{"report_id":"764e4eea-adbd-4903-b3d3-43497ea7ef08","version":0,"status":"done","tags":[],"date":"2026-09-02T13:21:36Z","url":{"schema":"http","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"title":"CrestaG — Premium Web3 Card","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T13:21:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"sol3.noir.black","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"sol3.noir.black","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":2,"received_data":25226,"sent_data":1106,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dns.google","ip":{"addr":"8.8.4.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2018-04-16","domain_rank":158,"first_seen":"2018-10-26T18:11:46Z","last_seen":"2026-08-29T13:27:13.718751Z","alert_count":0,"request_count":1,"received_data":755,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"crestag.site","ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T13:21:47.375217Z","last_seen":"2026-09-02T13:21:47.375217Z","alert_count":0,"request_count":60,"received_data":37385968,"sent_data":30656,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1.1.1.1","ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2012-05-30T07:40:31Z","last_seen":"2019-03-28T08:40:04Z","alert_count":0,"request_count":1,"received_data":474,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"sol3.noir.black","ip":{"addr":"65.109.115.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-31T14:51:00.303133Z","last_seen":"2026-08-31T14:51:00.303133Z","alert_count":6,"request_count":3,"received_data":3967,"sent_data":1927,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":1498,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.iconify.design","ip":{"addr":"104.26.12.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2026-08-27T23:18:38.061585Z","alert_count":0,"request_count":2,"received_data":3712,"sent_data":1091,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":2,"received_data":2520,"sent_data":1125,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"form-252.pages.dev","ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-09-02T13:21:47.38043Z","last_seen":"2026-09-02T13:21:47.38043Z","alert_count":0,"request_count":5,"received_data":386249,"sent_data":2542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4bd8139be4dc5b926778b1f887d112d","sha1":"b612980c921cb3b5eed0e2adb4c46ba3d8b8b39e","sha256":"353e0c87040cdb38330fff21aee86ed94bfdfc6b22206c9c390d1bf7f5dde3bc","sha512":"92e812e5ddca3685a9076c7e62367466f2331d353350c193c77f9c5f6bf3d808998496d9d69fa4f1e5b0d8d99d25ff3830265d8956807f4aefa4e129dfa39d61","ssdeep":"96:zzq5lFkp7tFgSJxhBj3CVVLu69OP6s+jIESU3IuT:zzClyp7tFgSJxhpCzlvsdraIm","tlshash":"d1a14647a4fe64521287953d0bebb4e9a790901b32554cf83ddeb278dfc0b208a70ad4","size":4762,"data":"","first_seen":"2026-09-02T13:21:58.877506Z","last_seen":"2026-09-02T13:21:58.877506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d6b5d02b890b6987cc9fbbe8400882","sha1":"f13692174783e414df93c18e18b6703696c5a737","sha256":"f77a54e282b55922d739586c1379a802523172a2d172edf6e9508431f3922abe","sha512":"78d5530134e326aa023cb11f73a0ed30fafe3bba35e22e8286015e5d9761188c3d242a03d9740ad7314d3672207704d305caab32b1e3809f57461e93339513d2","ssdeep":"96:nSGpE8akj0TymM6/zLBJpJGtrrSkXwQ1uAYiR3+6XSGX8AD2gywE4Rf9:nSQ1LjaMK3TYwQ1uAYipSGX8ACIj9","tlshash":"47c1633fe3fa113609d7027336839791bb3490073a84990a3e2c85882fd596dc2b7394","size":5956,"data":"","first_seen":"2026-09-02T13:21:58.879545Z","last_seen":"2026-09-02T13:21:58.879545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8218b283d980712e697ff3c3726679a9","sha1":"039d19db6bf9fac0b8c74f24dc1c373b14a7ffbc","sha256":"763a745c1c69a53c6188eeb80db521a6f8f15b46148762ea74e749748f9a80b1","sha512":"4673918686da0ab5ff7fda342da5e38c78fb7f4300863cdd27deea526c921715997e00a1c493f19df4e2ef188ec3de6c638664d173cd190835512b97e3d1d4db","ssdeep":"","tlshash":"70f0f626d6a41d3180bfe72876cea74833e8183754c01a007e5caa551fd99a684f4bd6","size":646,"data":"","first_seen":"2026-09-02T13:21:58.881156Z","last_seen":"2026-09-02T13:21:58.881156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c9b6caa9bdadec03b911f714d65e9a7","sha1":"e2ce727938ac0429f44814a41dd04d02659718bb","sha256":"7744523ab07f863e4e2047e8194169d21b941a993df9834ea45055700e375c16","sha512":"1311c5d5583343e805c145133641e410efe4974b36a24aa44b667e67320bff61f955271a3aeef70099b6685457f92d1bb8a2035bdac77578e8f62bc2e595ba94","ssdeep":"","tlshash":"0b31bba43df6183a016ba73d03db648fb36085ab928855543d2dd81c0fc9b9883f53ed","size":1635,"data":"","first_seen":"2026-09-02T13:21:58.882435Z","last_seen":"2026-09-02T13:21:58.882435Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5eb637ed8425a5d41d391c8946324323","sha1":"0fdad33655cb3048e6389943a74e662fd8963fda","sha256":"11ddbc2df5b1638e77207e3a7eb9ff45c2f394480028b0b534cb1ba6bfe17563","sha512":"c09868abd6710f6aa2d8647e0acfab7481c560c4d2ca8a3c7eb58257f12a5892be6673173f16442751f2abb1db65922240f0218c918e15d593ed2a5e47a8adf8","ssdeep":"","tlshash":"1931c12449b5a43151ef3526fbc777c03518602366009080fe9ccaac5f95fbe98b4bad","size":1601,"data":"","first_seen":"2026-09-02T13:21:58.883635Z","last_seen":"2026-09-02T13:21:58.883635Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9476672354746d52fd151c3b19361f80","sha1":"636cdaf707300fa2df8e23d3321e3e0db65a97d9","sha256":"86411861c95df2fdd4054454072bca469eb2a2d423b1e7654ffcb9a856eef463","sha512":"e2a9ac859884e9229123ca0e615b1e3070989f2f27c2d3dec050c45a40d8237259cbbdc4f594e6bf56a9a4d2c5a6c69916f0d825cecb2d25ef081ce5cc333d71","ssdeep":"","tlshash":"2bf02b27a77804f1007b913f87aee745ab7050d324439a05be4d4f482fdae5964f1e96","size":504,"data":"","first_seen":"2026-09-02T13:21:58.884919Z","last_seen":"2026-09-02T13:21:58.884919Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96ea36e32028e78fae96b619b112ff13","sha1":"4d4207e3614768096c76dd15aaa3244e7103a147","sha256":"56909a5ef98a31816eed48792f4fcd95e78c3289052eda11588c1fa1a8ad9155","sha512":"1a9e8806ac6fbe19c9bd91090c376e7df74fe417736e5ff3bc1aecace8045520e124630cd9e4c6455a3e17bc8af50d2132092e837e7eef4df8992971baa3ce50","ssdeep":"","tlshash":"23f0245402f5223801b3b16917cbd6e533602487e050ee593eac518c2fc78a188f87cb","size":621,"data":"","first_seen":"2026-09-02T13:21:58.886815Z","last_seen":"2026-09-02T13:21:58.886815Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e49875a6f1fcd3c2401184adaa85888","sha1":"1dde721e29159bddbb3b4f4aa2300e431c623272","sha256":"5f7c1d49774914d7e3d10f1939ed940a3b5253bb886337248f5d2d98fd25cd7d","sha512":"7a9dc2c0c705f83cedc48364fed1eaf851dd2e2e4fb3a0a20875476fe8f484e301b1894e5825453b887527036189828359e106e2f9977bd6cce8970ef13e6523","ssdeep":"","tlshash":"f511595ab6fa307541b31ba91bcfdd9532b510431048c5483eac91861fd2ee193be7ee","size":950,"data":"","first_seen":"2026-09-02T13:21:58.888817Z","last_seen":"2026-09-02T13:21:58.888817Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a356471e97dbe519c138fd4cbee4bf8d","sha1":"9c73cbcef03a80342308ccc811f2337e15c70d44","sha256":"36f77eb5c08dc8e3ec83501c2ee78eebf55822d58867bf37391f0a69f1356c29","sha512":"7036daa7930cadeaf3899bf3177f9270b688641b7785bed6321a2f28790339afa33409a135caf4b4f76c4af49b78fbabb932db395a96b4dd4e6a6365f3ef2935","ssdeep":"","tlshash":"b031659472b77a3a00f79b6002dfae8437319097d181994a3c3dc0860f9689270b3aca","size":1737,"data":"","first_seen":"2026-09-02T13:21:58.890301Z","last_seen":"2026-09-02T13:21:58.890301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c4a839b7d87488a442769cb648830dad","sha1":"3e5be3482a0a9bd2f62de2552e5984e94dcd227e","sha256":"14bff1d8499521928c711d4f70ebfc9a7380f06778713603e1487e437f4b8c7e","sha512":"7faef39e5df11419c6c97226845d1716a7ad00f1344e2d98d7eb6c3e7759376bbe2fc30c76aeb31ba6dbc6665741f6a8d725d98270afe6e84f357ca5c15b269b","ssdeep":"","tlshash":"31117b5de6bd3179923312a8ab8fd99133ec104b1142ca993f4c56440fd8ea16199bea","size":1065,"data":"","first_seen":"2026-09-02T13:21:58.891482Z","last_seen":"2026-09-02T13:21:58.891482Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b855e6a3e1ec702876f941b48a87ffb8","sha1":"37bc7d29ea44e9d4e65a85c199539515545476d7","sha256":"96a152a48d0338cae47fbfd64743c89867e95da68c8f7ab247d3bcaf896c4d61","sha512":"e84231bd85a89e3cfc30bb78104c431130381d8bd75936aef67fbae54e7d90fa0eebaecb502ea3bc5c8e4def0dcaf26718d2c20e3d21afafb79c2544ae7878f3","ssdeep":"","tlshash":"0431579431bb783a06b7566009dfda84377c909bd0434a523f3c84850fdbac070b7aea","size":1519,"data":"","first_seen":"2026-09-02T13:21:58.892889Z","last_seen":"2026-09-02T13:21:58.892889Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"859eef61898e51f5cb0355f8e071dca7","sha1":"a837cf4fa20604eadd9b4dbae009729d2a32964d","sha256":"61851dd586dea69bfa56339564af5e5b67ce051e20a1649978f675a0837a61fa","sha512":"0d1a398f4644fd1f114c7dc96dc24a8007ef8e9ba7284a87181d10d072a65ebe2278c999776060f72b4bd15dae81e87f590a033e73642b01a61296e8a15a3ecf","ssdeep":"","tlshash":"05113b9996ba2079c27301692b8fdad433b4118721c0c58c3d5c4d890fd5ea566edafd","size":1029,"data":"","first_seen":"2026-09-02T13:21:58.893988Z","last_seen":"2026-09-02T13:21:58.893988Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76cccaac4316bc233b7e50fb8e2b642d","sha1":"c2ad89fc2f1b8945f840b594ed84c5a213a8abe7","sha256":"8cc9594804f21acb686fe1e098900df0433702f22ac939681f47481da5461d42","sha512":"d768e360bace0ad6cc0cd0c730f5ef2b2923d68c0e9db862c23fd0a470fdb79cec434c468f33cb4e3eb424bb761c812b90743d75b24615037e6cec582189e352","ssdeep":"","tlshash":"f83149d431b3783a81f3426005dfda88373450a7e8408a493c3cd4890fab5e575b3ada","size":1484,"data":"","first_seen":"2026-09-02T13:21:58.895012Z","last_seen":"2026-09-02T13:21:58.895012Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c41f3247b1214818a3e3b9d65470ff53","sha1":"6aeac7eb41229be27f38a29f981597e1e1330df4","sha256":"7a701b0ecf7e2cccedb88199275fea00c77bde261402df95253280cc8a64e629","sha512":"a32ed6946918c925d28df915bb11c0f161ab34a73f7526db6e8948415ccad8cbb6fb42964b51c4ecfa8e2e7f9551b895971c5514c95fc71c0d52eccb49232b59","ssdeep":"","tlshash":"e111781d96bb20788173026a269fca803bb810c722d4c9883d8c55450fc4de165dd6fd","size":1035,"data":"","first_seen":"2026-09-02T13:21:58.895938Z","last_seen":"2026-09-02T13:21:58.895938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"098893d5bec1534a0ea96e5ba993ea20","sha1":"ac97d8915c0e61e3898678e0c1a491c7461c1814","sha256":"cd58fede674165d9601c3b9fade6ed5512e26456a829cf37ea9d5be6f81fda52","sha512":"8896aa0f33ec09ef3a9882dc3e502e14a638352cfdb6087fde1fa41233e3b69fde9b9828b51303b84b94241ed837e7d5b58a12c89a6bf6bd64ec6a65aeb2d4fe","ssdeep":"","tlshash":"af31049831b7783a05f7a6b911dfaa843b6490a3e0404a413c2ca4850fdb4d174b7ade","size":1489,"data":"","first_seen":"2026-09-02T13:21:58.897025Z","last_seen":"2026-09-02T13:21:58.897025Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"da71fc3d4e6753e0e357338f39c02807","sha1":"b867cd640bcf9f4f448063df810971d6f12b206b","sha256":"ebedb08783030336a16fccb1cee4974d93c557ec6ff9ae1b33615ac9f7b1fc6f","sha512":"4e51e5e7fa22a753b962b58931fa281521fbc5f980fc0eb02351c2dc00f5dde88c0fad1f597c71330a03a624bb9f383f2fc2dcbd32274f493751ffecb03dff41","ssdeep":"","tlshash":"2b01471a97fe3075c57301781a8fe98832f914872184ca497d9c98451fc4ae166f86fd","size":736,"data":"","first_seen":"2026-09-02T13:21:58.89819Z","last_seen":"2026-09-02T13:21:58.89819Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f4a107cd0995f9ca2b864b097e0d890","sha1":"92446e7146eb081118e6717b3b5826ee7954aaea","sha256":"383d6e881611dc6cd40b2adb9e8a56a350f9cab832d57d8ed5ab24f724839970","sha512":"15f994f91eefec9443656c157c37268a0190d3c74e1ae663c3a9eb28a1151aae722e87ee0643e6e436275252e29162e30063c5c7352bce769b86b56a424b10a1","ssdeep":"","tlshash":"7031375471b37a3a01f3626805dfda8837747497e0808e493c3ce4850faa5d135b39de","size":1493,"data":"","first_seen":"2026-09-02T13:21:58.899118Z","last_seen":"2026-09-02T13:21:58.899118Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2946cbb7386b581c4a3830be5b82764b","sha1":"1f0d012aa911261d49ee99fa3769e63ee18cdebd","sha256":"bcd1b22781eca55709282dd6544167acb7c6e3a7ed237854985aadd5cf06c040","sha512":"0e3194b066019c031423e6fcaa52c8935ee973e6abdb48db30b447435ad12052dc8ce42e9706b471f6cb206a38da9a2d861501ac253b907bfd5bd86063adb3ef","ssdeep":"","tlshash":"9cf0ab1801a4363041ba9129d6cfbf853aa440e36042c510fe1c899f3fccab2ddbc9de","size":453,"data":"","first_seen":"2026-09-02T13:21:58.902573Z","last_seen":"2026-09-02T13:21:58.902573Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2c757b367dd0c4098a4994191e13a92","sha1":"00d790bc58f86cc083992e45c55f3d66da0e2419","sha256":"f02273297d475b5f8bea27c8db6c5acdca1cbb7d413702013b6370c1a3b1646c","sha512":"1fccb9f7d167b7cb0f509757e5e179d56f9a88517c610b69233dbd32b2edf18d1d0e7d22c1e4f2b9ed096f24fb7a9f9972dcd3fe59e608ee5e2ad5e696c05730","ssdeep":"","tlshash":"d901c076a17a15710bab9e7e33db7285b2756057b090c120391c0e441fdab4882fd0cb","size":739,"data":"","first_seen":"2026-09-02T13:21:58.90444Z","last_seen":"2026-09-02T13:21:58.90444Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"51d243ee346e5207aaa6a5a5ea767dfb","sha1":"cdf17318e59b4007454704560fdfab36acd44ddf","sha256":"ea5c9f7af76efc03a01199ea3acaa40c631a4777d510817711fbe24c9c340d11","sha512":"ea6a6d2491da00750dd446a3e09a9047665109a5838badac6d944f6c3bd134a4e9bbd4d9c8bc410c378955ac236da159fcdfc15779a34918c0212f280304fb55","ssdeep":"","tlshash":"5d31e194a13a106d9213a73a86cb060535787003344bcd5d7a4ca3095fc7b2c96f7bde","size":1530,"data":"","first_seen":"2026-09-02T13:21:58.907028Z","last_seen":"2026-09-02T13:21:58.907028Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99c28cc3dadfa490ba4eb9328ae37639","sha1":"c8b45c7bdcfe43a586eba856560be3453f042e3f","sha256":"c355de7ca207b4adec05fbe9ef7c5c1426364685210600a24bd5134a6f606452","sha512":"415c95d0825cfd3d916f5a21bc49386a749b0c00da844a7ea1d653373563aa267924f2a8701dae01598841fcf3e7b95570df5ec6e0d4e2bc44ed495db80249da","ssdeep":"","tlshash":"2941141e31fc1178427775bba9cf22243532a40336e9898dbcac53700f94b6669e67ce","size":2008,"data":"","first_seen":"2026-09-02T13:21:58.908415Z","last_seen":"2026-09-02T13:21:58.908415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form-252.pages.dev/sol/?parent_url=crestag.site%2F\u0026parent_origin=https%3A%2F%2Fcrestag.site\u0026config=cfg_f9faa8c6448976c859","fqdn":"form-252.pages.dev","domain":"form-252.