21d135ca81e9","first_seen":"2025-10-16T18:09:00.563005Z","last_seen":"2025-10-16T18:09:00.563005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1537,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":1169,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-738X5SF9FX","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-738X5SF9FX HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\nexpires: Thu, 16 Oct 2025 18:08:14 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140177\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420397,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"5b58ee6db555445cda01340ed3f23889","sha1":"0ba994daec57d577ff2b2a3fc6d0a1d941d726e0","sha256":"531acb14c2e9f6753d7efc9c39b7b4e5ee258628b98439672dbee75d6e38b0c7","sha512":"128924b87b17d8a7999204c03fb04d267c54ec352e2135c1490de87830d82681eda22e5611df5b6f69497952291954a04d2b3b98e9ec1143d3b520e9ba66342a","ssdeep":"6144:JK5c6tQSyOh+3y4nkEt7F8wUjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:Jb6rRE3y4nkEt7F6EqPeKRy1bv","tlshash":"9094198e73c674269396f078503f018ba57b29a2f45cc895f189cce42e74a9a4277f7c","first_seen":"2025-10-16T18:09:00.566085Z","last_seen":"2025-10-16T18:09:00.566085Z","times_seen":1,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":148,"dns":1,"connect":9,"send":0,"wait":32,"receive":33,"ssl":255},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/preview.mp4","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/preview.mp4 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 936103\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-e48a7\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 0-936102/936103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":196608,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"37b7f020196fc07f37a5c5f140ad4cbd","sha1":"850c4d4694e9a7d822013704cc6928fd8c415e31","sha256":"d08e8b7833213e3ba1e39908482e84ab51425f6fd1f92356b975419157daa3eb","sha512":"31b7444a10b00c90bbfdb983acd6a5ca88b19551a92725f521e2bdd656138c4ca85499b92ab03816159066b3279a25265a09a016d31ad31347cef554070dd91b","ssdeep":"3072:RnoIKmqHFCaTfSfyI2RnfOddc76g1HLsrVKzMXg5OBy3NwNlwQ:S5pc92RnWddc2BKMQ5oyOg","tlshash":"6c1402a39be1f573dc6a91784992b3187646ffa6f423c64add00c12c12ad34fde125d2","first_seen":"2025-10-16T18:09:00.54597Z","last_seen":"2025-10-16T18:09:00.54597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-light-300-5.11.0.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-light-300-5.11.0.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 15748\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 4cac1a6\r\nx-jsd-version-type: branch\r\netag: W/\"3d84-DC4tLnMxG71MQp4z5OTEA2IHtLE\"\r\naccept-ranges: bytes\r\nage: 26745\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\nx-served-by: cache-fra-etou8220190-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15748, version 331.-31196","md5":"1894bebba876a67d0cb7cd7351ab6ae4","sha1":"0c2e2d2e73311bbd4c429e33e4e4c4036207b4b1","sha256":"ec540bd82697b5fb43f1584f25446b7d58a0cf0a51e1544b0b278a2aaa5f1e77","sha512":"d87a0b9c3c444a0f9818926a49376c604c6c9ba597fd4a076eda2be1e756614a2655d62d35b65ed3dc4a36aee4750e39ad3796fbd7027ed3cc313ee87c87ae14","ssdeep":"384:N0PA04t4JFRPn1RtvV32QXQoetHaDgT/NrwMN:N0MOJFRtRtN3TXQTtHKgrNrvN","tlshash":"ad62d0daba1511d3f3c63b7e9dfc5f49cecc040dca6a94894b6191022c21028f759af4","first_seen":"2023-05-02T19:32:12Z","last_seen":"2026-03-31T08:31:35.697073Z","times_seen":196,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/css/frontend.css?id=2d92491c8fd9445842395251c5a94624","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /css/frontend.css?id=2d92491c8fd9445842395251c5a94624 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 01 Sep 2025 12:44:50 GMT\r\netag: W/\"68b59542-4a13a\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":303418,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65223)","md5":"2d92491c8fd9445842395251c5a94624","sha1":"60ab720a19dec25cfed757deba44b4192e7f8c6e","sha256":"d5990b6fc45ec816fededc426154db22a514e39c8d0ea1e58154d5a922d8ec83","sha512":"13a0abf9d070cd19b58587770f9f8104d36ead1c51b66ed8dd3957350f1f9aba3719c3faebfd687bb0c1e98f69c4b4d27237c39526253680dbfa4cca60856fc7","ssdeep":"1536:eDnB99tfCDvJv23pTjUnoJVsYBwlYAlUpje60I4bDVKUi/PiNdWHAUFl2TuEDrQZ:eDnB99tfCnoJjzAlUpje60I4bDV4h","tlshash":"3154a4d6fa91303ca8a7c15ad581befc963f6944db160aeaf003776847c97d30562acc","first_seen":"2025-10-16T18:09:00.572369Z","last_seen":"2025-10-16T18:09:00.572369Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Josefin+Sans:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Josefin+Sans:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 18:08:14 