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3fbbbb09b6b1e185ea59978ae6fa1fb","sha1":"5f656f624a90ef586c4e89682b60d04a41dd8d2d","sha256":"fe21c911941abc1a59b0d03c8bff6e40a0230f4bb16d5a546ee0340c905aa249","sha512":"30c693aeee4d17707375cb60966f2093eaba59edf9cb101a067a1fb6b5dcd4debe1bd5f0841f537462680e48d50a7e2a9c174ff76f3be298932540e1779f7261","ssdeep":"","tlshash":"aa1110b67184a33806330799b29a4b5bb713194db3052da8b2ce530c6f24412e6a3bde","size":896,"data":"","first_seen":"2026-08-31T08:13:44.423165Z","last_seen":"2026-09-02T17:01:17.321579Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/0fdc42e5-aedf-4eb9-a304-a82df9f3d619","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd53f09fe213950f06276eaca37cdb0c","sha1":"0b8d32bb47148cd64edd2c12c9ac6c2eeaab9031","sha256":"d8cc274a3a6d80e8e4419870daf6c1b6a0679a00024a4daa203b00d7c4fd2ed6","sha512":"0bbd188abcc45f34605ccc70f244b35e234017ad2c5a05cb5fd874c43794bad7dcb6e3c38b1f645ebd2b027ca337ba09061d1f7e7edb9f21b6df5e86c9ef6673","ssdeep":"384:SlYJh+de9hLo3Q+LpKhv0crVGZrbk3zrHOOEXrzCR+a/Xi7b:zychLo31Lohvtr8ZE3zruDCN/K","tlshash":"7bc2172a79d5163715d3e07a921f668af3b280031106c950749cd19c2fb8eb5a2fdbfd","size":26004,"data":"","first_seen":"2026-09-02T13:21:58.910654Z","last_seen":"2026-09-02T13:21:58.910654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form-252.pages.dev/sol/chunks/SF4Q3J6A.js","fqdn":"form-252.pages.dev","domain":"form-252.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8ba5d928c113db2c0966137f16caf4ee","sha1":"1ac29e1230b11a068e9127434b2d17d5c5adf106","sha256":"878eb8092e4f5e9ebf70e715c965dc7d0ecc6f16a8ac9300fef02f56d2d34430","sha512":"88e57c5d28adbf945d25b8f890955718c7872f6fe37f88a5779c87def39b747fb4e7becc07149d178ff62fb5b117eca6c561a39eb161fb2dd9fbb9d3f11f2a48","ssdeep":"768:N5002J9FQ5TITpwqT9uKTSMfL5rNRDf/zeV2NXtvF0TWYekV0LnjProF:LQ6N0pFTYKTZzRzhNXzDHr8F","tlshash":"6903e9913791b072c7af14960826440bf1b9ec71549d081df5f4c8ff3aa48989afaf3a","size":40677,"data":"","first_seen":"2026-08-31T14:51:07.889578Z","last_seen":"2026-09-02T16:59:52.677826Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/tracker.js","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ed42647955a98eab980ef9a40d0b9d4","sha1":"6c408cd8b95c4eb15ab3740d25351cae584d435f","sha256":"92da1b22429c1782625709ffbb46355250da38c971da8d3020af08e60e64303b","sha512":"4499a6fd861caa17561834a57815172a41f42ea8435caaf08c40328956e60f6433ae20a8f294af90acaa07d8c7e7f650ab79841fc676032f463c782983d3ea18","ssdeep":"","tlshash":"a681a59575b230ba41a3902b611726022732505231c7c9a9be7c6a001ffdb7912bbfcf","size":3995,"data":"","first_seen":"2026-09-02T13:21:58.794109Z","last_seen":"2026-09-02T13:21:58.794109Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form-252.pages.dev/sol/chunks/Q7NZG6HD.js","fqdn":"form-252.pages.dev","domain":"form-252.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f87c6fa669326683a03be1bec3c91afd","sha1":"c15e014b341412e25d5200d252931c033f67f01a","sha256":"ed8d2f78b2b2800173a481835cdb331dbb2f9ecb260463ebda18f4c992f2dd37","sha512":"678f4ecd142f858debda7f411f76878a9e08686a307035873129c5795dba89a0d7d4f0ac46d18a0bca718447317f4cc2551f4b1e60436947711009b058b3bea5","ssdeep":"192:8C0u+750aShlSwxc0AMXhSTieWFylMFst0EDmTKYG89HV8WJ/U:Mu+7CauMZ0eNMKPUDLJ/U","tlshash":"cd12d790135a60b343ee22810467a8c6f1b1d47d1284085ee95a49db7ff4afc9febb74","size":9034,"data":"","first_seen":"2026-08-31T14:51:07.864722Z","last_seen":"2026-09-02T16:59:52.62387Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form-252.pages.dev/sol/index.js","fqdn":"form-252.pages.dev","domain":"form-252.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8468621c725675bb39d0d3a20e5af93","sha1":"bc1c3f0d1ae3d31e6e8211d22adc0c934a944cf2","sha256":"e3b7e4df016b3d9fcb17ed28cbe08de061cc8b82021ba38c0a72ea3006dabc9a","sha512":"7057bf218cdc7dab5976cb085a0d00af7ccf9a5f11eed4865dc0d968fc29b0740b08783c27d052b20538c949ba3022f778ed21738c29a622bfc828c16975be84","ssdeep":"6144:f34hijvSb3wMK2dtOHhwIeZ00u/1/sI7vLkz:fox6uZ00K1/s5z","tlshash":"44649fb17374323a839b429ef9261190f23658b55008407cf7ec995f6a4ddc9aabef70","size":329768,"data":"","first_seen":"2026-09-01T19:47:50.145891Z","last_seen":"2026-09-02T16:59:52.624956Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form-252.pages.dev/sol/chunks/HQPNICZZ.js","fqdn":"form-252.pages.dev","domain":"form-252.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bf2752f5c8f1201ab6d2fab68e0ed455","sha1":"43fb49f9e54e972acbe0bd212076de828be25e26","sha256":"d95731dc9d19e20d77068d0d25187300c1beae20d6a5682da5547c694914a73e","sha512":"2b73557fb533b6b71e9907f9bbf7cbff9e72cadd29c939fb2cda06e18c6c086d90b82672f35acf967e78d598f7d7f15ed2be33a5c00a8adc7fd6877c7db92f61","ssdeep":"","tlshash":"f311eff739a9ebb301945585c43c5648e519393d613cf5f4a394c9f0969009b60fee33","size":891,"data":"","first_seen":"2026-08-31T08:13:44.413238Z","last_seen":"2026-09-02T17:01:17.289874Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/k48nb6qnqtd.27cf0nav.js","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29e1257e7682055acb5dd7cfd4d3ea6e","sha1":"606720fd1807cd219f838f0ee09db4c707601291","sha256":"586e1cc3769b8ed6ed760a7b2f04e04391ac47460f1c36f98f17e4a057d06326","sha512":"dcf5fcee80b55a63ce4bf84789cf969f2240501193c4a93fc7655815810e2265eb6bc1f138589bec8801bee7b3fd6fc5aa42a00af0b4d9fc6a6d6e332c7b1a8e","ssdeep":"768:YSM8MOLrPFfs8c7hXYh3pVh3pimy5BFW7BH3AFQBxgyYiFV74B8:3M8MYZE8c7hXYh3pVh3pimy5BFiAFQBb","tlshash":"4633cdf85727ead5e628531e97cc6b0b4e73330686412fe0fb08a98996ce711b1fc456","size":52329,"data":"","first_seen":"2026-09-02T13:21:58.855897Z","last_seen":"2026-09-02T13:21:58.855897Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-02T19:06:52.622571Z","times_seen":429185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"","filename":"https://form-252.pages.dev/sol/index.js","line_number":4,"column_number":38484}]},"http":[{"url":{"schema":"https","addr":"crestag.site/track.php","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:21:04.868Z","timestamp":1788355264868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"POST /track.php HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nContent-Type: application/json\r\nContent-Length: 326\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":326,"data":"{\"visitor_id\":\"964d8b3f-655f-408b-83df-923154b604c4\",\"session_id\":\"c6bf8960-24fe-42d6-b75e-9161d3d500f0\",\"page\":\"https://crestag.site/\",\"referrer\":\"\",\"screen_width\":1280,\"screen_height\":1024,\"language\":\"en-US\",\"client_timezone\":\"UTC\",\"action\":\"heartbeat\",\"duration_seconds\":10,\"max_scroll\":0,\"click_delta\":0,\"section_delta\":0}"}},"response":{"raw":"HTTP/3 405 \r\ndate: Wed, 02 Sep 2026 13:21:04 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ofujV0XN24Z5y8Flhz7G9q%2F%2FRkBdzvl9fLgIkuhB%2BR4SYkpATUkisxTDffBRI7pPordHEx6ZXZxXmXYj%2BuwaID1ZColJw5Op%2BgwcFBuLqmjWLOv1GGSHW8wrSTAHr1Y%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a34cd0d57be15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1466,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/thecard-freeze.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.365Z","timestamp":1788355254365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/thecard-freeze.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 308856\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pCxjYzGYoWGzQM5AGWBh2dvlsk6hNXaZKiLmF95UkdHH9FIIvBv5V5iAYGmcHyfHuTWirFbcQgGJotU%2Fs5PkooKftMxIlN4jl7IV53U%2FvVJl5lzxFiFsvRN%2B6NMt544%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a9283c21e8deaab5df7bde807c2f2e6d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8a45699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308856,"size_decoded":309655,"mime_type":"image/png","magic":"PNG image data, 360 x 456, 8-bit/color RGBA, non-interlaced","md5":"6f679bdd185dba33423ca8864a66fe05","sha1":"e9b0dcbe1790f40ef6cf4643c4ba8df4c6b2fb81","sha256":"425e47098a33e0c2a7ae2e65513bbaad0042931fcd8f7e1456f5d271d55e6c9b","sha512":"42167a116fb859daffb55a4c3940cca45e3e0f55d291fd8871fd6996a48063edd22866d6ba034d30f60088bb1e328679481e209560675749bd731f8b1e03082c","ssdeep":"6144:4P0by7eXm4R4lgbBd+i9dY7HkUCbpz4u+LbnNXKrZzkV9cAX4br:48+cDpr+iLcEU6R4fDN6rZzkzXKr","tlshash":"bc6423e92f4ca199dd435ab0bb441f869fa003cb5fad4804ad756753aec2f004d62d7e","first_seen":"2026-09-02T13:21:58.782381Z","last_seen":"2026-09-02T13:21:58.782381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":523,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/thecard-material.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.368Z","timestamp":1788355254368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/thecard-material.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 418545\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1lccPKBDJIH7PgxeNhYhjEdONkb0E%2BIQlsrpE%2FhgvCSSKcVdnZCzYMzDNH2rtpJTqqIkqF%2BlaOfx6%2FsmRkS4Ww1AYB5Qed1MdZ7a999Kkb6xdZL4bfkFWeAvryY4nHU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"df9fdf8e536e46d9bafcd91f077f10f8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8a85699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":418545,"size_decoded":419346,"mime_type":"image/png","magic":"PNG image data, 570 x 455, 8-bit/color RGBA, non-interlaced","md5":"d0d8d3e569206aa014a1cd4a5410752f","sha1":"2349ef219cdf68d32c70e7a49706dbb40b20e7f1","sha256":"7a4cab94227e367bea5c3a2eddc6bfe0c25e974170c9c021fd76095968d4ad44","sha512":"86a68d53cf52288e8f06e6a0b4c99b63156c672c44a14b27dcc5c1fd12cb390bb745196177976cab8dde819527298124faf6d100111c19b24581cddefec8e9f9","ssdeep":"12288:1ZCulUVqFER47jo2t0LlMw1PXNl+Yh94lPp:13UoE8yP1PXNlzbox","tlshash":"9d9423eb7db18dcbf80e6130d99649318ab1828030ca58cdf1b64e1ad65d74b6246f9f","first_seen":"2026-09-02T13:21:58.783815Z","last_seen":"2026-09-02T13:21:58.783815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":799,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":550,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/simple-icons@v16/icons/telegram.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.387Z","timestamp":1788355254387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/simple-icons@v16/icons/telegram.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 411\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: 16.24.1\r\nx-jsd-version-type: version\r\netag: W/\"2e6-AnwhvypDeZB+7Aiuo0JsN1SOnNY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\nage: 567\r\nx-served-by: cache-fra-eddf8230046-FRA, cache-bma-essb1270056-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":742,"size_decoded":1140,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7bb1c357fbf52fee0c2b82b190f055c","sha1":"027c21bf2a4379907eec08aea3426c37548e9cd6","sha256":"147fd8f8923e7e5f463fe98c0eb9913bead6b2ae59935728cda141002ec8a7c9","sha512":"8dc1f2393ed73f099b249432e268a9780b3ccb2cd3e6c7395a5427aa71c9258ab841937135fb2b04271b993970309e25b7ae1ec857824a04478975d5b0837c2f","ssdeep":"","tlshash":"9d01dce70a10b00ca2cae91e4f7ece80174f683a30c300905edd83894057882ff0ba04","first_seen":"2025-04-20T15:17:00.710523Z","last_seen":"2026-09-02T13:21:58.785922Z","times_seen":182,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":12,"dns":0,"connect":8,"send":0,"wait":16,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.1.1.1/dns-query?name=_r.noir.black\u0026type=TXT","fqdn":"1.1.1.1","domain":"1.1.1.1","tld":""},"ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:55.700Z","timestamp":1788355255700,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare-dns.com","organization":""},"issuer":{"commonName":"SSL.com SSL Intermediate CA ECC R2","organization":"SSL Corp"},"validity":{"start":"Wed, 31 Dec 2025 19:20:01 GMT","end":"Mon, 21 Dec 2026 19:20:01 GMT"},"fingerprint":{"sha1":"F8:86:35:01:72:60:D4:0B:9E:B4:17:BE:E7:37:37:91:1B:63:0E:59","sha256":"E3:B0:28:26:78:9D:65:3D:22:4D:3E:DA:CB:E4:E8:77:CB:72:86:FC:4C:92:26:72:F6:22:67:41:CA:57:AD:65"}}},"request":{"raw":"GET /dns-query?name=_r.noir.black\u0026type=TXT HTTP/1.1\r\nHost: 1.1.1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/dns-json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 13:20:55 GMT\r\ncontent-type: application/dns-json\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-length: 200\r\ncf-ray: a34cd09c3f0a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":474,"mime_type":"application/dns-json","magic":"JSON text data","md5":"0721dfc58af3d5c92ec5b4134bbe1ac4","sha1":"1f3714e7d8e5b7251074c5f0542e55be6c3b13c5","sha256":"050192a443887747b350394653bc84d4dab530206f76390a08c81d420bba5e75","sha512":"95116c58341d10529e086b989a3183589de7a28ab3e1cb1582dd7e698ccf3efc75d031de95aeae5f078e9408dd48b46176c7b49b20f41ae2df5633f5955b276c","ssdeep":"","tlshash":"5cd02288118240b8a8469304c4c30247efaa6262b02e2ca4ab002f64c38f162808012f","first_seen":"2026-09-02T13:21:58.787954Z","last_seen":"2026-09-02T13:21:58.787954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":59,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form-252.pages.dev/sol/chunks/SF4Q3J6A.js","fqdn":"form-252.pages.dev","domain":"form-252.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form-252.pages.dev/sol/?parent_url=crestag.site%2F\u0026parent_origin=https%3A%2F%2Fcrestag.site\u0026config=cfg_f9faa8c6448976c859","date":"2026-09-02T13:20:56.960Z","timestamp":1788355256960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form-252.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 02:19:27 GMT","end":"Tue, 01 Dec 2026 03:17:59 GMT"},"fingerprint":{"sha1":"03:81:20:12:28:55:95:A9:AA:1F:7F:14:E6:B0:7B:77:ED:DA:01:56","sha256":"3A:C5:DF:39:25:E5:80:02:5F:CD:4B:31:44:B3:59:B4:AF:9E:CF:C8:35:E2:58:B8:2F:68:87:3A:3E:A2:5A:BB"}}},"request":{"raw":"GET /sol/chunks/SF4Q3J6A.js HTTP/1.1\r\nHost: form-252.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://form-252.pages.dev/sol/index.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a34cd0a40fe18be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ve8vtjEmk6lb96A4Icr7%2BvRqpk7tGwcv0kAgt%2FBcnxY%2BqZm%2BXNN%2BNs%2Fj3g5aT28rGLf33rl7EEA7Dvz4baJLcaSkcKxMxGJ%2BPPhh2htzyPja4NY1Rm4HUFtIFWG4kY1xn1ZUPAPls4xTtiNnqi8IbKWCf6jm%2BaYUsMj8\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"3acef8b1685895f4250fcb6a723fa3f5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40677,"size_decoded":18187,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40676)","md5":"8ba5d928c113db2c0966137f16caf4ee","sha1":"1ac29e1230b11a068e9127434b2d17d5c5adf106","sha256":"878eb8092e4f5e9ebf70e715c965dc7d0ecc6f16a8ac9300fef02f56d2d34430","sha512":"88e57c5d28adbf945d25b8f890955718c7872f6fe37f88a5779c87def39b747fb4e7becc07149d178ff62fb5b117eca6c561a39eb161fb2dd9fbb9d3f11f2a48","ssdeep":"768:N5002J9FQ5TITpwqT9uKTSMfL5rNRDf/zeV2NXtvF0TWYekV0LnjProF:LQ6N0pFTYKTZzRzhNXzDHr8F","tlshash":"6903e9913791b072c7af14960826440bf1b9ec71549d081df5f4c8ff3aa48989afaf3a","first_seen":"2026-08-31T14:51:07.889578Z","last_seen":"2026-09-02T16:59:52.677826Z","times_seen":9,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/thecard-numberless.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.362Z","timestamp":1788355254362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/thecard-numberless.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 289025\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EhLcQXXHVDqDCCAihFgaKE6RfnhBSjas1LBLV4czHpJXDR5F7lRFxkyept9iUIuck%2F2T97vUpdZUNTEYlwYY1C09N%2B0Q%2Fno7%2B6gUIc2RuTg1%2Bfi%2B83%2FhqCyM5Zi1sbo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9b89172c1a48056e157696b10754539f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c88f5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289025,"size_decoded":289832,"mime_type":"image/png","magic":"PNG image data, 412 x 474, 8-bit/color RGBA, non-interlaced","md5":"ed3bcc370bd3497ac40d5f38534d42ea","sha1":"b5394fe11111222210d666e47997727c73dd2624","sha256":"68ea11fd46e902e450bca4155fa789cd5b275a939a698620d8c844e60c3e0cb2","sha512":"a706c35cc50c649a148f1a24ba5edb342d469149397b690340e15275e26a76fa0ae10657044b0d3944ef89050a407f054f9467566c260216d1d5d949461875dc","ssdeep":"6144:M7KXxuOtXU9nSoBq6GtuA10mMqi2Y3mpjUE8gsWl7wHv8s:M7KBzNU5SoBfGtDuiljUEjD6HZ","tlshash":"fd5423b7c6996043cf0847f9d2e4a82e3d7476967dc68c76416fa038cfdd7282693a24","first_seen":"2026-09-02T13:21:58.789943Z","last_seen":"2026-09-02T13:21:58.789943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":518,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/finalcta-support.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.383Z","timestamp":1788355254383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/finalcta-support.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 303810\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EUsJA7vmn8xIGDTrfiJW1x%2BWErYZJ%2BRlIJ0kwGbt%2FQyd32dNudxwiMPGXc%2BFfQvZyyaislkPnf5Gpqio5u9JpCbEurX4svRat8dr0Q5Wyued26zil2IiSKC4I6oWZx8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e8440f44f7c20ff6b9ec6e6511d149a9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093e8d05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303810,"size_decoded":304611,"mime_type":"image/png","magic":"PNG image data, 503 x 450, 8-bit/color RGBA, non-interlaced","md5":"8b7ac2c4fb7a03851d0901c49ebe3da7","sha1":"06525b4e494c4f6ef8fc800435d59bf9d5f1aa9f","sha256":"0e0b98c58a34fb4001374a49c4ae72d2299c9bb77070706322889ef76366eabb","sha512":"fa9ae5b369ce2f225b1aaa9edcca4960813be158a7e211b3ac09353a079489f861408dc4394171e817e114466696cc5822ef510b955210ad90976902f4779d02","ssdeep":"6144:Dj1c1U8gIguMvi5pwGMCFHQqn+Pm0ILYKHYl1udINaY4l/vu/v2g1eo0SVA4ei1q:Dj1c1UtIgmpJFHQq+Pm0cY5gltvK+qXW","tlshash":"135413ea7d30a170dd58c670ef8034a7952af4e2707a27c1b06a1659f789f25278e7f0","first_seen":"2026-09-02T13:21:58.79213Z","last_seen":"2026-09-02T13:21:58.79213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":496,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sol3.noir.black/solana/v1/config/bootstrap?config=cfg_f9faa8c6448976c859","fqdn":"sol3.noir.black","domain":"noir.black","tld":"black"},"ip":{"addr":"65.109.115.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://form-252.pages.dev/sol/?parent_url=crestag.site%2F\u0026parent_origin=https%3A%2F%2Fcrestag.site\u0026config=cfg_f9faa8c6448976c859","date":"2026-09-02T13:20:57.206Z","timestamp":1788355257206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol3.noir.black","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 08:49:36 GMT","end":"Fri, 06 Nov 2026 08:49:35 GMT"},"fingerprint":{"sha1":"E9:8A:5A:51:C6:99:92:07:53:B8:9D:A4:22:6D:86:98:4F:37:95:FF","sha256":"8B:5F:88:17:7C:1D:4A:2F:D8:D1:21:98:AA:41:23:16:4F:7D:53:9A:9A:B2:C9:A4:11:84:24:71:B6:02:0B:D7"}}},"request":{"raw":"OPTIONS /solana/v1/config/bootstrap?config=cfg_f9faa8c6448976c859 HTTP/1.1\r\nHost: sol3.noir.black\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-noir-attest,x-noir-site\r\nReferer: https://form-252.pages.dev/\r\nOrigin: https://form-252.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-headers: X-Config-Id, X-Client-Source, X-Fingerprint-Id, X-Unique-Client-Id, X-Data-Check, X-Session-Id, X-Noir-Debug, X-Noir-Debug-Token, X-Noir-Visitor-Token, X-Noir-Session-Token, X-Noir-Attest, X-Noir-PoW, X-Noir-Envelope, X-Noir-Site, X-Request-ID, X-Correlation-ID, Content-Type, User-Agent\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Noir-Visitor-Token, X-Noir-Session-Token, X-Noir-Client-Blocked, X-Noir-Block-Reason, X-Noir-Block-Stage, X-Request-ID, X-Correlation-ID\r\naccess-control-max-age: 600\r\ncontent-security-policy: default-src 'none'\r\ndate: Wed, 02 Sep 2026 13:20:56 GMT\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-correlation-id: corr_2c4411af3688e9e3\r\nx-download-options: noopen\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: corr_2c4411af3688e9e3\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":1151,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"sol3.noir.black","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"sol3.noir.black","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/tracker.js","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.317Z","timestamp":1788355254317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /tracker.js HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpIVF7nKaxhMr2r5%2FWweXTNQsVnE%2FIVGYehaZOZpPrPYvoF6vEvdjMmg%2F4LHFPBDSgmMuVR9oGYzlHNfll%2BX7jjMvOg1EAhaap0FgryaK%2BMoiiV3byyVBUHv9IM2BPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"823a99d4ba7f39401224dccefe0a7bd3\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: a34cd09378235699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3995,"size_decoded":2487,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4ed42647955a98eab980ef9a40d0b9d4","sha1":"6c408cd8b95c4eb15ab3740d25351cae584d435f","sha256":"92da1b22429c1782625709ffbb46355250da38c971da8d3020af08e60e64303b","sha512":"4499a6fd861caa17561834a57815172a41f42ea8435caaf08c40328956e60f6433ae20a8f294af90acaa07d8c7e7f650ab79841fc676032f463c782983d3ea18","ssdeep":"","tlshash":"a681a59575b230ba41a3902b611726022732505231c7c9a9be7c6a001ffdb7912bbfcf","first_seen":"2026-09-02T13:21:58.794109Z","last_seen":"2026-09-02T13:21:58.794109Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/track.php","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:55.110Z","timestamp":1788355255110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"POST /track.php HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nContent-Type: application/json\r\nContent-Length: 326\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":326,"data":"{\"visitor_id\":\"964d8b3f-655f-408b-83df-923154b604c4\",\"session_id\":\"c6bf8960-24fe-42d6-b75e-9161d3d500f0\",\"page\":\"https://crestag.site/\",\"referrer\":\"\",\"screen_width\":1280,\"screen_height\":1024,\"language\":\"en-US\",\"client_timezone\":\"UTC\",\"action\":\"event\",\"event_type\":\"section_view\",\"section_name\":\"heroSection\",\"value\":\"visible\"}"}},"response":{"raw":"HTTP/3 405 \r\ndate: Wed, 02 Sep 2026 13:20:55 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ue3DTeEgREgREzQjsmuTHdf3dk0RgCRqxrPrrIY%2FeTLnkioUBPl%2BpSwf8djrZXRDbP7JIBSKgvoPsXkoLEg%2FWjyeVDjNjV7O8%2FneuH7IG3hLbL%2Ftekn8lAeBL17QPGY%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a34cd0987e755699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1466,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/usercardsol.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.341Z","timestamp":1788355254341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/usercardsol.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1833420\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezVwp5Zru%2BHd0CeE5HZyNRBWTVaruA7QGmnH1sQv7lPWgP333xD01HhObqVsrqNR44IRhpC5m88aS8m9V0vl%2FZG0wkQNJ7KYXD%2F5ebV6jllAi4boXWmIHDyPulu1h2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4475733f522a77a0a5c948622c593686\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd09398585699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1833420,"size_decoded":1834220,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"6172630ef4bfe4f74b0bcac7531ff3f7","sha1":"6a1a8ef01a260939154611ac96084e0cc2268771","sha256":"2b2c3dbcb345f3945e4c7779f04a3ac003b7fb87b3b8e581fb5bc1c3b940cf34","sha512":"e4312830cd409e916de6b8cad9b7e7ea3ad8be14ebe69f00a730bea3d1b584424a2805ee68fac2ef486fcb2add036d1e294092339fd9c62ab2c35789f78a7601","ssdeep":"24576:cgcJdrwOuv99yOTsaXf4gwVMjMNjBNGB6JtHjteIGy7z:fe5whvfyzaP4gYQMNjTGB6zH0IGy7z","tlshash":"4a2523ea82c21ecfe8e57c34cb645e981d783a7dbd8d11c66405a030fd48bcae5865ed","first_seen":"2026-09-02T13:21:58.795781Z","last_seen":"2026-09-02T13:21:58.795781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":852,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-wallet-limit.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.345Z","timestamp":1788355254345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-wallet-limit.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 324055\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xT4GIxrMRI%2Fk5QGwzkxrhg7L76Bz94hNmfmgI73ZeKpDSb72DaZ%2B8H25aaBrluXax8yajMlbQiWtrne0V2banxXWMskVGm1iLpQYRZu2T1tOfD2Z%2FZQ180NuJTImKTc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8a794e7a0a55b43a8ba2efd7aecd7f20\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093a85e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324055,"size_decoded":324854,"mime_type":"image/png","magic":"PNG image data, 518 x 544, 8-bit/color RGBA, non-interlaced","md5":"eda6f58cdc80d865e501cd19b73f3f27","sha1":"4d9e8cc8fe2ffc68c8e072ed64ca55572134f949","sha256":"81f709079b6140ccdebe5f1d666cda5de6519e5e11c6a3aaf491610715442039","sha512":"c0e63af215ecc72543fc2a9c54adbaa812809b86c67bdc010fc00e8bb094e4d02db598340cc624df281bbb5cd3c81503c0f02cc9ab81a58b281ebd1bdf327b61","ssdeep":"6144:p+0tY6z/u4OWqSS09XfjKMcL9fc4Lo3CL4aFSfzQeOj:p+16K4OWjSsXUdo3Y4fzQlj","tlshash":"5864237c0a6230cafa7172316badf506ece262f77c30b54930d5c4795e86b5825a723d","first_seen":"2026-09-02T13:21:58.797992Z","last_seen":"2026-09-02T13:21:58.797992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":641,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/how-virtual-card.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.352Z","timestamp":1788355254352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/how-virtual-card.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 242710\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNTXFcHQRCJzuMwRv%2FaM2EuRiFYRqxs3Ew4zzWTi0BirzSXwqEiBj3rB9BkC3Ed0Bc3q5THwEk%2Buy0QKV1Pfe%2F03EiG9Kp8uQgV%2FnHVz2d0nvggX7Xh2BxevwsnZSxE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"65987d6dc3765e542c2f4dac5957cb37\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093b86d5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242710,"size_decoded":243511,"mime_type":"image/png","magic":"PNG image data, 388 x 543, 8-bit/color RGBA, non-interlaced","md5":"56e288c048074cb746718bc570ee1058","sha1":"ef15bd8c1b751d791fd874e5e8aafd76584b11e1","sha256":"d82f7afd2cdcb90b25c3ebc061f676fb803e9e29c2548008105ca10db6e74cfa","sha512":"1e3a9f38c8eaf4953da5967822b913838543ee389be042e72179a2e9e20449301a3190d6dedfca34db3fb0f5d3d24c0f940ce3a71100b1420df5ad338dc47a46","ssdeep":"6144:bBQJ3XgYbKXWJRywdjiuOeAu1LQHZlNdPm5A:bBy3XgYs4Fxiw/LwVhB","tlshash":"753412f22651bd41eac1423282d788f7daf09ee72116098531f1a6eccc21f969bd752f","first_seen":"2026-09-02T13:21:58.79941Z","last_seen":"2026-09-02T13:21:58.79941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":563,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/how-daily-limit.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.355Z","timestamp":1788355254355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/how-daily-limit.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 263851\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cVUE0h0ZL08uUdgAHnsN3Jbpn3I3FFIzdRdV4Vs5GGm781vSqU%2BNfkRkcwQQgodmXK7R7xY%2B2IpSnjjNa3qKI4MXZwvgMR9tRIicHYZ%2FzLlZVHNEEuyjKvjLXwZ0s3g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"accc3fbe4a7b3592f8ddbba104b2b41c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093b8735699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263851,"size_decoded":264650,"mime_type":"image/png","magic":"PNG image data, 412 x 485, 8-bit/color RGBA, non-interlaced","md5":"486722755438c6ef0b3ecb24ad249ebd","sha1":"b2e85abf7e935974420a8a136d0e5ff04016afea","sha256":"12de6b9b8a02cc832f593a01953fdaeea9deec220093281b3e2ddbf2f2e12c01","sha512":"f1287082ec89ea377a35a9175c7c3b440509665ef7df891990d42f3c2662a92e6192846e4e7803c34d438303db6d46d40c307ab096d03f7e1b883b92bbbff33e","ssdeep":"6144:weXAx4BYqYYUkQ2Sj2QGDSU3UwXF9P1FQaIb:wLx4EzsSjjGDSU3PXF9Pzgb","tlshash":"484423df2fb0a9f5cbc5b772c004851a9a7172732ec02541c146e7536da9a31688fe6e","first_seen":"2026-09-02T13:21:58.800854Z","last_seen":"2026-09-02T13:21:58.800854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":531,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-subcards.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.375Z","timestamp":1788355254375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-subcards.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 255833\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85DO3RICGNB3f0DOI%2FeUUanETUziwZJEZZVSjzoe6mWvfyNfK9xRr4OrpY03MzgmM%2FYaEsQ4ZZGjfUyEjJW8PF0EVRQzbpmxe0GuI2Mo7bElXa3JZf0uZ8IBWnmjiwo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9bc73b84d19462326c6dbb63935dd560\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8b25699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255833,"size_decoded":256630,"mime_type":"image/png","magic":"PNG image data, 408 x 421, 8-bit/color RGBA, non-interlaced","md5":"0001d9b1742906f96b8f2cf2a3d551b9","sha1":"886a606de3a6a1f23de2a81308d510d03ef81bbd","sha256":"14377634afa8d645267c964abb08875e0ae6df0f5f82b87d77cb513cb71f4d1b","sha512":"05929717d4261ff75905752d96fb6476c61d3f9793a850c08df390bfcb02ba74563983959fc55d4d6b027881133b2789b130948161fed90ec84337eed0fcc94e","ssdeep":"6144:u2PrOIcdWeDqRZZRuLLoKZd8AKf58CZvOc71nDJa5:u4BcdzDYZYLX8/JZ71K","tlshash":"894412ed1b384403effa43fa0b7a0045b9b819db60d6c249ad1a021ec6d6740f75e76b","first_seen":"2026-09-02T13:21:58.802035Z","last_seen":"2026-09-02T13:21:58.802035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":473,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T13:20:53.496Z","timestamp":1788355253496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIPouU%2Bc9AaBhm%2Bp1dT6EOay8YdkIDk5t8VN8zRDCCow2KY8ifAnCpuc2D7Inc%2BqWwvaQWDy%2F0yWoC%2BkPFGgset82K2WJVXX2e0pbYXvFX%2Fo7a8sKNCYegO7g%2F8385w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a34cd08f2ad05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230437,"size_decoded":39411,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"1c1b203f2415a7a864bc5026395dd870","sha1":"0d1dde3b1f8317348f4e9ff42675aa5d405731af","sha256":"b8caa7faf55830462fcca1c33107af104cba7e3d58150977e1e2ed2c2eb99a15","sha512":"69884732ab60277bf81a366d01775484db53b5ea835d824997a7d4fcbb5093a39775f671e82cd9822e2ab781a52364d7b0359a4bbc1ad4a64c594d14e61c8a34","ssdeep":"1536:cHzuTzJO0jbzdQhhIP91F53Mn9MpnJjWn035nQ51nqgRP:cHzIbzoIP91TM9MpJjW035QPqC","tlshash":"fd34eaa9a547102a4233c7655fa35b1dfba08053d60602a93fec534b1ff6b89d253bce","first_seen":"2026-09-02T13:21:58.803176Z","last_seen":"2026-09-02T13:21:58.803176Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":95,"connect":24,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-physical-virtual.