GMT\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6390,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b5744e64ef373d86fc680b0a1c23e691","sha1":"f1d794c2ef0a76713e452b90d4d7eee6389bfc4d","sha256":"906fc9e8114b686eaf651bd5b460cf3a748829ba4fce34892dc80de4da8077cc","sha512":"853282e6df7476979db39515c6a28c19bf5d1357f45fa04a06301bf2c1989749b76cc255f4f9f3915434957627b63ac34c995841508781a8cf534ab7fbddcc0e","ssdeep":"96:cEO1axeO1axNJc+uwO1ax7NDEOEaxeOEaxNJc+uwOEax7NDEOXaxeOXaxNJc+uwD:cKCjXzrjj+zEcj9zNFj0zOmjbU","tlshash":"4ed1ffd10466e6a0db831dc223ce7d269e8ea1593450c978affd08ccec5ac2d6365b0c","first_seen":"2025-09-21T22:02:54.564458Z","last_seen":"2026-03-26T18:37:29.546675Z","times_seen":29,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":295,"dns":0,"connect":7,"send":0,"wait":20,"receive":0,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/puzzle2.mp4","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:15.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/puzzle2.mp4 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=294912-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D; _ga_738X5SF9FX=GS2.1.s1760638095$o1$g0$t1760638095$j60$l0$h0; _ga=GA1.1.1972608116.1760638096\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7529319\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-776367\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 294912-7824230/7824231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163840,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"5b4bbaf63e307e0b9088622013c05574","sha1":"9695f0527217c3392374af3090278446970946af","sha256":"64144dca5f9cf8b407fc961b26e30e7b3bc8197456c0b99b03df92a2b6aea5c2","sha512":"06ac1d40240ca532636f2adc4af2d88a72bea1cf6ff9370ed1465a3def52a78ad9d5ec757e1e8d8622317832c006b3a43bca1fc760f0893b19cc359adc9ef921","ssdeep":"3072:ezEneaxIG8dll6178jf4HsefNWDnoNeswNo+5jRyLzS:ez8ml8uefQ7oNes+fRKzS","tlshash":"71f3e045b3df50a3e90c213424eef3811d9c35eba666b9b3a66f3c6517177831f25212","first_seen":"2025-10-16T18:09:00.577735Z","last_seen":"2025-10-16T18:09:00.577735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/marvel.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/marvel.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15369\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-3c09\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":15369,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 263x263, components 3","md5":"612195344e2f8ac7613c56be68058148","sha1":"70d0588d62a675a5134aed330c10d13bfd0e8fec","sha256":"5bed2b30ff635991dc125c1591e67b2f61fdc92c0b7cd91128c64c6a375cc342","sha512":"dfecc93b7d973ae824a6e06460879dcc269ff6758ac26e5aa8045e83760d06530069276b44d494497aae12ffbd0b2f20cf9a683abb18b5238a4537cbef2cdb75","ssdeep":"384:HAGBHuU+jEw1YkZa73BKpWGi/bxkYyXCJ93lQ6w:HmTMcABySJ9q6w","tlshash":"c9629d834a9cdd83e9cc21fe5729a167f3c0d578d4deb6163f598a3131867a34246c1e","first_seen":"2025-10-16T18:09:00.580952Z","last_seen":"2025-10-16T18:09:00.580952Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/bernard-et-bianca/HappyColor_60218.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/bernard-et-bianca/HappyColor_60218.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 333490\r\nlast-modified: Wed, 08 Oct 2025 01:43:20 GMT\r\netag: \"68e5c1b8-516b2\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":333490,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3","md5":"1b9926a1bf0aa71de7ff4050e3385fdc","sha1":"3141dc56b21e1813e73a230f51db21c5bdc83eb5","sha256":"06acfc9e809453e42c16089a002d60399d5703e7e9c13ea527f4bbae6ec9fd4c","sha512":"527b870684a6570cfc3755eeb429ff9d590ab0086636ede83c5157b3d0335d86cce622211e94f4461e2f7a7f7ae9cd998812ab64327a6ac3cef23b40cc407dd4","ssdeep":"6144:GGhSKt72AHSdlU0G5HcJLdnLSmBi4+aNpk/KMfHx76jM9lGXac8kyJj:NAKtiS0q54dnLSmBi4+NV+j4i8ky","tlshash":"ea642359b290db12245622f174816f5f0d3943f0b9e83d04dc48ef7a853e6fa68d9ae3","first_seen":"2025-10-16T18:09:00.584071Z","last_seen":"2025-10-16T18:09:00.584071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1655,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":1387,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/js/frontend.js?id=d7611f857ae62650b7f7932c46810aef","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /js/frontend.js?id=d7611f857ae62650b7f7932c46810aef HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Feb 2025 02:39:47 GMT\r\netag: W/\"67a420f3-247a7\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":149415,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"d7611f857ae62650b7f7932c46810aef","sha1":"b396757e4970ffb403c1768dd59bacb4367ed46f","sha256":"e0f363935aacdf36d89c86993d9dc9819151ea1695acfd5eae01b278a0b362e7","sha512":"7934991675a51178767b280d7cf474fd20caf355f245cf4f780282954ba71434fe7b3558bd0099566ac602d9098ef24cf39484c2f80fda0196495374ecc8283a","ssdeep":"1536:L+CWHbI+nL8O3L/2IzMg+hjYN2bLcUEXuGf0wQZB3Yhsbd4mcA6b50+qcAtz0b6A:LTWEsXUVY6btcA6bOtz0b6xcCy","tlshash":"f0e3f9dcb295b07113ab20b5407f550bf23a6915a84ec590f262e4d63c78c8ea1bbf7d","first_seen":"2025-10-16T18:09:00.589067Z","last_seen":"2025-10-16T18:09:00.589067Z","times_seen":1,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-light-300-5.0.0.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-light-300-5.0.0.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 24800\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 4cac1a6\r\nx-jsd-version-type: branch\r\netag: W/\"60e0-vcO0HzzD5ePofKAg7t3Csojw3ZE\"\r\naccept-ranges: bytes\r\nage: 22681\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\nx-served-by: cache-fra-eddf8230135-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24800, version 331.-31196","md5":"4abe94f1746789f39110d3ebac7ebd96","sha1":"bdc3b41f3cc3e5e3e87ca020eeddc2b288f0dd91","sha256":"299dc8e16be2ab2214e279b5536efd387d17fd3d364f397ce9f1fed602384fea","sha512":"d374bcf6698397852d720a057f271ee2295b7aafc8e68a401ea3e56a7aa308648d661ca5f791f567544a2ba681635cb463f414e8afe96f71f4a06c94e374dfc3","ssdeep":"768:rseTvZodP8TYwJJtPSosb7naFpLZgYFjZ4hoW2ej7T6mm64h:rseTBSPbwJJdQnoVZgYZS1z4h","tlshash":"33b2e1c54558bff9fa4648b295ce04facf70aeb993429ec6cd418364822812c6d4e7c9","first_seen":"2023-05-06T07:43:01Z","last_seen":"2026-04-03T18:23:45.576615Z","times_seen":785,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/puzzle2.mp4","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:15.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/puzzle2.mp4 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7824231\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-776367\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 0-7824230/7824231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65536,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"05144377a6b3985576a9c5ac11f591b9","sha1":"3aa19dae9cd4fc6bfff06b420e5ba7b3e0a928b0","sha256":"7348b102080ebaaff67182c80cc19b4313c817c560572c6638c4377112bb166e","sha512":"447d8eca0f3636f59074425ac12a788059ceea468c2163a3e349c778bcf09df3ec209ee59594f028b8ad02930e5d2ce312a7933bc3184b17e8cf860a6688d2db","ssdeep":"1536:epvSis/JnRwOQ79uWNDJHHIdDtMrcNCbbGYvXswCEPJyit:epbshnRNQJuUVHjcNCbbTXp3Tt","tlshash":"8e5302734bba61223da55905c2dbc85cbb3526d8415ac07f889cefc48721daec863df5","first_seen":"2025-10-16T18:09:00.594418Z","last_seen":"2025-10-16T18:09:00.594418Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/puzzle2.mp4","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:15.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/puzzle2.mp4 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=7798784-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 25447\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-776367\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 7798784-7824230/7824231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":25447,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"5b3bd57528ba4e4c56d6ead879e051ca","sha1":"31b6f80042bb9bc86fc4ddce8207ee3724270640","sha256":"40bd034d16623878193eaeabb2b087942ad4e46dbe6b6b185948824a8334ebd4","sha512":"4c9335730f44fa2fbfb9e6bb83ce81137795d039c8a08928a9d708912f905f9f13ccc1ba8e0628414baf76e364754dba1ebdacfe0e6299960b81c2604075ccd7","ssdeep":"384:atg0hfe/lFv2ByzWzTPCXz0vxbyUKkUjeB5WY9ZrkcXksptV:adhG/bvu/TP40v1yU5bZr+oX","tlshash":"0bb24a4963ce24b7f80c1137fcf8a30926b8bacb42a679a3145b7ca51a273934d711dd","first_seen":"2025-10-16T18:09:00.601218Z","last_seen":"2025-10-16T18:09:00.601218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/baner-right-image-03.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/baner-right-image-03.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 89620\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-15e14\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89620,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 453x388, components 3","md5":"ceb1204e62c180b9616951202e8222a3","sha1":"06492a7a2d99ede2eaf72a0f2395ade3531e7d25","sha256":"8bc8fff19f330c1dd2cfc0a049de054f2611811728e48d75500d9874370fd75e","sha512":"aec42df1bf386bf268d000ddaafcad97d17d0cad56ad448e35060f16c44cdf4228469fd1f06a75044c55f058b777f8b79ca9aee724133b72d447eb6251dd6531","ssdeep":"1536:q3K/uA2rPP0oNmhCzHYakEDD923a+YgfbzPAmDbHpCQtBzbT9ZyqIJnpBLlHstAm:T/T270oNXLfk8DoKG/PAmDbHQCDenpB6","tlshash":"8993122abf1635ebd0d4633b5c000af7e488796cc0a19722615bfb558da67016ade0e3","first_seen":"2025-10-16T18:09:00.60416Z","last_seen":"2025-10-16T18:09:00.60416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/baner-right-image-04.