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.343Z","timestamp":1788355254343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-physical-virtual.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 380202\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZcOO9Dciq%2B6AEiBx5c7vwy%2FKAO8k9FpC4Z0yf%2B3uhxg%2B9dy7FcRKKIoKexlKnP096Iz%2FPqpgjZCj6THlmtSyA60EIn7Ucl53p2HeioyzF5yFe2cjNVsl0cTl3fHOXcE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7e06bd3685ceb1238fa352f20cbadff7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093a85c5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":380202,"size_decoded":381005,"mime_type":"image/png","magic":"PNG image data, 564 x 540, 8-bit/color RGBA, non-interlaced","md5":"9359f28590f9ccad2e906ebeafd29c3a","sha1":"1cbde7c6bc792bfd51f28aa9a594e81c718f0d5c","sha256":"9db96ce31e46661c1732094c036b41d7d86cf2cf9f6fb1c3a71224bbc4ee221a","sha512":"0ac8431de761e68b4ed8720b4acf5a0ff55d4d3ec5347207c42714b176dbd6d94e0cb0e02cb9170cd335f064041ed662c81c35be993aaf9ef454122cea67371d","ssdeep":"6144:E6+ZFUGZXtfnokJke0Fa8q3anghLIa7wWniI7/Vy7KKdwuwcsvBtTl:E6+/USd/1wsnaghhkWn+7fLs5tTl","tlshash":"278423ad7b27d0eae701877749b1787c4fe05e8a7b00594ee84a91bc3516fb4110a8eb","first_seen":"2026-09-02T13:21:58.804272Z","last_seen":"2026-09-02T13:21:58.804272Z","times_seen":1,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":614,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-limit-follows.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.347Z","timestamp":1788355254347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-limit-follows.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 343995\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bW26tDFYT3005JeSMSugaisBlq1hLd8Wy9INLNrtga5zYNQDyzYoezGd64OIiXaWac0cn%2B7zCeQczxhnu4yc35Rb4DuKb6KdAdyAkn09VCspix4gLk7nL3j0m64o6uY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"dcc2db4fad7eb52606300fde92dc206f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093a8625699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":343995,"size_decoded":344790,"mime_type":"image/png","magic":"PNG image data, 568 x 505, 8-bit/color RGBA, non-interlaced","md5":"b793d080803a029416f90e44fab2f35b","sha1":"25d4271b7773940b7258c42da8696f304b3b0bfa","sha256":"9a03147da5e16537b4ff119ab4e746de827080cf4a36d647a92e10eec33cd9f1","sha512":"ba7b376f815ca111b65528cb3f7289f057c055d1ea3c39d501532596008b42a008d0d654dc828aaca8153ce781a9c31bb17b6609777f2ab81e3c5484e2b9aca3","ssdeep":"6144:g5OUdPwruUKBwvdZF5pU4RYR+JWSBZxeV2KbRwOS1AUXBPPWo1WV:gTRHIZtU4RYYQ6LeVPbRwwUXcV","tlshash":"fe7423927d78b0efcd0e03325a664633ed7459867698058990baddcc3b58ebf602607e","first_seen":"2026-09-02T13:21:58.805424Z","last_seen":"2026-09-02T13:21:58.805424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":592,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/finalcta-transparency.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.382Z","timestamp":1788355254382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/finalcta-transparency.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 319485\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Az0ko3UeUHG0Hh%2FPluBS0zWDo8aySp1NE24TW0T6SC7VfTVmjl%2FoV83Ni3oU1Oz17VOtNaCjo1JZ88vcF1NLoF9viZtvZCyNBoGV%2FrumY7CtvKYYjEQ7OZv%2FPMMk5w0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"05b2b8d93a947117d37aad788ad28e6f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093e8cf5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319485,"size_decoded":320286,"mime_type":"image/png","magic":"PNG image data, 477 x 436, 8-bit/color RGBA, non-interlaced","md5":"9f850b1723b18889cb3657d2447315eb","sha1":"be958730f9f22d5ab6bbfdeeba16a550990d1a6e","sha256":"d0d9677d3477180acfab2543fc97e5055c4b7a30e7485cced6924894ffa86c0e","sha512":"a5c1983652fcbd11c59abb6f504f72bf444ae46978be541d1e6541766c8602bdeb58997bca949ca8538a6d463dfcbfe460bf0ccc349a2415b7b1c3da19a62247","ssdeep":"6144:68Z5raMXiKZQ1RxIJU5+MzerD4YXXFD8OB8hGNmJLOUJKO/I4a9WkYv:68Z5raAiKMRie5+Mz6DlXtpmJL1/5uc","tlshash":"b86422b66f309194dc7dd5b4aa91ba1bb630c3a17c432d4641fe2eb4dd9036c3ab205e","first_seen":"2026-09-02T13:21:58.806525Z","last_seen":"2026-09-02T13:21:58.806525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":510,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/finalcta-community.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.384Z","timestamp":1788355254384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/finalcta-community.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 286912\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mn%2F2T4xbjCmANJbRa%2Fopz9blrdNj5IavOrum2tJWGL5wT6rxhAka6v1j83u9tCcUIn%2BCGVZEg4jk8iYF7gg%2FuVdYwmLmKfBpafYjEf1Y5d6moROJiuuzGBZMtCelhps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2c223eef31209fc7a3bb27a4100aa132\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093e8d25699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286912,"size_decoded":287713,"mime_type":"image/png","magic":"PNG image data, 462 x 435, 8-bit/color RGBA, non-interlaced","md5":"b1bdb554de2025d42900bab992150c1d","sha1":"2d4dfbd9afc7a627c56415896bfd5ceba1c4671b","sha256":"8a315c851784b21f1e502f3a0ffd7a26ce9d726d80ead4969108c3cb0d3282dc","sha512":"07d08430f3ad6eb5df8eff1d2129be4d6128cead5f98f8ee64c011fc0f88eccf29d180d444321f7cfbdfbe7097c2f19d362c1d0ffd7a30857eb6b6b42d3f9bd6","ssdeep":"6144:gEEOTwvbWherkLdT36SQPg6ODRkppSj9Zxtkhcd:gEE1bOeruQg6eSpSxZPkU","tlshash":"d75413731f2923dbf84482b54ae593dc5a15e350f38da048e394a6e8c4e8f057a4f77a","first_seen":"2026-09-02T13:21:58.807705Z","last_seen":"2026-09-02T13:21:58.807705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":476,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/track.php","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.904Z","timestamp":1788355254904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"POST /track.php HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nContent-Type: application/json\r\nContent-Length: 251\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":251,"data":"{\"visitor_id\":\"964d8b3f-655f-408b-83df-923154b604c4\",\"session_id\":\"c6bf8960-24fe-42d6-b75e-9161d3d500f0\",\"page\":\"https://crestag.site/\",\"referrer\":\"\",\"screen_width\":1280,\"screen_height\":1024,\"language\":\"en-US\",\"client_timezone\":\"UTC\",\"action\":\"start\"}"}},"response":{"raw":"HTTP/3 405 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVNK4Oz7PBMSaX5sEmoABwJd9zQbQL5uGk%2BLfUHIDfcZSHfOhwUcb1AjYhGu94H4ddACSukP7fKdVJ3BGaUfARasfOURdE9B2qB5OUJFi0PpzCCj9nKAhAi4DEnCs6M%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a34cd0972ce05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1383,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form-252.pages.dev/sol/chunks/HQPNICZZ.js","fqdn":"form-252.pages.dev","domain":"form-252.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form-252.pages.dev/sol/?parent_url=crestag.site%2F\u0026parent_origin=https%3A%2F%2Fcrestag.site\u0026config=cfg_f9faa8c6448976c859","date":"2026-09-02T13:20:56.962Z","timestamp":1788355256962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form-252.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 02:19:27 GMT","end":"Tue, 01 Dec 2026 03:17:59 GMT"},"fingerprint":{"sha1":"03:81:20:12:28:55:95:A9:AA:1F:7F:14:E6:B0:7B:77:ED:DA:01:56","sha256":"3A:C5:DF:39:25:E5:80:02:5F:CD:4B:31:44:B3:59:B4:AF:9E:CF:C8:35:E2:58:B8:2F:68:87:3A:3E:A2:5A:BB"}}},"request":{"raw":"GET /sol/chunks/HQPNICZZ.js HTTP/1.1\r\nHost: form-252.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://form-252.pages.dev/sol/index.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a34cd0a40fe88be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGEq83zLMJMeedGHlurJFVUwOmF%2FWXxaj0gd%2F%2FOTVsXCJNPnADjmJVCFZjfqS%2BsXyJcCfPp9tExZyTDtITrjyeN8FRlqBYe6qOjw8i8FCr%2FRJ3N5ZksSDVombBLM%2BwB2eSQbll2yzeJO6BcmPA80adb6OFkV14cE7D0G\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"4126f79be9c58444faf60de295bff2ab\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":891,"size_decoded":1289,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (890)","md5":"bf2752f5c8f1201ab6d2fab68e0ed455","sha1":"43fb49f9e54e972acbe0bd212076de828be25e26","sha256":"d95731dc9d19e20d77068d0d25187300c1beae20d6a5682da5547c694914a73e","sha512":"2b73557fb533b6b71e9907f9bbf7cbff9e72cadd29c939fb2cda06e18c6c086d90b82672f35acf967e78d598f7d7f15ed2be33a5c00a8adc7fd6877c7db92f61","ssdeep":"","tlshash":"f311eff739a9ebb301945585c43c5648e519393d613cf5f4a394c9f0969009b60fee33","first_seen":"2026-08-31T08:13:44.413238Z","last_seen":"2026-09-02T17:01:17.289874Z","times_seen":11,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/track.php","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:21:14.919Z","timestamp":1788355274919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"POST /track.php HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nContent-Type: application/json\r\nContent-Length: 326\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":326,"data":"{\"visitor_id\":\"964d8b3f-655f-408b-83df-923154b604c4\",\"session_id\":\"c6bf8960-24fe-42d6-b75e-9161d3d500f0\",\"page\":\"https://crestag.site/\",\"referrer\":\"\",\"screen_width\":1280,\"screen_height\":1024,\"language\":\"en-US\",\"client_timezone\":\"UTC\",\"action\":\"heartbeat\",\"duration_seconds\":20,\"max_scroll\":0,\"click_delta\":0,\"section_delta\":0}"}},"response":{"raw":"HTTP/3 405 \r\ndate: Wed, 02 Sep 2026 13:21:14 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3uBxpnl5Z4wo6QOfeMwsWA90QwIiBZexDeiH10jzlzIkPOGww713qhFe%2Bd1E4kkQ2hfcGQbBluRNtQjtO5XaMPIz8o21a38OPtSJnAY9CGuo%2F8Rb6g1jubsU2tuXne8%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a34cd1144e465699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1460,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Orbitron:wght@500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.319Z","timestamp":1788355254319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Orbitron:wght@500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 02 Sep 2026 13:20:54 GMT\r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":814,"size_decoded":985,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8382a35ddb2c0457ecae750c1d6f0d82","sha1":"ef723f154af13295fd885d1897207130f210f7d0","sha256":"76c0577b349e0da8f472e0f9c4beeb97947c80df28f985b226058817a524789f","sha512":"1f809aaa0abb28feb4dc4577882b61eba74b4adf9bf34e21615024752deb4c6d96143e3350622f78b114e694db9ea411d2b16a2e2c184f2259e182b7c2a09f15","ssdeep":"","tlshash":"7a014e810c26e604db631dc152cd7e3aef0fa154284199289ffe58d4bd96d172397b2c","first_seen":"2026-09-02T13:21:58.810877Z","last_seen":"2026-09-02T13:21:58.810877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":35,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/duocardsol.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.361Z","timestamp":1788355254361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/duocardsol.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2207155\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCLhoMswPlSK3DVNVM6DFvLnqX%2FyHyqZlbQ0SAAVMZkT4rSGl%2FpCiwjLKVmZs7sqFo5UehQHmEitWEpwFelJq28ERVyRSyT6xy3qYFkFTMxcHJCx3ONKOEjteqXfQtc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"59759a76b13e92264990968cc3124815\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c88a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2207155,"size_decoded":2207953,"mime_type":"image/png","magic":"PNG image data, 1672 x 941, 8-bit/color RGBA, non-interlaced","md5":"4b4c2dfb4d17d76fb772d53897c65f21","sha1":"d910709c4013630e63f5560e9045acd55c227664","sha256":"79cec7ca217ebdcf901fdfdd7039112ceec9dca43c31f7a4ad48be7516f67259","sha512":"64c02c5f38d7732ed1a93b24a55a1ab1f997e8801d764838a3afe7dabde5bcf1412fdc7271fc5f88e957c0d3564a9b3bdbfef282db68549d3722ebdb6440fbd0","ssdeep":"24576:p3z+8CAgUsYU5cUU2O/hxydtblQ9MQyh3G1U8rd+d+p:h6TUsYUCzNbAQGXtGjd+d+p","tlshash":"0b2523de3fc987ddd8ccd73386c649d642329af0d6c31081a06b22dba9cdf895855a0d","first_seen":"2026-09-02T13:21:58.812409Z","last_seen":"2026-09-02T13:21:58.812409Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":936,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/thecard-network-switch.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.363Z","timestamp":1788355254363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/thecard-network-switch.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 321744\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VuBHxAwHgTUt1WWGTfe%2BUws84Jl7u74B9DUKo7OljZLPHdMksdHYWhvfVHgiMzNIHyffO97%2B5WkTex04Qu2cBaTXGsPiwx6DJ1mQnVOUG5RSJTZshlcdtuyBg0A3%2BW8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4020bff9e65c9b9d849e031abb3b9541\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8945699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":321744,"size_decoded":322543,"mime_type":"image/png","magic":"PNG image data, 457 x 514, 8-bit/color RGBA, non-interlaced","md5":"1b4fbb8f08c46b41ec4087bd6281bb93","sha1":"684f646c866220eedb84830830972a66c8bbf1fb","sha256":"a9fb9798ec54e22ae2727efea84808dd6eefeb3b223cdd3902f70fe618e4e8ef","sha512":"683cb9ab0d92f965de87b5a19113590a55fcfcbdef38df52308a36b5007efaa5b093fb4b87a26ddb0718768a77554480c4f77e292aefe4ae1460c216a9cbf76b","ssdeep":"6144:AfcvArXg69QAJdRxiqPcVLhPrlg0VrZVfohnGakavT98bc7ci:AfCCI9AsrZZohnnkav7f","tlshash":"5e6423c62d3844d7ce0a6b78c4c0d97d9a2319c6ba490e0cf1b989c47ed6ba4585e73f","first_seen":"2026-09-02T13:21:58.81371Z","last_seen":"2026-09-02T13:21:58.81371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":541,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sol3.noir.black/v1/config/road?config=cfg_f9faa8c6448976c859","fqdn":"sol3.noir.black","domain":"noir.black","tld":"black"},"ip":{"addr":"65.109.115.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:55.707Z","timestamp":1788355255707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol3.noir.black","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 08:49:36 GMT","end":"Fri, 06 Nov 2026 08:49:35 GMT"},"fingerprint":{"sha1":"E9:8A:5A:51:C6:99:92:07:53:B8:9D:A4:22:6D:86:98:4F:37:95:FF","sha256":"8B:5F:88:17:7C:1D:4A:2F:D8:D1:21:98:AA:41:23:16:4F:7D:53:9A:9A:B2:C9:A4:11:84:24:71:B6:02:0B:D7"}}},"request":{"raw":"GET /v1/config/road?config=cfg_f9faa8c6448976c859 HTTP/1.1\r\nHost: sol3.noir.black\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Noir-Visitor-Token, X-Noir-Session-Token, X-Noir-Client-Blocked, X-Noir-Block-Reason, X-Noir-Block-Stage, X-Request-ID, X-Correlation-ID\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 02 Sep 2026 13:20:55 GMT\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-correlation-id: corr_d94183928a680e76\r\nx-download-options: noopen\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 99\r\nx-ratelimit-reset: 60\r\nx-request-id: corr_d94183928a680e76\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 62\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62,"size_decoded":885,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f5acac19ce6a31adf68f36699e44eac","sha1":"e4b7150763c95b691c9ec91b4b08057aa14a024a","sha256":"f21a2d3de21b6f93362e15d5c197f0bc0f30ce339adeddb594cc69a83e4a4a23","sha512":"83bbf118517912c3304f4cad9c39b2a5a7fc11cfa7f17bb4deecb20382ad0d2886906f0425a146513438e2a1120d846d6abc6a5e3da59c4513e2bff29275d105","ssdeep":"","tlshash":"f2a002bf5254094842d507c11085d918982ba96794d2586993b19885432d2e5568073c","first_seen":"2026-09-02T13:21:58.814832Z","last_seen":"2026-09-02T13:21:58.814832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":68,"connect":14,"send":0,"wait":19,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"sol3.noir.black","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"sol3.noir.black","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/track.php","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:21:24.938Z","timestamp":1788355284938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"POST /track.php HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nContent-Type: application/json\r\nContent-Length: 326\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":326,"data":"{\"visitor_id\":\"964d8b3f-655f-408b-83df-923154b604c4\",\"session_id\":\"c6bf8960-24fe-42d6-b75e-9161d3d500f0\",\"page\":\"https://crestag.site/\",\"referrer\":\"\",\"screen_width\":1280,\"screen_height\":1024,\"language\":\"en-US\",\"client_timezone\":\"UTC\",\"action\":\"heartbeat\",\"duration_seconds\":30,\"max_scroll\":0,\"click_delta\":0,\"section_delta\":0}"}},"response":{"raw":"HTTP/3 405 \r\ndate: Wed, 02 Sep 2026 13:21:25 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Atns82i4XS1Cg1QH3enbVwdSNTEBRBogCvxNFrf2nGmfRN%2Bz0pMvczhtPzy0au1IOr70iBsxZ%2BgXlgop9SHh4J8kVHr0%2BKIyWnmEroRXSD0A7W1GpQfX1VlI6tJGea8%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a34cd152e9d95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1462,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/howitworksol.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.350Z","timestamp":1788355254350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/howitworksol.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2082961\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFAqSfVqNGxVoPnar%2FWfbGYjt1mDOK3pu4XIRcepTc61S9UMyp0nLMiGrFuALMo6s8ZwjoT9q%2BpiZeUp6YHb9vFVVW%2BtjQUBDwFyCAFZxguQxBPpF%2FEumAb0lUHo%2BbQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e756c3eab4da261543be4bc204a13a81\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093b8675699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2082961,"size_decoded":2083765,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"1712725cf8df4bd358c883f2df50a844","sha1":"33671834b94699d88980a9bd9faf902d83ba950f","sha256":"718349bae18c66dc4e8cc6526daf1f03c0359c18075fe4e92018a153c05f205b","sha512":"81431df3c7ba956ad8d3b865e77a4201cf0b0cc527cd64579d8d0139de5a4a7a6b6e519363fff111cd60db392cf33d321cb445d311b04d2865ad719ca730e039","ssdeep":"24576:KCttt7FBazAh20v84vDx1EVfc+C9OanjNnaRuMVoYB3cwPv2A65Mj79Xoa:fLFBaza20v8KDbEZakanjN+mwPv2A65S","tlshash":"ed2533a6021d58d7c8e79e36f167d1a887c21bd2fd9d4a524efc4f07168890d134abec","first_seen":"2026-09-02T13:21:58.815969Z","last_seen":"2026-09-02T13:21:58.815969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":939,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/how-spend-limit.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.354Z","timestamp":1788355254354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/how-spend-limit.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 220805\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psbtTRf7g6J%2FG0Uy7O9%2F7nt1stsJ%2FsTeCmhDCL%2Fyez3Pp4q8u6PQMyeAPG667CGAT15ndPxDshIXI8Yde5PtrRXAQeNgnE2kd5snDdg0FSweSH4AATIVps2BSSpCL24%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5cf7fd2fda209d16334bf97ee93afd4f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093b8715699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220805,"size_decoded":221606,"mime_type":"image/png","magic":"PNG image data, 396 x 470, 8-bit/color RGBA, non-interlaced","md5":"ca26b183c9e1bbfb416c00786d24b1eb","sha1":"b6865c6e07d0017864b424c0e5acbb28fda0c66a","sha256":"90be62769c51ab97c39c0a03a7580b20f89d741de2eeb36b48ee8abc666f9738","sha512":"7ff86092badfbb5ff0d96a75c159fad2a28c2603781721d5f44c4bda5ea5d52734542eff65679edb74f8fe6fde2fdd4be8092e00f1789147a8a9e25861e0dceb","ssdeep":"6144:x6rg9GGLlhKXGDHEgh/4JSYnxR+XBw9KgGTsojibpl:xqqKYuvcwoXjil","tlshash":"75241236ea343cc2c554c77482d4c7132eb2e983bf55d908b9f3124aade5da4a86317e","first_seen":"2026-09-02T13:21:58.817323Z","last_seen":"2026-09-02T13:21:58.817323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":509,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/how-fast-approval.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.356Z","timestamp":1788355254356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/how-fast-approval.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 224880\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIS6HNYqyq0GfOEXJBcdx6zfyF4pKQXuVkuQw0rEEOpoTsx0mml3ur9yfaI0fqauh8kGzQaxlEfDLgg5PDR8auCU07k7stI%2BKhVOSr2iMOs%2B8u2fgdBDz284PrOuPN0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4bd5961a2ed98e4f79259442d83e0d4a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093b8765699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224880,"size_decoded":225677,"mime_type":"image/png","magic":"PNG image data, 427 x 423, 8-bit/color RGBA, non-interlaced","md5":"60d6bffaa42513c6c661feedd5570e3a","sha1":"0e4ce66fae966ef3af40fed1a80301f7168180c2","sha256":"c1139eb4ddfca9588a5f12fde796065664d4a14f36c05bac068a6c0290cbc35c","sha512":"7f7f6eb3060afe031111a1ab9d313a791ee3319c5911338d04db749c6de36662a6ca2acf9a2ec5ee670455baa2756fa478004ded9031f35fccf455294685e334","ssdeep":"3072:IdpNlI/s3SbFzl3n8b7U8EJH6tDvAtd/baJKmPN+h6o8n53AbT0OS/ZmVM9QaMGf:sWmU7JHWArqKmP7o8nRAbT0OfV8Mjqv","tlshash":"1a2412f5ab59b4c5eac459308bc218369f717bc738be561a7460cc897d5ab102830aff","first_seen":"2026-09-02T13:21:58.820876Z","last_seen":"2026-09-02T13:21:58.820876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":455,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/thecard-app-details.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.366Z","timestamp":1788355254366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/thecard-app-details.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 315422\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSoIEUybsRH%2BrrQewkuI%2FAwaoaVkpf5NmKgw2IckgyIeTOQ16MyuXUJlEBOmvQe0KNVJ0zvOvYZ0UHSND7dZNWdowikSDJZw%2FWokxRzyJS6YJy%2FwsN1w2hTxf2UD2ao%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1029fcb54d7b87e7b6861f3f3ff108bb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8a55699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315422,"size_decoded":316223,"mime_type":"image/png","magic":"PNG image data, 515 x 506, 8-bit/color RGBA, non-interlaced","md5":"24f8193b86afdafb27c675d9dc6346aa","sha1":"2d710d7759af65205c8439b21da77e3eb00b3302","sha256":"785528cce79e0db62fc5454f4aff77fa706de2b535f866d94d2e3005d0ab0160","sha512":"7267f65ed50a637b3e70da45a4f0e986b956d848212c81f16b9860e7e296602c82737f78f5f4b44f3e8eb768be28d95dd4ee8c88e7a57919de80ce31927d0ee1","ssdeep":"6144:lyQGL9ZIxx0MBqkJuuBRfdyUNjER63e66CdDiVBBi6fnSGLYrZ98/3:ly9AqMnuuzdNeJod4B5fZ0rZK","tlshash":"9c64236e1ec0b9e1e5c69671c5d135b8ab367793e001ad80b0a15c8feecddc86242b7d","first_seen":"2026-09-02T13:21:58.823264Z","last_seen":"2026-09-02T13:21:58.823264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":535,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-multi-wallet.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.371Z","timestamp":1788355254371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-multi-wallet.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 273281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2Fg%2F4VJt%2BCeKAEc%2FL7AWrp%2B3urqQRpwHWAL87p6%2BROh0nCJW5p1qjlZi%2B4I93lVDN2g%2BN1Nw5pCZ1sETV0cvNGlvO6syXlguKO78UqUnnUlD91NIEx6uoQNeHVlWzQA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8030d795eab93134548c126b84dbc9e9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8ad5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273281,"size_decoded":274090,"mime_type":"image/png","magic":"PNG image data, 393 x 404, 8-bit/color RGBA, non-interlaced","md5":"3a44fe9de042621f32cd30d164934aae","sha1":"0b9c37937c5e001f0bb5452e0dff839539f40896","sha256":"0f48932aa9c0cb485eff8f76134739557c745d0bfd95a0da789451b9eda61515","sha512":"c01f88ba0f9811b8b44524001d69c828c3184ffb9faa43fabd12b60f951167c4e259883b0d1c137bd0e79abdb2c0ea79e495173b8e524801979e42ad5d7e691d","ssdeep":"6144:ztZwiSuMxzwhC/xHkf87nPAzd85awRxPNMSVTNM:z7wbuMooh57PAB85awRdN98","tlshash":"0e4423f11f98e0e1c7cec5b16b936038fe61ab66581451d6e83ac3d62a61f00638d7bd","first_seen":"2026-09-02T13:21:58.825458Z","last_seen":"2026-09-02T13:21:58.825458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":505,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-push-alerts.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.374Z","timestamp":1788355254374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-push-alerts.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 271389\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06o1YnsfyfpVkNAgS%2BAF64M7holnSZZm9LRcazCkwazY4A03excVPN9hvvNIq7Yk%2FhiAgDRryGkdv3WD4R0%2BX1%2BaQpORxFAn5SEWwzVNlQ1W%2BYNSoC%2FSCBYZNKTwglU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"66995365bcee5b35d68041e44aefcaaa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8b15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271389,"size_decoded":272194,"mime_type":"image/png","magic":"PNG image data, 374 x 423, 8-bit/color RGBA, non-interlaced","md5":"daa3734dbf8ecff020ad8f6c11668d63","sha1":"bd8ceaa6621ea8cecdaf898155944264daeb59ce","sha256":"3baea520c857639c5f345b2f1d1a5ba4364757021696b6160fadd3f5cade0f31","sha512":"f8a89a07a83895b884a22408ee9404fe896373f0670295e3b92d8755ed4e4055adb48cfcb7feec63f78d4889cfa092164e323a9a7e2e8f9e452f3a85548f90b4","ssdeep":"6144:g9CJlKBdh8c4P+vJ3PuAQate+PIu3JDkWTktAB3yQ:g9/R4Mf7TJklmyQ","tlshash":"774423f20f10f0a2f3550676a7eb8a04ee18c3e371579d2bd89ea155b8c6b416bcc179","first_seen":"2026-09-02T13:21:58.827519Z","last_seen":"2026-09-02T13:21:58.827519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":500,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/simple-icons@v16/icons/x.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.386Z","timestamp":1788355254386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/simple-icons@v16/icons/x.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/svg+xml\r\nx-jsd-version: 16.24.1\r\nx-jsd-version-type: version\r\netag: W/\"12b-z8GMOC22b4539V7sXCCKZatQbF4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 8353\r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\nx-served-by: cache-fra-eddf8230036-FRA, cache-bma-essb1270041-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 208\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":299,"size_decoded":958,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec123fb97d4e567c7da5c599614049b1","sha1":"cfc18c382db66f8e77f55eec5c208a65ab506c5e","sha256":"693e68863eceb8dc9f72e2acd386ab9c20a10858dab2c076212f7084cb7a32fe","sha512":"0d70e2ba0709d9e137b3d7c273d5e7c67646517ce4294d1e8d83eaae1fb7c6c3d7a02c3d23a4baff41a5192f0e2ce7b92a78d6ef574e33c99d8b4c6fba603fd4","ssdeep":"","tlshash":"2be07dea025c3914414a8fb117547c1421f134e62fdd427ea964960c0059f647c8cd84","first_seen":"2025-10-10T07:18:31.104209Z","last_seen":"2026-09-02T13:21:58.830133Z","times_seen":148,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":12,"dns":0,"connect":9,"send":0,"wait":42,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.806Z","timestamp":1788355254806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:56:42 GMT\r\nexpires: Sat, 28 Aug 2027 18:56:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 411852\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":12613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-09-02T13:21:58.830907Z","times_seen":8452,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-merchant-controls.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.373Z","timestamp":1788355254373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-merchant-controls.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 232602\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E6ox9YSEH4lHAXwjY%2BgQNx%2B3cKUtuDwqXmHpi9H%2BKtdvpev%2BrnJ4bNH0i0rRVzK74BojxR9G1xu9f4cY5FEsbDhO%2F60SB0r9QgzYWzEwaO%2F%2Bb2fSs%2FtdXV2MSGRbYxo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"07c0466a4c688bf352c80651278dd396\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8b05699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232602,"size_decoded":233411,"mime_type":"image/png","magic":"PNG image data, 363 x 375, 8-bit/color RGBA, non-interlaced","md5":"6ffb9eda3c563ead427b40c643586cd5","sha1":"25aa8af42886c2aa51542e8ddbaa31d5700a69af","sha256":"6bcbaf846a0c4d56a90a54b4ed50d4efbb5f2aba73db73f053257dc76d4e55b2","sha512":"0a1a6ae0a503d1e7ff6181d9ae836af0f99a5c365cd11029069a3c75cafb06169a445e814f04472e7fa5a482bb94ece916aff39ef30316e0f082fa34bc5d6582","ssdeep":"3072:CanqlI/s3SbFYN44cwjSeAjDKSe/WmKrUIYr+/x40SptbOPVRfbSn8sSA+KQ/7jj:0mwj9CbZ5ZF/s3bOHzS2Z7D9kq4GAC","tlshash":"383413762ad2b0faf64b113025fab8457c38c39131668b4b18e2165269d2f741673f6f","first_seen":"2026-09-02T13:21:58.831607Z","last_seen":"2026-09-02T13:21:58.831607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":463,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/ic/outline-discord.svg","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"104.26.12.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.386Z","timestamp":1788355254386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 03:59:18 GMT","end":"Tue, 20 Oct 2026 04:59:15 GMT"},"fingerprint":{"sha1":"A0:5C:F9:5D:77:CB:4E:9B:84:15:FE:6D:47:2A:A7:50:D4:8E:EA:E8","sha256":"B3:97:63:79:5A:75:95:41:F2:82:44:7B:3D:47:41:BD:91:8F:C0:FA:CC:2F:D9:C5:DC:FE:C3:B5:FD:00:F3:75"}}},"request":{"raw":"GET /ic/outline-discord.svg HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Afeb9vg7hsWTDXLwhb%2FXELENAa1YCqqG8ZYH9EWZBBSuXztCb1tKtVML%2FTY%2B1QX5OYfLV6f0yiHxDr8HiA2XSMwFnh2txNeBkMlqF8HSXtFPmJBSu4nYGshqPmJFhFl7xuIBDw%3D%3D\"}]}\r\nlast-modified: Wed, 02 Sep 2026 13:20:54 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a34cd0959c6c120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1055,"size_decoded":1399,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"1519b7e12126d23c4b25cb82fe4fceeb","sha1":"bdbae7f24ab56100dfe0accf4eada5e2d77e7b49","sha256":"3e096daf97eac2e1f4d61fb80fd5913b770915e0c0cbc39d71933466989c4a0e","sha512":"d25bc0f122b6a6ac5c94654287aa45fb143befea22201529f8cbf59c79b60ad2980246a44be84e602bc21726095d18b41406284552361c8f711f9a9ba879028a","ssdeep":"","tlshash":"7f115745860af6682002a194cbaf66d8161f5465b3c822d876f2ef39a01f981ed42ab8","first_seen":"2026-09-02T13:21:58.833039Z","last_seen":"2026-09-02T13:21:58.833039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":60,"receive":0,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/crestaglogo.