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/baner-right-image-04.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 119045\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-1d105\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":119045,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 453x388, components 3","md5":"96e2e19c721ddafdfd353bf18182c7c5","sha1":"91820d6b457554e079b5d4db4d54c61524eb8633","sha256":"81162f89ecf4f20e999a96747a20a9a885314a43879e3467e22fb8c87755d09c","sha512":"afea5ba3b78aefa03e9787c075f5fe05917afa26240adfd81e2515fa78841d99fb56d4331ecf45cfe4f130e0c451db88437a3b29699ba5fc220bff6db1267d1d","ssdeep":"3072:gwbR0gkuPLJFIMMIx2z7Uzj6dEtErlmMqQDER5+CMeo:gwagkuEMMIi7UsyemMNyRTo","tlshash":"ddc3121ab4c39059fab8d1d1e7f62c920b41cf3228ae53ed31815616bad374ee5fd218","first_seen":"2025-10-16T18:09:00.607227Z","last_seen":"2025-10-16T18:09:00.607227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/instagram/6.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/instagram/6.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 137135\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-217af\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137135,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=310, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=320], progressive, precision 8, 320x310, components 3","md5":"414690537f5bef6a403b81a3cb4419da","sha1":"293e4c94db28db02fcf45e97d41a387eb611761b","sha256":"4432c195a13e1851888429fc452a1c857de199655f82c2c7e7f5b1bb5a2de27b","sha512":"021df1dcfc6b09fc6b29d754613a2e002b68bfa919d1be1a9682e75c3c8e01b6e85ef9e74c415ed9cf6ffb7f1899ba454ee74d69f424a5be2c3b2cb2c0e77052","ssdeep":"3072:P+MiKnUp+MiKnU1+I56VZozqfIkGk0Q5QdmTuo94v6Et2M:Y+1+I563ozRkGkdgmvE9","tlshash":"58d3123c33486e8ae2f4aa74b969a4961b518bc507e347dd345d13387ff93ca487d901","first_seen":"2025-10-16T18:09:00.610138Z","last_seen":"2025-10-16T18:09:00.610138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":985,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/puzzle2.mp4","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/puzzle2.mp4 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=7798784-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 25447\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-776367\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 7798784-7824230/7824231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25447,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"5b3bd57528ba4e4c56d6ead879e051ca","sha1":"31b6f80042bb9bc86fc4ddce8207ee3724270640","sha256":"40bd034d16623878193eaeabb2b087942ad4e46dbe6b6b185948824a8334ebd4","sha512":"4c9335730f44fa2fbfb9e6bb83ce81137795d039c8a08928a9d708912f905f9f13ccc1ba8e0628414baf76e364754dba1ebdacfe0e6299960b81c2604075ccd7","ssdeep":"384:atg0hfe/lFv2ByzWzTPCXz0vxbyUKkUjeB5WY9ZrkcXksptV:adhG/bvu/TP40v1yU5bZr+oX","tlshash":"0bb24a4963ce24b7f80c1137fcf8a30926b8bacb42a679a3145b7ca51a273934d711dd","first_seen":"2025-10-16T18:09:00.601218Z","last_seen":"2025-10-16T18:09:00.601218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-brands-400-5.8.2.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/hung1001/font-awesome-pro@4cac1a6/webfonts/pro-fa-brands-400-5.8.2.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://croquedisney.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2412\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 4cac1a6\r\nx-jsd-version-type: branch\r\netag: W/\"96c-B/TU3+XjyQRfQZlusayOy7zHeb8\"\r\naccept-ranges: bytes\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\nage: 11702\r\nx-served-by: cache-fra-etou8220162-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2412,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 2412, version 331.-31196","md5":"714ee8de820748bab5090d91cd5b7690","sha1":"07f4d4dfe5e3c9045f41996eb1ac8ecbbcc779bf","sha256":"322c181b1aab5807cd0a7ed9e249ddbd97fa385ca3d338aa59ef1f610ca24601","sha512":"d3b8f2694cc897b964e5af19ce2702b37a5e8ca0ce2fa8cfc8fdb56bf62416f80c5b392a0b961cc2d376ab863383a4ed055ddee14e0f53411df87e1fd38c79ae","ssdeep":"","tlshash":"44410a5a61ffe462f05c50f4413869851a591841daa70b75afba071b383c5082b6afb3","first_seen":"2023-05-02T19:32:12Z","last_seen":"2026-04-03T21:04:21.286995Z","times_seen":1941,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/puzzle2.mp4","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:15.