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:56.026Z","timestamp":1788355256026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/crestaglogo.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2123753\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sysFkzm6UF8J7w0cl%2FXM%2FVwU1ZCRkLC6CUT9EBMJEaYQMopzYyBvjx%2FUQKh6xAuoiRTMKxWesakMS40fV%2BxzN14XjKEmChZsIztQ12aee8qZjXqBZJnaKKg7ijtcvU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e90d843269f3285c6a32e598f7b9a227\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a34cd09e2f6f5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123753,"size_decoded":2124565,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"138d3943169216447e7e5572d370f769","sha1":"13951806a9055ea71a318c1df1148c1207c956cd","sha256":"6936f63f808d98a5e993f969f93c911ecc5703bf52fcc2eff7aa6ec85a5614e0","sha512":"2b3aeec73d0246e917ed5a0b2362bf0bab499732f972e95cb2429aa2601c4254b2e8ab0ed9a775eb7c76e7acee84c2d9ba378c5cc7cc7fbff7c066797aedc2fc","ssdeep":"24576:+Z1kTwgjdm+VlYUzvhm3xJs0RIXGB+wt4yZreA7Q0Oyg:w1kTwEfVZ5m3xJTRS3wt4cZ3bg","tlshash":"75253378ca4ef5e4ded45d7583ad256c8d05a3d2785ca38822a9efdceec53882240c7d","first_seen":"2026-09-02T13:21:58.834245Z","last_seen":"2026-09-02T13:21:58.834245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sol3.noir.black/solana/v1/config/bootstrap?config=cfg_f9faa8c6448976c859","fqdn":"sol3.noir.black","domain":"noir.black","tld":"black"},"ip":{"addr":"65.109.115.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://form-252.pages.dev/sol/?parent_url=crestag.site%2F\u0026parent_origin=https%3A%2F%2Fcrestag.site\u0026config=cfg_f9faa8c6448976c859","date":"2026-09-02T13:20:57.204Z","timestamp":1788355257204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sol3.noir.black","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 08 Aug 2026 08:49:36 GMT","end":"Fri, 06 Nov 2026 08:49:35 GMT"},"fingerprint":{"sha1":"E9:8A:5A:51:C6:99:92:07:53:B8:9D:A4:22:6D:86:98:4F:37:95:FF","sha256":"8B:5F:88:17:7C:1D:4A:2F:D8:D1:21:98:AA:41:23:16:4F:7D:53:9A:9A:B2:C9:A4:11:84:24:71:B6:02:0B:D7"}}},"request":{"raw":"GET /solana/v1/config/bootstrap?config=cfg_f9faa8c6448976c859 HTTP/1.1\r\nHost: sol3.noir.black\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://form-252.pages.dev/\r\nX-Noir-Attest: eyJ3ZCI6ZmFsc2UsInBsIjo1LCJsZyI6MiwiaGMiOjgsImRtIjowLCJjZCI6MjQsInRwIjowLCJnciI6Imxsdm1waXBlLCBvciBzaW1pbGFyIiwiZ3YiOiJNZXNhIiwiY3IiOmZhbHNlLCJudCI6dHJ1ZSwiY3QiOiIiLCJwZiI6dHJ1ZSwidWEiOmZhbHNlLCJ3cCI6ZmFsc2UsImU2IjowLCJwdCI6ImRlc2t0b3AifQ==\r\nX-Noir-Site: https://crestag.site\r\nOrigin: https://form-252.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Noir-Visitor-Token, X-Noir-Session-Token, X-Noir-Client-Blocked, X-Noir-Block-Reason, X-Noir-Block-Stage, X-Request-ID, X-Correlation-ID\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'none'\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 02 Sep 2026 13:20:56 GMT\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-correlation-id: corr_3cc33da0f2a3486b\r\nx-download-options: noopen\r\nx-frame-options: DENY\r\nx-permitted-cross-domain-policies: none\r\nx-ratelimit-limit: 100\r\nx-ratelimit-remaining: 98\r\nx-ratelimit-reset: 59\r\nx-request-id: corr_3cc33da0f2a3486b\r\nx-robots-tag: noindex, nofollow\r\ncontent-length: 779\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1085,"size_decoded":1625,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8cf67643faffe99a92cf08625c4c74c3","sha1":"1a41316e8c21898c53b13da66e6ad3fda6065ffc","sha256":"07e9365e6c41117ca0d432771bfde354a356f3a3e88102cff847f745c8844c83","sha512":"1a4be98da284020ae079ac847087260ff010ae0604e2dfda848629bc1d9e830cb352b5b2dce8fa531abed49348267f7af92487dafc76b9d01840b6d2cc7cb497","ssdeep":"","tlshash":"5811868ac7f61d2f2a085680a54934737f18247061153badefeac6c922c066a773b879","first_seen":"2026-09-02T13:21:58.835545Z","last_seen":"2026-09-02T13:21:58.835545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"sol3.noir.black","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-02","alert":"Phishing Block","trigger":"sol3.noir.black","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/how-physical-card.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.353Z","timestamp":1788355254353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/how-physical-card.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 212942\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocVZ1lQeZI2AYlV4txXG9Eai1XOFEZW3G0Bo4zPFrhY%2BLnlGejH5GeHZjo1ynvWozEoytP8m1db3HTZz0E8M6NwbdxpbuAsQjgZBNGt1nmXJP1YoeobKtPevK6URV2A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5d8e0707d9b3766b44af2b9594306c63\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093b86e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212942,"size_decoded":213737,"mime_type":"image/png","magic":"PNG image data, 388 x 489, 8-bit/color RGBA, non-interlaced","md5":"f78d6309ccf5bf1876fa18a79c1e4460","sha1":"aa30e0d629c3be9c9520eb3efe97773def09acef","sha256":"62b5571989918ce7d76214f68783715318b99e60f71fe69a60d9928722ec4c6f","sha512":"a51b78d50f84ee3f8f86d0673f086619e10ea2762746bac2774f989c33992d4157390b1db08a8d8f3dc792896adb7fbf9ea39e91fc5e4c127623735c1781cacc","ssdeep":"3072:CdpNlI/s3SbFz6aOhISwoqDW/Gl4alIk5bfC159FCkD/EUxqIVVGQmVROEd8+C5x:COO+BCY4gI46BT/EUxqB/VROeuC/1A","tlshash":"472412dc7a8479d6caf96a710f8418636e21c6875c3fc95232b74588b89e7070b4db2f","first_seen":"2026-09-02T13:21:58.83668Z","last_seen":"2026-09-02T13:21:58.83668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":439,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/how-2fa.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.358Z","timestamp":1788355254358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/how-2fa.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 254609\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJ5CyX9p5%2BF5DqnZ4x22iUFcYI4tylTpzy5kLykkWX8x97XTxk1BoaiDHst3pQ1Kd53V9Bu7DxFEZm%2FXo5KRiO87SvtHybmv%2BhSAc0ESr8oIRZKmeK0luBIx8n5aDyg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c4b2339d936af542072a5c00d9c629fa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093b87d5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254609,"size_decoded":255408,"mime_type":"image/png","magic":"PNG image data, 398 x 437, 8-bit/color RGBA, non-interlaced","md5":"1db1869003fd0efa00b29b848bfa5c9d","sha1":"c5aee7d654b57649ab8ee10035ce891d82e4872d","sha256":"c011533652944c0f36c829805b35516705f70cfcfe4dd2b0232fad3380285cdb","sha512":"b5bc8a72fa6feba2f575e99ee929daa1cf4d8e17ce9aaa389119bd54de327945892066ff7604a9288b2623019b1c65a203bc9e79f5b4f8d34ac724f392ddf592","ssdeep":"3072:ZdpNlI/s3SbFzf1rOq3bco8AaUYBWa+oyH+QSa8CPT4k2bFhLkdldgvoJiREOSdU:jErJcojYBDoH+/GkkeyWFRUqaX9wSSdt","tlshash":"144412b423b128dafa672f3191c21c272d62abde36644c89e1f785c988d6f94135313f","first_seen":"2026-09-02T13:21:58.8384Z","last_seen":"2026-09-02T13:21:58.8384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":519,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/how-analytics.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.359Z","timestamp":1788355254359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/how-analytics.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 230882\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fa8TcoQxjRqbpzx3tKL8tIecdNTxJ%2FOJ8ErS%2FmPUGuVbqP0sPEl7Fp2dlp0Vsk%2Fpq1%2FGtqweUv9sQ1MLLstA%2FPYb9ePCgzHKiitkEnjk9AbIbca8GJozUy%2BTg7BMqgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8d1df53fbe38da2ae8fb32a8d4909197\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8815699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230882,"size_decoded":231689,"mime_type":"image/png","magic":"PNG image data, 379 x 416, 8-bit/color RGBA, non-interlaced","md5":"fb86ed1c90b0ee978f72dfbf9266ede2","sha1":"7e6dfdfb437178d0494af5e6182b43d53caa2128","sha256":"7901516014dd2efd3d086992d03c33f19482720fd5436ded9be922ff51e5cfb5","sha512":"0a2408c66c8c079567c9f01e1d0d9913fda62d753e526f0c6b06dc02ef46580ac1227e294373e2651ee1a11d731ef9d1361903d1038f09850a016d5f6ece53b3","ssdeep":"3072:BdpNlI/s3SbFzw34TngozHnzsgM7eiwJLXgpXVzvQgEWX+BZFTyYSDUjd5llqSO5:rKngGzq71whg9VcgEWOvHSDUBtSSR2","tlshash":"963423ed4a04748bd7a043f499463b9b8db666453dd10588737b80b2b9c2b184937eff","first_seen":"2026-09-02T13:21:58.839742Z","last_seen":"2026-09-02T13:21:58.839742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":744,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":525,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-instant-topup.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.378Z","timestamp":1788355254378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-instant-topup.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 274417\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAYWVtoX7MRfgRFBykhjWCVALSEY1audLbUt2Xi3wbLPqqJVfFNCmi9zze7T4iunPQsRoZEPoJ63OvwDyOputdZFNMLn6twLs373uQD%2BkZsgrlBt1UY6qNvlH8jkp8U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1b232c757db6b885e267862c2fbca49d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093d8bd5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274417,"size_decoded":275212,"mime_type":"image/png","magic":"PNG image data, 364 x 401, 8-bit/color RGBA, non-interlaced","md5":"478e0b1875c4ec783710d100c40d8620","sha1":"4e89e55a76b3e00caec849fea1df7d2080cf01df","sha256":"de89fd4464d6e2d244553ef3b448c3743fbe5244b04627193a51fe102faa82b8","sha512":"8d789a81b71e51a1098dd1a8607c92ed291182976c719bdb3f0144295989e7a9d933f8a1bad1e961872ab14ea4b76846eec1ada87fd44da585f1e349d71c0077","ssdeep":"6144:tEVlXEmAzcN73ObyXy5tfuJh8PIYZr1YqzEkCbMAsv4FHViKb/6g4:tEfXvAOJC5t2jwZuqzXEzC","tlshash":"b54412a80cd170e2efedc679cc9208babc318239f07b4ddf74609064a8d4b559a5626f","first_seen":"2026-09-02T13:21:58.840789Z","last_seen":"2026-09-02T13:21:58.840789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":492,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.804Z","timestamp":1788355254804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:56:42 GMT\r\nexpires: Sat, 28 Aug 2027 18:56:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 411852\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":12613,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-09-02T13:21:58.830907Z","times_seen":8452,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form-252.pages.dev/sol/?parent_url=crestag.site%2F\u0026parent_origin=https%3A%2F%2Fcrestag.site\u0026config=cfg_f9faa8c6448976c859","fqdn":"form-252.pages.dev","domain":"form-252.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:55.938Z","timestamp":1788355255938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form-252.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 02:19:27 GMT","end":"Tue, 01 Dec 2026 03:17:59 GMT"},"fingerprint":{"sha1":"03:81:20:12:28:55:95:A9:AA:1F:7F:14:E6:B0:7B:77:ED:DA:01:56","sha256":"3A:C5:DF:39:25:E5:80:02:5F:CD:4B:31:44:B3:59:B4:AF:9E:CF:C8:35:E2:58:B8:2F:68:87:3A:3E:A2:5A:BB"}}},"request":{"raw":"GET /sol/?parent_url=crestag.site%2F\u0026parent_origin=https%3A%2F%2Fcrestag.site\u0026config=cfg_f9faa8c6448976c859 HTTP/1.1\r\nHost: form-252.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 13:20:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: a34cd09dca11c272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWJWTuQFxaiq7KjggzUw1g0m%2FBHmgfVAC3Dr0xDr1UTm%2FBQ6Py1CCEPAwIVSmP5zPzeI961NWDXMx1EuqP1W1H9FuADQIcnXIb9BYuA%2FpAA5Q4Ujonyt%2FRVY7UvpalNg8at%2FZRtoqvQSwSchteH7NV0VKgsNhTAk%2Bm%2F2\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1874,"size_decoded":1781,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"2033a97e9b598fa7b74806aea2b473b9","sha1":"036779d74498900f644aa2600405e5a1c9b8eb63","sha256":"92d064f4b44b87d5d863e1f1c00b9d23b59bb21986e5d833d7a457f8a1f34e65","sha512":"2000ce8570874ba6dc61be0ff9de363f1be2a653cc4769f6cf450a9547c21e3904831088abdf4b58fd2f20474e28e161fd01e5484cba1ef26c2610079f2971d2","ssdeep":"","tlshash":"8931c6a391c5513a16330ba5f19ba78f7b17184eb31058a866cb634cbe24153c1a37df","first_seen":"2026-09-01T19:47:50.164005Z","last_seen":"2026-09-02T16:59:52.716998Z","times_seen":4,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":10,"connect":1,"send":0,"wait":139,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/crestaglogo.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:56.028Z","timestamp":1788355256028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/crestaglogo.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2123753\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sysFkzm6UF8J7w0cl%2FXM%2FVwU1ZCRkLC6CUT9EBMJEaYQMopzYyBvjx%2FUQKh6xAuoiRTMKxWesakMS40fV%2BxzN14XjKEmChZsIztQ12aee8qZjXqBZJnaKKg7ijtcvU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e90d843269f3285c6a32e598f7b9a227\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nage: 0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a34cd09e2f755699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123753,"size_decoded":2124573,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"138d3943169216447e7e5572d370f769","sha1":"13951806a9055ea71a318c1df1148c1207c956cd","sha256":"6936f63f808d98a5e993f969f93c911ecc5703bf52fcc2eff7aa6ec85a5614e0","sha512":"2b3aeec73d0246e917ed5a0b2362bf0bab499732f972e95cb2429aa2601c4254b2e8ab0ed9a775eb7c76e7acee84c2d9ba378c5cc7cc7fbff7c066797aedc2fc","ssdeep":"24576:+Z1kTwgjdm+VlYUzvhm3xJs0RIXGB+wt4yZreA7Q0Oyg:w1kTwEfVZ5m3xJTRS3wt4cZ3bg","tlshash":"75253378ca4ef5e4ded45d7583ad256c8d05a3d2785ca38822a9efdceec53882240c7d","first_seen":"2026-09-02T13:21:58.834245Z","last_seen":"2026-09-02T13:21:58.834245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-invite.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.349Z","timestamp":1788355254349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-invite.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 331439\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQQPkHhxvKlx1GPSY3LTvzWmm6hx2G2ahmvjSGcnl%2FNqOlAuu193qDBPCRU18aFZXN8rVdMBTgYqm9b4SqyH%2BIxJyO6xf2nH6n9Un%2FGEpzeyzIzDhnxFrWbqdbCLWZs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"676a2fe227924922fdcd5dbfd32e091d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093b8655699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331439,"size_decoded":332238,"mime_type":"image/png","magic":"PNG image data, 499 x 491, 8-bit/color RGBA, non-interlaced","md5":"87f0395330c882c5572a9ed414f45334","sha1":"7e0acd6709f1d8788b42016c643823d855858654","sha256":"7acb43e351eb66c72f55a0d66ae16e2c5c30066a82928f118af263953595d666","sha512":"6bf166189527aab7237b71d28de36d3c39ac7d446b6a7dbdb50eb0f7073428a1d63a1a70d0310e3bb5cec34c4030ac218cee2ef846eeccfa117d380c4a201ff4","ssdeep":"6144:135zjBhwOf8eR0dEz+lKBrVLc2mR5DsQnM84xdr46k31OTB18Z2Zt/4QfjY:13h3HMdJlKQLR5DHnM88dr46k31CBhZq","tlshash":"a16422f1396978c7da049d35c2e1da1378b263e2856271c2e66862f8f613e0419df3ed","first_seen":"2026-09-02T13:21:58.842828Z","last_seen":"2026-09-02T13:21:58.842828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":570,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/userguidesol.