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/puzzle2.mp4 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=294912-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7529319\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-776367\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 294912-7824230/7824231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":131072,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"1b0d2707df65144c81879155d9dca31e","sha1":"86e9949cedb9d221916517f37a95dc98a03c0a8c","sha256":"9d560afaf84029e0b2b080e9bd3223ffc0d91155d12a864f9a25d262280cce2c","sha512":"b00c0e33ea5e4a2f558fbea16524779375733f618690a9883a61fde469596ad779bb120fce223db57ee19f19f80706184301f22fd5af179f9e61d53bd0b323de","ssdeep":"1536:ezEz7feMV2sLxb1ezGL4Yx6lpxmiaK3D0mW+jG0c78ohaN/nFNgHKoseSBkNFADA:ezEneaxIG8dll6178jf4HsefNWDnoNeq","tlshash":"e8d3cf45b3df50a3e91c213864eef3410e9c35efa669bab3a56f386517077831f25212","first_seen":"2025-10-16T18:09:00.615258Z","last_seen":"2025-10-16T18:09:00.615258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/instagram/7.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/instagram/7.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 134828\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-20eac\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":134828,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=310, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=320], progressive, precision 8, 320x310, components 3","md5":"cb926d8f1c1f12e8c3584746d102c530","sha1":"ea27ceb87a47b30271dad60b10dc5d30b5f695fe","sha256":"44156a42bf8ad3c5ae367c28bf22212b0cea5fa4ee8d0d34254b918dbbd17bfd","sha512":"7af600309a7a2524f31414999f49d60a7e03dd84e169831831c3d44b70080515e8ddbf797581fd7343edbaa61d57195f162e7a4070e0a46bec1773fcce1a1d78","ssdeep":"3072:sAi4VAi4x2Jw+/7PXEOJXXsUau0iMu2m4/bPuTNx06axtdX9:+4l4YzrUOJBnfZ4bIn0pxtl9","tlshash":"15d31211baad5d20d8c8c47735e6e60633258ab02fe77641f98e5b8e37b42bf051c41e","first_seen":"2025-10-16T18:09:00.618367Z","last_seen":"2025-10-16T18:09:00.618367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":988,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/puzzle2.mp4","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/puzzle2.mp4 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7824231\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-776367\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 0-7824230/7824231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65536,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"05144377a6b3985576a9c5ac11f591b9","sha1":"3aa19dae9cd4fc6bfff06b420e5ba7b3e0a928b0","sha256":"7348b102080ebaaff67182c80cc19b4313c817c560572c6638c4377112bb166e","sha512":"447d8eca0f3636f59074425ac12a788059ceea468c2163a3e349c778bcf09df3ec209ee59594f028b8ad02930e5d2ce312a7933bc3184b17e8cf860a6688d2db","ssdeep":"1536:epvSis/JnRwOQ79uWNDJHHIdDtMrcNCbbGYvXswCEPJyit:epbshnRNQJuUVHjcNCbbTXp3Tt","tlshash":"8e5302734bba61223da55905c2dbc85cbb3526d8415ac07f889cefc48721daec863df5","first_seen":"2025-10-16T18:09:00.594418Z","last_seen":"2025-10-16T18:09:00.594418Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/langues/en.png","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/langues/en.png HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 479\r\nx-accel-version: 0.01\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"1df-5ee7453102021\"\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"993542be264b7f6484c71f9909af5eea","sha1":"180c94365e4209f024f0469a1efc0fc90e395670","sha256":"72658ee461edc7377d7e135d74a4ef67166833a9550b2c9b29554606fa1137c6","sha512":"2d10dc567c738f491e36da2b4412b506f73e82d32a6fbed2ed21ae75e48d16f5be24bdc563046040a677b09853724f534a63e0046cad48f2fbf6b603f6985682","ssdeep":"","tlshash":"88f09ec752745c68f0cc186b9eb08d695c674aa402aa8197d95d8263357e04ae5c8f80","first_seen":"2025-06-28T10:06:32.492596Z","last_seen":"2025-11-20T16:10:02.984558Z","times_seen":5,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/baner-right-image-01.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/baner-right-image-01.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 118818\r\nlast-modified: Thu, 24 Jul 2025 22:55:15 GMT\r\netag: \"6882b9d3-1d022\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":118818,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 453x388, components 3","md5":"0820368b2bce515d4026c8ffe6aad20a","sha1":"82985987fbe0c7844c658b96c4debb65e412d86e","sha256":"7ca091314bf822035707ab72dc47235eafa66e94c2a93679b7b95d4d27d0de7e","sha512":"fb067570164ecbdf886d4aafb9aa126b6b31e819f43f4c8b8d0630439795ff852beadf858af84eef900c1ce5bd6bc0c214088328d668cb54f3c3e18705fb4f45","ssdeep":"3072:So0H28Hbk2COfHC8kcQDIft89nH52Q4BXKcNE0CS:SV5k27HCdIVOnHoQOKF0CS","tlshash":"33c312ea8f706d3cc884b9f11a0a39718f91a7518c1d4b9bb35f9dc340201fcca659da","first_seen":"2025-10-16T18:09:00.624433Z","last_seen":"2025-10-16T18:09:00.624433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/minislider/image4.