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.351Z","timestamp":1788355254351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/userguidesol.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1965141\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBkuK6vxEqsWWWJ9q83d6LI%2FTcvQC5fvV8LctETetxj65iAfKrqjPrMfpxFJevsiNQ%2Bf62052QVEifGyhneztpPu%2BxIdHTpfSC%2Be%2Fhx1Abn3IlV4hsM5yAcFs54ss7E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"524254f781321931a1a9ac51d10b9618\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093b86a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1965141,"size_decoded":1965945,"mime_type":"image/png","magic":"PNG image data, 1774 x 887, 8-bit/color RGBA, non-interlaced","md5":"9b5c203f0549f7cedc7b581203583070","sha1":"2fb576ba30020c035b49f4979f12a996d6ab9894","sha256":"8991019d92695fd3107df5bae6ccdca2022ff3ada055fe4e64277b4fe3d3e710","sha512":"8d26ef1e8d7bf09f309bbd226be022cca23329aab2e7ec82e7131e86772cbdea8a3fe1a67e6287c6d4cc9ba50b7789ad53e06423d26a15044b4458a2c16553fa","ssdeep":"24576:Y/0WTsIhhQ7VFBtzbmRtAMAMpoUBRnDEt+Cr:+TsIfQ5FYRAURD23r","tlshash":"b92523c5db3bedd8cd9b60b31d756f478f930321b5c93468caf6a20e45e1c7260192aa","first_seen":"2026-09-02T13:21:58.847445Z","last_seen":"2026-09-02T13:21:58.847445Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":926,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-roundup.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.377Z","timestamp":1788355254377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-roundup.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 245158\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V2MYzR3UN6bxHmVq1EkfhWIDcyFe0x8l9mYC8hD35OkTgPgY8ohpzgYyKxL%2Brt3DCh35YoyUlXkWVw8Usmlvo4LqSgoJyz4Hv4CA%2FEM8qS5E09jydDAreLsWbh0PAvo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4fae4d0f4c081f2c3e8f305584cd9f91\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093d8b95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245158,"size_decoded":245955,"mime_type":"image/png","magic":"PNG image data, 369 x 431, 8-bit/color RGBA, non-interlaced","md5":"64f86827ba74704a5a36486652a51c95","sha1":"8255a2f3f4e4c1f2958e329b1d83cd2a0af94c89","sha256":"fa60d4398066a4b2f361cc69cbb585afedd17bfb9b1722f7959138c33fa570de","sha512":"571670df9da1c87b101176694d20b4be79f9201b6c6e83bbf7df2857b3b347b0ec183e02ed5bb4674b132c8103af2c5f6c1de7991937de872942a5a3e89953d5","ssdeep":"3072:banqlI/s3SbFY949+ZpIZOt/OeqmFV+Z+xFdnreAAWztM0F508yyvbiEKSQmaK2G:1S+ZpIZg1xEZqhztiyDiEKHtPf+","tlshash":"af3423ef2e05146dd3a0cbb599eb0c2c8da143f7365a4013e6393246ed6af14109b9ef","first_seen":"2026-09-02T13:21:58.849503Z","last_seen":"2026-09-02T13:21:58.849503Z","times_seen":1,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":455,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form-252.pages.dev/sol/chunks/Q7NZG6HD.js","fqdn":"form-252.pages.dev","domain":"form-252.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form-252.pages.dev/sol/?parent_url=crestag.site%2F\u0026parent_origin=https%3A%2F%2Fcrestag.site\u0026config=cfg_f9faa8c6448976c859","date":"2026-09-02T13:20:56.959Z","timestamp":1788355256959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form-252.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 02:19:27 GMT","end":"Tue, 01 Dec 2026 03:17:59 GMT"},"fingerprint":{"sha1":"03:81:20:12:28:55:95:A9:AA:1F:7F:14:E6:B0:7B:77:ED:DA:01:56","sha256":"3A:C5:DF:39:25:E5:80:02:5F:CD:4B:31:44:B3:59:B4:AF:9E:CF:C8:35:E2:58:B8:2F:68:87:3A:3E:A2:5A:BB"}}},"request":{"raw":"GET /sol/chunks/Q7NZG6HD.js HTTP/1.1\r\nHost: form-252.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://form-252.pages.dev/sol/index.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a34cd0a40fd98be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eAOd9I5cqx7ZtuQ5G5jYy8yFOFHQ8CnlVrWv4%2BrpWoFuJEMi3plZMNGIa2Mj%2BN%2BB9ryhidOsaE8fGzZhJrSdsC%2BqQBG59xhE9%2BuS%2BT3ufnAxalWJrpMDnAm0%2BPUNb7h3in5IOxwO4%2BxZcyjNovMWWM2Z5VzJ6NSQfg3I\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"8bd4bf87ffc7a210b002cd6dcc5e2dd1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9034,"size_decoded":4933,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9033)","md5":"f87c6fa669326683a03be1bec3c91afd","sha1":"c15e014b341412e25d5200d252931c033f67f01a","sha256":"ed8d2f78b2b2800173a481835cdb331dbb2f9ecb260463ebda18f4c992f2dd37","sha512":"678f4ecd142f858debda7f411f76878a9e08686a307035873129c5795dba89a0d7d4f0ac46d18a0bca718447317f4cc2551f4b1e60436947711009b058b3bea5","ssdeep":"192:8C0u+750aShlSwxc0AMXhSTieWFylMFst0EDmTKYG89HV8WJ/U:Mu+7CauMZ0eNMKPUDLJ/U","tlshash":"cd12d790135a60b343ee22810467a8c6f1b1d47d1284085ee95a49db7ff4afc9febb74","first_seen":"2026-08-31T14:51:07.864722Z","last_seen":"2026-09-02T16:59:52.62387Z","times_seen":9,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-auto-route.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.372Z","timestamp":1788355254372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-auto-route.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 260303\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8k5fms2CTt9ktF%2FwwRbxi23D3EmDwBIDrlGBFVk8NYHGWWcX5vO7fyAlqOGzjtPRG3vs5WsBxqVBMzvyFP%2BPhxJRvBvUUqwVkAvvQm5JuCf9Ha3rOG%2BdDX19C9Q8pl0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f380876b59e8c40c8c3b1656fe490d1b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8ae5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260303,"size_decoded":261102,"mime_type":"image/png","magic":"PNG image data, 402 x 391, 8-bit/color RGBA, non-interlaced","md5":"cb1ad9288a92034ecda5ce9541ac07ed","sha1":"b034ffaaebf19ed8cb12ffd58b6f186d339699d2","sha256":"cd2b9731fab6ee7008507639b059f7c537983726ab8ee0f74653d49330e00f44","sha512":"a4d874f075863fab202e2bce246ce423abf9966b8cb8fdf55a9b0dec7de04115fc22b03e1da9abece29d5ba7adff8b9bd473db990334def23967f332f8b97242","ssdeep":"6144:BPhoaIDN8r3rRG2ruK8ZY/SFK828x8sn7Kxf:BPL3w2rjz/SFKEb7Af","tlshash":"c444237caf805db5cb5a55fc408f4c40dd22abd9a92e4e026e6ca33f58d0f84b95193b","first_seen":"2026-09-02T13:21:58.851832Z","last_seen":"2026-09-02T13:21:58.851832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":474,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/finalcta-audit.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.379Z","timestamp":1788355254379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/finalcta-audit.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 329941\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JiL6cL6zohRhJDgTq7FePcKoESQfVfZb%2FZW5dW3ZLs6kHrhCOa0dJ%2BCd5VnAbaehf7MptjHbBFT8%2FvLpxEbCIYPPG%2BX1wFsHR2v4eIiQ2SnmHJx%2BSC1FPHU%2Fq0k5H74%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4d8e30540e081329fe238fd8a9195876\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093e8c25699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329941,"size_decoded":330746,"mime_type":"image/png","magic":"PNG image data, 505 x 512, 8-bit/color RGBA, non-interlaced","md5":"bae006585b4c3db4d79ee42cd5f69758","sha1":"a4e9d192a5789946ce384d34f240354c3dff47e2","sha256":"dd89fa44ce0f34aaf8d5954399b292ff8100e2da5b12708b9b51cc37b6bf9a35","sha512":"fdf1920666b3a7dc5c8a363953f747acc96045b5843eb37cc677ad6d97b998bc0366a41cb2b739661ca15b0f49373bc9fadd897f115beadd3ef44ae5e4bcac29","ssdeep":"6144:GH/1lSg/QDt2Pn68lrVpvs01pje3IfGT2gi4dDXWlLngg6F2dhWM:GHa9D8f5lrVpk01he3Ify2gi6WlLV6AB","tlshash":"a96423f11d3176ddfba271b22ed021e53f7243902062528af07b92f1c9edb646d27668","first_seen":"2026-09-02T13:21:58.853637Z","last_seen":"2026-09-02T13:21:58.853637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":518,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"form-252.pages.dev/sol/index.js","fqdn":"form-252.pages.dev","domain":"form-252.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://form-252.pages.dev/sol/?parent_url=crestag.site%2F\u0026parent_origin=https%3A%2F%2Fcrestag.site\u0026config=cfg_f9faa8c6448976c859","date":"2026-09-02T13:20:56.195Z","timestamp":1788355256195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"form-252.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 02:19:27 GMT","end":"Tue, 01 Dec 2026 03:17:59 GMT"},"fingerprint":{"sha1":"03:81:20:12:28:55:95:A9:AA:1F:7F:14:E6:B0:7B:77:ED:DA:01:56","sha256":"3A:C5:DF:39:25:E5:80:02:5F:CD:4B:31:44:B3:59:B4:AF:9E:CF:C8:35:E2:58:B8:2F:68:87:3A:3E:A2:5A:BB"}}},"request":{"raw":"GET /sol/index.js HTTP/1.1\r\nHost: form-252.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://form-252.pages.dev/sol/?parent_url=crestag.site%2F\u0026parent_origin=https%3A%2F%2Fcrestag.site\u0026config=cfg_f9faa8c6448976c859\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a34cd09f398e8be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryB0vNWILvtTqjOIvL2PwRVy0fAXLZe%2FbeQ0gkYCdBcFyhlVXiqYPh%2Fq9w6V6LoRmb2LFqjJt8TiqB6NtL6g%2FLu2%2BgdPR5FRg187%2Bh3b2R%2BBbnR40Q7kNY5PcBM5AUmdf7QCSwyG6kxmRKkuRHY90oCTCvYJL5rBkEOj\"}]}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"17b4ca7f583f69b8e897fe733c659930\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329768,"size_decoded":145201,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46541)","md5":"f8468621c725675bb39d0d3a20e5af93","sha1":"bc1c3f0d1ae3d31e6e8211d22adc0c934a944cf2","sha256":"e3b7e4df016b3d9fcb17ed28cbe08de061cc8b82021ba38c0a72ea3006dabc9a","sha512":"7057bf218cdc7dab5976cb085a0d00af7ccf9a5f11eed4865dc0d968fc29b0740b08783c27d052b20538c949ba3022f778ed21738c29a622bfc828c16975be84","ssdeep":"6144:f34hijvSb3wMK2dtOHhwIeZ00u/1/sI7vLkz:fox6uZ00K1/s5z","tlshash":"44649fb17374323a839b429ef9261190f23658b55008407cf7ec995f6a4ddc9aabef70","first_seen":"2026-09-01T19:47:50.145891Z","last_seen":"2026-09-02T16:59:52.624956Z","times_seen":4,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/k48nb6qnqtd.27cf0nav.js","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.321Z","timestamp":1788355254321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /k48nb6qnqtd.27cf0nav.js HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwwE6d7sfP4o3DVV7kYDbkJ%2FsEH8nD3fSgOHhn5vP9zlOEE%2BiqI4gtnbq2AyyuD%2F4nGlbljcnFnALWH%2Bn8oTwJkTXcyEfRB%2BxxC0eQJ4n1Pfs2CO4Xp5yGw3EtKfSX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"1767af4120fd54585b767f8c0f9b2e6e\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: a34cd093882b5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52329,"size_decoded":12252,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (52329), with no line terminators","md5":"29e1257e7682055acb5dd7cfd4d3ea6e","sha1":"606720fd1807cd219f838f0ee09db4c707601291","sha256":"586e1cc3769b8ed6ed760a7b2f04e04391ac47460f1c36f98f17e4a057d06326","sha512":"dcf5fcee80b55a63ce4bf84789cf969f2240501193c4a93fc7655815810e2265eb6bc1f138589bec8801bee7b3fd6fc5aa42a00af0b4d9fc6a6d6e332c7b1a8e","ssdeep":"768:YSM8MOLrPFfs8c7hXYh3pVh3pimy5BFW7BH3AFQBxgyYiFV74B8:3M8MYZE8c7hXYh3pVh3pimy5BFiAFQBb","tlshash":"4633cdf85727ead5e628531e97cc6b0b4e73330686412fe0fb08a98996ce711b1fc456","first_seen":"2026-09-02T13:21:58.855897Z","last_seen":"2026-09-02T13:21:58.855897Z","times_seen":1,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-open.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.342Z","timestamp":1788355254342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-open.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 343034\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEQF4D2xyGQ5Yw83lx1JG4thmLPpQP%2FAyO7MnJY%2FaoRRldrtfAHXt8F8HJ8w2itfhlaTt1YSr9tE2VDWru3sqfWoVdaT5vapbW0SrljdDcSBIeqXOOGKYhe%2FwyNU%2Fyo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"18c77b9a31619d1565b312761e8c7d55\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093985a5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":343034,"size_decoded":343835,"mime_type":"image/png","magic":"PNG image data, 499 x 523, 8-bit/color RGBA, non-interlaced","md5":"a753cdb3d65107481073ced108dfa95a","sha1":"eea4141705e103353b86a18a1c513e2970d290af","sha256":"54b465c06199dafcee45ebfe50ece3843a78b150f26683e1ac79c9cd4c5da76f","sha512":"617699f669c3e40d288246872936a25987b3f2bf5f72ef0e69b4f8b6ccbf47db5773ef4bd9735533d98094563e9aff4e391e77026619cd0d790858525db3f4ae","ssdeep":"6144:nftXuIgWZ6QyIgRUkifgnM+Ha52IhX2x4GpNm+JpsFF/QfUSQ5xTlpmjlA87X66X:nfteIgE6Yg3KqxDNm+J8F/BS4lpK7/mi","tlshash":"167423645c461c9ed3ec6a75e3406eb56d727b412294e48bf063c39c78a630cfb0b97a","first_seen":"2026-09-02T13:21:58.857479Z","last_seen":"2026-09-02T13:21:58.857479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":606,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature2sol.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.370Z","timestamp":1788355254370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature2sol.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2525104\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bLqigmUlOpbabnT3n5zTN57oTL9ZNMerWtnxPjyeCGhMzs0%2B%2BjiTCuiAvnBJGkjWWrydj5IIilJmKgYQ6AVwCryu7lEVR13vBbg3F8PqClTu0YPszYvY1%2FVKx32BPa8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7e3af8e1f5cadf903d083620a9b879f3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8ac5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2525104,"size_decoded":2525904,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"7ad5c72d606440936fc0d4e50def439e","sha1":"8d87dd38c710adfd37e7f04b77bd145c5a2c4443","sha256":"25af57b7d0612dac9e7bcd58222c9a065876f2984ce76c6b1aa42006a6eae1bb","sha512":"726a5f47907554200bfaf221b29621369216dfe088d214fcb6a5cd70d176f805df47a6efcecfbda75119976158b351d79b9e3e79ad57ae34f276fcf0ce063904","ssdeep":"24576:gJpOlxWG3wJ8Tq+Joffln3TE4Sl3pUmdkQnJ6ij3:SbG48Pq9o4+pUmdh3","tlshash":"262533f46364a8d3c2ad3e75c51ae6f0ad939f1d80cb294728d30539457e92c0dd3ba9","first_seen":"2026-09-02T13:21:58.858468Z","last_seen":"2026-09-02T13:21:58.858468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":941,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/finalcta-wallets.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.380Z","timestamp":1788355254380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/finalcta-wallets.