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/minislider/image4.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 363951\r\nlast-modified: Fri, 03 Feb 2023 19:19:35 GMT\r\netag: \"63dd5e47-58daf\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":363951,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3","md5":"c5448b3182468b6fe7665f32973c44cc","sha1":"575c166dd84df5ab81b1d4a4773e40f044b1056e","sha256":"ab3c812cbfea301bf8da6314f6e1b9babfe869b6d7b20d658db576a9c0e134b3","sha512":"bb827ccb9e92196804fb58825d3f3981e327e17e66c10333bf15dbf6f27f992d956aa2a90905d5053c32158795f6601955c915106262c4a267b2dfbfa3037fd0","ssdeep":"6144:HTYYv1ph0dptHcZO/MFbTsBvJegwvUF4kt3tKchp5NH231vh314vwHRuKUm70/rw:HJzqdptHohaxegE5ktZ81vNOvxKIrw","tlshash":"977423a678000da7eaf4efdac91f6a1911e75edfccbd289db016781384523d8672ce11","first_seen":"2025-10-16T18:09:00.62758Z","last_seen":"2025-10-16T18:09:00.62758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":1390,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/SlickNav/1.0.10/jquery.slicknav.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/SlickNav/1.0.10/jquery.slicknav.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2360\r\ncf-ray: 98f98019efcf56a5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cf2-212c\"\r\nlast-modified: Mon, 04 May 2020 16:04:02 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1784807\r\nexpires: Tue, 06 Oct 2026 18:08:14 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2mYO16R%2BR4Mb8%2FUIQTVC0scTu%2FC6ICUqJBqoYfW5BuDkdIwv9rVnVRQVfFvaWQksRg46NEDRG%2B4pQrrmpDnVOH%2FBtot2lbGyUNZt7bGKcWDHGNAQQ75YTNLyDVk3PO6Lj4W6DOol\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8492,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8397)","md5":"7e39d4e80470a2838d2f4cf6f1cc940a","sha1":"8d283a5b31156347f08bed6ca92eb717db3a169b","sha256":"87f4f0b8142a441884c70d2c2bf1ddc33248eee60506b27611ba3b827f401b3e","sha512":"1660973496975b0d5f7371bcccedd6770476376dd84d60c50d3337bab7adc5521b67b96f9e31e47225b8cf2e891af9eb82391c34493c50db5d1932ecd8613103","ssdeep":"192:kBt6YAHrZQKkMBxkg4ef4xXoSGon1q3IkeRsbTW:kBgZQSyewFDn1q3Ike2bq","tlshash":"4a024149b1143ab375fb7bea4237880aa333412dc40b80b97963daa54d3a45d3523f7e","first_seen":"2023-03-07T22:39:22Z","last_seen":"2026-04-03T06:17:02.783619Z","times_seen":251,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":19,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/mickey-et-ses-amies/HappyColor_58440.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/mickey-et-ses-amies/HappyColor_58440.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 273463\r\nlast-modified: Wed, 08 Oct 2025 01:43:34 GMT\r\netag: \"68e5c1c6-42c37\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":273463,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3","md5":"1816583e9f6033ef290c73d5bde53de1","sha1":"b34255e18bb298afeea998376ed683eec052c635","sha256":"6a59f6c88fbcf94e7e8f41fce1eddfe6b478745d3015c7612823db95d6dd6bd5","sha512":"5ea847b1200d7812caf9653804bb9c5690662f36b0a71f66d1a453d6404c8e35e5ec7ca5423c558bbd748afd288255513a78b6cc6ca9aea8e3c871d27382094b","ssdeep":"6144:nttQAcHV0lVWhiZ329DS047EvPpfgoABnw1960OgCLJvYuWt1z:ttQZ10GW2ZSTE3Gnw1LyQuIz","tlshash":"9144120abc37e831ee0fccf7278edba31a2116aa651649b052d1fc845ad42a3ffd1545","first_seen":"2025-10-16T18:09:00.633127Z","last_seen":"2025-10-16T18:09:00.633127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":1276,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/js/manifest.js?id=df04d80edd1398d7a29e88c950de6a6b","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /js/manifest.js?id=df04d80edd1398d7a29e88c950de6a6b HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Feb 2025 02:39:47 GMT\r\netag: W/\"67a420f3-5dc\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1463)","md5":"df04d80edd1398d7a29e88c950de6a6b","sha1":"6a9c15816b6050b99ca803df0ac072eb5aa7a078","sha256":"8542ff0829c6c9e028f79c392d2c37e9b075880e61e1b8cf2a38d7172c2c452f","sha512":"d7f18e3c7e130ed3eb41087d511c25e6b2c91e9f9ce8d727a5a96c0d1f3a27510b30baf352643fbe076dd99159ff53b005e3e3854455eee961585d1b7db8daee","ssdeep":"","tlshash":"c531629431f4a4a53be399c50a1f8047f2226973703fe9e1f703cca925689960672fa2","first_seen":"2025-10-16T18:09:00.63643Z","last_seen":"2025-10-16T18:09:00.63643Z","times_seen":1,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/favicon.png","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:16.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/favicon.png HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D; _ga_738X5SF9FX=GS2.1.s1760638095$o1$g0$t1760638095$j60$l0$h0; _ga=GA1.1.1972608116.1760638096\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 4403\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-1133\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":4403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"95d3412265ea0367b131b01d6bcfe3c4","sha1":"fb94343a1ec5d13f2778ff6d994770d5dd2c55f0","sha256":"00321eb443f2e4eab80c74f765552d3d500ba927652ca6acef0e905f2bc37b53","sha512":"4309781157043247ddfb1916afd1219e74ff94d24e68a20e1cd2e7051e4d22da8163f1213044056730d7824eb7e76c5423394a6e29f010c89734a04c64f1de9c","ssdeep":"96:46sZDWM4c79vEdPOlCKGim4psJKt2oHzpGFMUGCjZ4mNGJ9vS:3evEZdupswEoHzpGmmZRNGJw","tlshash":"a6912aa5f501b865a903c0c122ebe9f5846b543f4340fbdc6772155e7a225e8d3adcc4","first_seen":"2025-10-16T18:09:00.639405Z","last_seen":"2025-10-16T18:09:00.639405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/puzzle2.mp4","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:15.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/puzzle2.mp4 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=65536-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:15 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7758695\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-776367\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 65536-7824230/7824231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65536,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"31f210ff57d59a8689ab8ccd7f2f85d5","sha1":"143e549ad0ac725a6e8e6a1b44a70e307223c735","sha256":"f1d10c9eee61100b95129c9efd8b5cde79ac96c8759f26a28f952212420a8834","sha512":"1b5d0aa1d372b2e99cbbb9dde8cc5fea316aaaaf5f6cf728a7538e36fb0e8fee33e192acb7f3caab177ca322dd8ef443d953279a76b584b2ba161dc3d6a154f8","ssdeep":"1536:zZbI8X3OOV3weOi0wraVDpFyWfgIJBixxwDS0fXFiUI/C/vVUP53:zBXXF3weOyr2pFzfgI3ibwDvXFi+/vU","tlshash":"125302b2938c0fa19059b5363dca93daab42149009eef65b21c31db506647f048bdefc","first_seen":"2025-10-16T18:09:00.642767Z","last_seen":"2025-10-16T18:09:00.642767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/storage/files/shares/films-disney/moana/HappyColor_58657.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /storage/files/shares/films-disney/moana/HappyColor_58657.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 231217\r\nlast-modified: Wed, 08 Oct 2025 01:42:09 GMT\r\netag: \"68e5c171-38731\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231217,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3","md5":"2a0a5778f4901b54c3fd2ef31c167315","sha1":"c5a1620e0e9dd16e6b8d1206817e4e0eaf71b4f1","sha256":"55d31cc6b28ad2c9705fc691ad84a130234b3426cad9f2f00b81cdcd8d0d2c0c","sha512":"513218dcf79029364a8bd0ccad6de5ffc59d09b6ebc69a515becf223088700da77bbf1604ac61d7c085900f1e016a9656fdb56fa190a9f73d9b56542a5303239","ssdeep":"3072:PVj9XYmoT/+Nk/wgr07BzTrxvIEHHEfohazVxn9wgcKlMfMdn/ugeD37xYk/X2Vz:AEK/w79zpvbEfwsVxK+p/KTr/GbUm79","tlshash":"e434223b0b4210bce068f9b9a62369a92318381e7f5de14ddfe935d158de2c0954fe8c","first_seen":"2025-10-16T18:09:00.646224Z","last_seen":"2025-10-16T18:09:00.646224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":1098,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/home/puzzle2.mp4","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:16.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/home/puzzle2.mp4 HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=65536-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D; _ga_738X5SF9FX=GS2.1.s1760638095$o1$g0$t1760638095$j60$l0$h0; _ga=GA1.1.1972608116.1760638096\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:16 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7758695\r\nlast-modified: Sun, 27 Nov 2022 14:11:00 GMT\r\netag: \"63836ff4-776367\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\ncontent-range: bytes 65536-7824230/7824231\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65536,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"31f210ff57d59a8689ab8ccd7f2f85d5","sha1":"143e549ad0ac725a6e8e6a1b44a70e307223c735","sha256":"f1d10c9eee61100b95129c9efd8b5cde79ac96c8759f26a28f952212420a8834","sha512":"1b5d0aa1d372b2e99cbbb9dde8cc5fea316aaaaf5f6cf728a7538e36fb0e8fee33e192acb7f3caab177ca322dd8ef443d953279a76b584b2ba161dc3d6a154f8","ssdeep":"1536:zZbI8X3OOV3weOi0wraVDpFyWfgIJBixxwDS0fXFiUI/C/vVUP53:zBXXF3weOyr2pFzfgI3ibwDvXFi+/vU","tlshash":"125302b2938c0fa19059b5363dca93daab42149009eef65b21c31db506647f048bdefc","first_seen":"2025-10-16T18:09:00.642767Z","last_seen":"2025-10-16T18:09:00.642767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/minislider/image3.jpg","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/minislider/image3.jpg HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 270870\r\nlast-modified: Fri, 03 Feb 2023 19:19:35 GMT\r\netag: \"63dd5e47-42216\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270870,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1536x1536, components 3","md5":"13596c65eef11613f75a39f4ba46ed18","sha1":"63352832ac1941bf3e8f2a0f8908965c404f3931","sha256":"407a6c9c5dc2c44106c060f494e79e1dbe4d899d2ff01968ae125b1f70b8c290","sha512":"cae32916d6e44f9c8f7c3c00c235e093d072e2fa109c896aef0971d51b5dc21673859040c0ba2c4ffb8e655c85cba5e6b39e49b099c5eec9261986547318e8c3","ssdeep":"6144:KdnYoMx2jAD2FEh6ghPJeUzVTErk8Qt/GUfKn:KdlfjAhQgdQO/GiKn","tlshash":"e1442390a1d7cf71c4726cb1903600066e6eaa9bc64170862fc77db82eb3d5d7a835bd","first_seen":"2025-10-16T18:09:00.651562Z","last_seen":"2025-10-16T18:09:00.651562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":1257,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"croquedisney.com/img/frontend/logo/logo_footer.png","fqdn":"croquedisney.com","domain":"croquedisney.com","tld":"com"},"ip":{"addr":"87.106.171.27","port":443,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"croquedisney.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 11:40:51 GMT","end":"Wed, 31 Dec 2025 11:40:50 GMT"},"fingerprint":{"sha1":"BA:D0:99:DF:11:39:83:D3:2D:6D:D5:0B:DD:32:94:54:88:E0:57:77","sha256":"85:05:A5:FF:E6:48:EB:87:3B:4F:D5:D2:D5:87:E7:63:24:F9:96:CE:22:FF:27:3A:5F:3B:63:53:EB:BF:31:AC"}}},"request":{"raw":"GET /img/frontend/logo/logo_footer.png HTTP/1.1\r\nHost: croquedisney.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6InZheFNIMzZPVitTdDhhaXUrdnpmTGc9PSIsInZhbHVlIjoibW1uR3E3dGlVVnFXVitRKzA4WVVlNVVTaHNVQ2EvT1l6eXNveEtqcm9BaTVHWGVvZXdEbTlBd2MwdEVJa1R1aDcxYyt5MWthcTJ0dno2SVJqSllzNjkwdW5jcXl6c01wQnhCVXNyVzNTeVJsb3RHV0FqQkxhcnV5L3pCY2lvY1AiLCJtYWMiOiJmMmU4ZGU3YWVhYTcyMDc2N2E3N2I1MTM0OGRiZmFjYWUwMDIxMmI1NTM5ZmU4M2JhNmU1MDk5Y2JlM2MwMWI5IiwidGFnIjoiIn0%3D; croquedisney_session=eyJpdiI6IlA2Q1hzdHlGbUJrZ1ZNa3dtTkdkRWc9PSIsInZhbHVlIjoiTGdVV1MwVGR6ZWUwS1AwaHVFTjhmajdEc05jbXdWZmVWQnRmdHd2bnI3T2NVTzdUQTY4U25wUDNJenJpUGEvNFdzK0NTQTQ0M1JxT0YyZHJrcGl5KzE3VllyZXJnVW9zRzR4UzEveGRYbStVbUNTTCtPcjNaaGlxQm1sQUYwTlAiLCJtYWMiOiJhMjIzNjkzYTRjM2E4Nzc4ZDYxZjhhNmY3NWI1MWQ3ZGYzMjVmZTZiZWY4MjQxZGUxZWQ3YTAzNTY5ZTUwZGUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 4459\r\nlast-modified: Sun, 30 Apr 2023 18:39:37 GMT\r\netag: \"644eb5e9-116b\"\r\nstrict-transport-security: max-age=15768000; includeSubDomains\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 70, 8-bit/color RGBA, non-interlaced","md5":"0b8ca988c87c2745f43dc0d6b03dc2b9","sha1":"0202ce3bae4af66d51fbd916ede4f9b3095b3cb4","sha256":"a9cf9a0776a331b489366339df72cc7e789f0eefe8d5978192f8dc408eddc466","sha512":"48fd3c091382f1e206351f298ac2874a3b7b659f6e255c4c9b9000e7ee9d97e7059393dc6c26c5d52790c67ec1c7a711aa7adc302841a307a7b410130813db69","ssdeep":"96:94Ny1Jeg+oQ5aLW8n2IIqplHfFtfwQgFPB3:ekJe3h50328HPfaJ3","tlshash":"86917e92930e4bc94ed393ac2bb206849f00f01d20da236aadc304bd47dbac8dd55547","first_seen":"2025-10-16T18:09:00.658694Z","last_seen":"2025-10-16T18:09:00.658694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":472,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hung1001/font-awesome-pro@4cac1a6/css/all.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://croquedisney.com/","date":"2025-10-16T18:08:14.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/hung1001/font-awesome-pro@4cac1a6/css/all.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://croquedisney.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 45455\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4cac1a6\r\nx-jsd-version-type: branch\r\netag: W/\"5ac4a-yOfsKLDV4ty86bIhB7we2OU+SxY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 16 Oct 2025 18:08:14 GMT\r\nage: 22196\r\nx-served-by: cache-fra-eddf8230114-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":371786,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f9e2f72281d6ac4e23b1d1690c5e6700","sha1":"c8e7ec28b0d5e2dcbce9b22107bc1ed8e53e4b16","sha256":"c4772e97742bb0756ab29709b59debdfbca546b640277ff1f86935b0a72eca7f","sha512":"e21240202bcb6aa31da9f25ac9a143e7ef168b182036fd09c7ef17ec964399a5a80894f82c5d594947b63d0a0bd44e426857a005501b3bf17fc7da6051baf6c6","ssdeep":"3072:P88WnHP5Z77XMSKk9TW5FPHta/9O1rv0g4Rn0+K9h:kHPT77w0g8n0+G","tlshash":"d5845df8c1bd19544759a4c52287eb30bf6df2ad990a1d09d2a5fc9db8f1e088086fcd","first_seen":"2023-05-21T18:29:58Z","last_seen":"2026-04-03T03:20:31.706281Z","times_seen":195,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}