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 316537\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5h437j9Gtxs5a7lGcVyAL%2B0MGxXeLPA2xUWO%2BplvkpbQ5VP7Eol%2Bty1WmVEptIi%2Fp6YuYwnCGriqz%2BkaMEaMfaimVdmaHRx5aIZJMLV8bDLvVMu%2BmQJx%2Bjd5U77ySP8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c19550915d1579e3646a312552e582a0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093e8c65699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":316537,"size_decoded":317344,"mime_type":"image/png","magic":"PNG image data, 488 x 464, 8-bit/color RGBA, non-interlaced","md5":"87328272b4bd928988f68eb400ee1079","sha1":"5354ffbb5a877edf252a1a4479430527659c6fad","sha256":"2d3c6fdec32f8c17ec63df96a09111503e3cdf04938a800c4f5843f9b7236280","sha512":"a1dbdc6bf2711d99f0ff97a8d103552cf7c562e61a34173e1e800e137dc1458684be7d6984b99eabe754aa8da832efdc7f6d335198a1f6231d2e9b42bdc25d60","ssdeep":"6144:ZzFj5DRYECeFM4oUk32AHdWgszWFYrn5xgBqPS3bIh1g5L10nJK9VzXs18j:ZzR5DRYReFMTU/nPn5xggWIYt1Vb7","tlshash":"a264238718b1e19ef05acdf68da388b58b9079e645644cce02ff0775e989f4b0c86778","first_seen":"2026-09-02T13:21:58.85963Z","last_seen":"2026-09-02T13:21:58.85963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":748,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":495,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/finalcta-no-lockin.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.381Z","timestamp":1788355254381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/finalcta-no-lockin.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 305838\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jL2dvLIZ6q7FY3wO1wiWaxknA%2Fbf8oNKUudJaIyMvtjTx%2FGM0CmrCqGL%2BFnDD8DTKTTcG4T8mmDVdDdS%2Fka8zSTa6XSlgZoykIy41w53wzoIZKE2qCBdWxjMtHcA%2B6U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2ee382015ac14577599e72693814a143\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093e8ca5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305838,"size_decoded":306641,"mime_type":"image/png","magic":"PNG image data, 460 x 497, 8-bit/color RGBA, non-interlaced","md5":"6eea4c219662b46bc9130ecf24bad1de","sha1":"eddad70d567345a7c476a503c471853bb227d537","sha256":"d1ead8aa75e7b3911a6acbdf9e56ba19891a26e0fd790ac6bdf06aa363c56942","sha512":"54a62ade0581ac3a2c9fc4b5f090ae85f5309e0385b1c4ac87736eaa938d76df8518b4c35ade0c0994ab5d0ba996a6cc05d6f5144b374fc5c68c5989ccd503f1","ssdeep":"6144:kyt6MpnA3FU6aUemor9zxzYN3ssRX/yw/5dN:kVHFU6aUU9F6N9ywR","tlshash":"105423838675b98cfd076e3d4683109667226af0d65bd68130ff4a6f4981b183b48fbd","first_seen":"2026-09-02T13:21:58.860725Z","last_seen":"2026-09-02T13:21:58.860725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":511,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-support.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.376Z","timestamp":1788355254376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-support.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 259132\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j19nkdZGe7hT%2FJ%2BGXWlXgaruPN2FnN5gJrkGzSB9ZLJAmv%2F%2Bb3YXQ8nNfnGUsxoE7eGVZdlb7iOaF%2FtWuBkQWQLZgyb%2B1hl0E0HZCU0uma8qz%2BYK9kDnn%2FAIWgIS5%2BU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8fa685ae50453a8326313eae971abc92\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8b35699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259132,"size_decoded":259943,"mime_type":"image/png","magic":"PNG image data, 410 x 407, 8-bit/color RGBA, non-interlaced","md5":"0f63e88ed4cb54e8c9836edb28652e6a","sha1":"4fb3cceeaccfd8ea17bb11d027486c606508217c","sha256":"b1b80fc1cac4112a3ababd5956ae3067848f876ecb008d389f49549a7dda05ca","sha512":"038f0900bfca0d64433185618bfa41a252e5b0812f0291e5d0cba01f38f8f95b54dc4d328c6e2814fd38330b7d7383d232a386aec61efeab7ede3a0272bbc34c","ssdeep":"6144:1oAS2fD1Cm8I75rcwwnFo02k1WmsVmoR87Z+44vJA9:1HSwC6X0dpNF+DBy","tlshash":"eb4412d55e9850a9dfc428f0f7c921b2beb9a3b1b402810bd1741778c688f249977fad","first_seen":"2026-09-02T13:21:58.861781Z","last_seen":"2026-09-02T13:21:58.861781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":475,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dns.google/resolve?name=_r.noir.black\u0026type=TXT","fqdn":"dns.google","domain":"dns.google","tld":"google"},"ip":{"addr":"8.8.4.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:55.705Z","timestamp":1788355255705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:52 GMT","end":"Mon, 02 Nov 2026 08:39:51 GMT"},"fingerprint":{"sha1":"EC:C3:28:4B:50:48:E5:1F:62:0F:EE:B8:6F:7E:B8:3A:2F:5B:2E:52","sha256":"D4:67:B8:04:B8:87:C4:1C:B6:C0:C9:23:45:0F:21:68:F8:70:ED:BB:B1:8B:57:29:33:F7:23:9F:A8:D5:F3:DC"}}},"request":{"raw":"GET /resolve?name=_r.noir.black\u0026type=TXT HTTP/1.1\r\nHost: dns.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/dns-json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ndate: Wed, 02 Sep 2026 13:20:55 GMT\r\nexpires: Wed, 02 Sep 2026 13:20:55 GMT\r\ncache-control: private, max-age=60\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: gzip\r\nserver: HTTP server (unknown)\r\ncontent-length: 180\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":696,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7ad82d8a925c4423bc8c7d239a0a8093","sha1":"d050ca60819341531d847a284aa7959fcac89f46","sha256":"a834738de7bbcdbf682585000db6469377fbec084f5132b7ee550f0a327efefd","sha512":"8eb62a4c3a833cd85c454c4d86208d6227f5078b3981db4bab4c0f9dcb6d8ee0fb12d53f8a3c78c0e3046327f10fd6bb471d70039468d0eec980356a27a2010b","ssdeep":"","tlshash":"a2d0a788488144b9756653a0c4974687af9a2263f1ad2c94db006fa4e38f1a250d026b","first_seen":"2026-09-02T13:21:58.862938Z","last_seen":"2026-09-02T13:21:58.862938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":52,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/visacardsol.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.340Z","timestamp":1788355254340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/visacardsol.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2523417\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rdjwsUth5T2DPqBK3x1d7nOPRit4ow3iAwgDAKlbDu7gdrdtEeOeqK%2F%2FjFnao1wa2YyJFgl5sOywLQF7%2FTcaK%2FrysSzJE%2FK8qT1OjRHGUcatGsfpssvaO0zIhuBlTFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ace4b1ffbf8fac62018fae5487d25017\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd09398565699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2523417,"size_decoded":2524221,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"202b7e04b2ba5f382c19ed6293bb1ccb","sha1":"9a723ab33a1a82ade339a0e5fc759f1f65fc0572","sha256":"f30edb540969b96b3b8343c12bbc52834cb174864f461ffb75b41ce9834766fd","sha512":"6d8a874b53b792e7ecbc16f518c637aca06478d27a4b3abb5c300bdcfeeef6c0fcd8a09818076987803f5c3f22e354a5a3991a76dd80fa1b8e02423f1fa037ec","ssdeep":"24576:mpc0GKyDfwq+Ne//k/+5ISTFyIMeJqeKuBzT3naBExXm0KGA:gc0GrDY3/5hIMeJqeKU/3aBEx2OA","tlshash":"d52533f54fbd10bcec2c9c37181e36461c1236d1e6e89646e3666041da92f3778a6b3e","first_seen":"2026-09-02T13:21:58.865371Z","last_seen":"2026-09-02T13:21:58.865371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":1088,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/how-wallet-connect.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.357Z","timestamp":1788355254357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/how-wallet-connect.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 261115\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8YP8lqeb1KP2UnchRHBJvs71isUz8N02CXNqMPwB2mjVAHrIao4y0BouyislJ5L1QcSHASsN9ZDoCJfIRWVfxEpWGn4lsdcQUb%2BPOBNZ593U6U%2FLJsoSZDQIWSr3JZg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d5243cfdde8fee3a2d9bf19f8c0c45ff\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093b8795699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261115,"size_decoded":261912,"mime_type":"image/png","magic":"PNG image data, 401 x 456, 8-bit/color RGBA, non-interlaced","md5":"bcf6bdf1b1b587d270ab6d503aa73b2a","sha1":"75cf3b59c7b7d3ed3ef85046aa90c555cda441a6","sha256":"0c4dfa8d4d20bf7ae297301ff8c5813a79d02b5be849eaf0d053cf3c03a29748","sha512":"0900ea5f7fd65ed9a60f12158686d19a409065225104c78da8851d02fc862f82bd082b236183b851ed37d50f0f7f5b51b655dfa15d323cb55918c0ab2860cdaf","ssdeep":"6144:1iBzehhYsDCaZmuD+i2WUDixubQsONmpibdTXW74:1iB6hhYs+aQXRF8s2bNz","tlshash":"9b4412fc2fcc709bc3925bb09159503198739bc1f5129613a557ee9ad8caaf10e270bd","first_seen":"2026-09-02T13:21:58.866457Z","last_seen":"2026-09-02T13:21:58.866457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":507,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/thecard-no-annual-fee.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.367Z","timestamp":1788355254367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/thecard-no-annual-fee.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 350478\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8TXbBw5sBKtvs6XYkalqSv%2F5tazKZibieICES4IJZ5Tfvyiy9Fssxd6C4I5EMSG6M%2Fn1sqE47mqrAl0gx9i38MJtnIusjPhRQ2iwXi6Y8hqYH6Ngy3zcfzkBOEWNYUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"97641ef905b885cdf09f0a823c22a9c9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8a75699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350478,"size_decoded":351275,"mime_type":"image/png","magic":"PNG image data, 443 x 461, 8-bit/color RGBA, non-interlaced","md5":"f605f066cbdd632c43bf30bf5e983bb4","sha1":"0fb5a12297d2495ab2f3b6b29f1ac19f459822da","sha256":"b61950e9245d955317cfb8175bf2271acc13a846492f7ec8b896cf3726dce795","sha512":"b3f882b5dda7eedf50916c6f85ef192577dd40f0681a53262ed4aed8b6ed7f1f70da6c33a8200d86d4bfffd51dacde251b813ca7358d8c21723dedf9368e32c0","ssdeep":"6144:XX44e+8f9AraIlJ7fsm3tR1NsozDngYTjTCuGEOKlgoD7quCRwYdw48NDcEdwIfY:XX44e+vTLUozbgYTj2uGE5KuCxd18ddo","tlshash":"fb742387f245a6b3d786b6389da1130e4e3621c7626e48c3e4bd0a01f351a516637ffe","first_seen":"2026-09-02T13:21:58.867362Z","last_seen":"2026-09-02T13:21:58.867362Z","times_seen":1,"resource_available":false,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":526,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/featuresol.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.369Z","timestamp":1788355254369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/featuresol.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2456797\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gseSSoUFq09s3wpE7%2Fb7M0WqZfg8J6ibU3cb6i7rdhcMZLsiMJ1lwCmJO8OH5qbMIrmxUl%2Bpb1cLRZfkPFpJZZoeqSaoQ2yY5SXmC756p3JUajlI2VB%2FL1c8K%2BdvbtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b0d8770a4622745a03fe397a899bc8be\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8aa5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2456797,"size_decoded":2457599,"mime_type":"image/png","magic":"PNG image data, 1672 x 941, 8-bit/color RGBA, non-interlaced","md5":"3cd12bc39c0fd15a381871b11564d1a4","sha1":"68cb25863d1de907086456dd1afb13a6ece31cc7","sha256":"977d1b897eb003e2de8407f3659136573c5d05877ad756259a7226dde9d0b7af","sha512":"797ff60e08f18b9120e97a3efa7fc4b7bf01ef7f23b1fc88d23a32643205795a52e748719354c9640ab4de07db2412ad6db8af142883721725518a7a9344ad15","ssdeep":"24576:qo/RRNpY1zUzG4ndu8szmqHK2c0vHTEJ7usyIzXY:9p7fz9ndu8szJ/wThrY","tlshash":"c52533fda11058cee631c331c36255ba8d5592f567312fcb0269feb864ac5dc20aebb4","first_seen":"2026-09-02T13:21:58.868474Z","last_seen":"2026-09-02T13:21:58.868474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":970,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/track.php","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:21:19.921Z","timestamp":1788355279921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"POST /track.php HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nContent-Type: application/json\r\nContent-Length: 326\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":326,"data":"{\"visitor_id\":\"964d8b3f-655f-408b-83df-923154b604c4\",\"session_id\":\"c6bf8960-24fe-42d6-b75e-9161d3d500f0\",\"page\":\"https://crestag.site/\",\"referrer\":\"\",\"screen_width\":1280,\"screen_height\":1024,\"language\":\"en-US\",\"client_timezone\":\"UTC\",\"action\":\"heartbeat\",\"duration_seconds\":25,\"max_scroll\":0,\"click_delta\":0,\"section_delta\":0}"}},"response":{"raw":"HTTP/3 405 \r\ndate: Wed, 02 Sep 2026 13:21:20 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1aBz63V2aHrq757%2FhgXcBueId0NzuOFljtqrkvC6qUeNc2bBpCT7veg4eKZ7ABW6K9XhHbemR2Xt9H3xgnIFmUsltwFmdPLGKA57rZ1Y23SuJ%2BysuJgI4ygF4tImDT0%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a34cd13388495699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1460,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.334Z","timestamp":1788355254334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: application/javascript\r\nexpires: Fri, 04 Sep 2026 13:20:54 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2EQrMWKn03xPGhQ47sJQMnO5K6Q%2FKsLM7JiQQkgw75OJX8w2M7Mf8NvHygKo%2FT0dwYbZMGNTn2MTF%2BNQi6A5nJV6RxdnGWB6its1u1k9yrOKG1uMefn2%2BCQYPje7XU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a34cd09398485699-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1236,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-02T19:06:52.622571Z","times_seen":429185,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/crestaglogo.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.337Z","timestamp":1788355254337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/crestaglogo.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2123753\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sysFkzm6UF8J7w0cl%2FXM%2FVwU1ZCRkLC6CUT9EBMJEaYQMopzYyBvjx%2FUQKh6xAuoiRTMKxWesakMS40fV%2BxzN14XjKEmChZsIztQ12aee8qZjXqBZJnaKKg7ijtcvU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e90d843269f3285c6a32e598f7b9a227\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093984e5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123753,"size_decoded":2124555,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"138d3943169216447e7e5572d370f769","sha1":"13951806a9055ea71a318c1df1148c1207c956cd","sha256":"6936f63f808d98a5e993f969f93c911ecc5703bf52fcc2eff7aa6ec85a5614e0","sha512":"2b3aeec73d0246e917ed5a0b2362bf0bab499732f972e95cb2429aa2601c4254b2e8ab0ed9a775eb7c76e7acee84c2d9ba378c5cc7cc7fbff7c066797aedc2fc","ssdeep":"24576:+Z1kTwgjdm+VlYUzvhm3xJs0RIXGB+wt4yZreA7Q0Oyg:w1kTwEfVZ5m3xJTRS3wt4cZ3bg","tlshash":"75253378ca4ef5e4ded45d7583ad256c8d05a3d2785ca38822a9efdceec53882240c7d","first_seen":"2026-09-02T13:21:58.834245Z","last_seen":"2026-09-02T13:21:58.834245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":894,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/mastercardsol.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.339Z","timestamp":1788355254339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/mastercardsol.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2331806\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jhDCatG05GxLKcwQXCjC%2BoaUjyKyhD7ApXtwr%2FrpQSxWM58b8SPs7wLNy0NxT7Pyl0d1JH3%2Fq%2B2C5XPp%2F20UaTnifMuBNG6FUgwP0ymNapwXgrjBCwscTR%2B%2F7A2f48g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9fc0d4f30306b1c3d570059601c47f41\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd09398505699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331806,"size_decoded":2332614,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"d9cd5135120d841ed1566214610c662c","sha1":"fe3f7f491b9ab43f760d72cef020fbaacd3e1fc8","sha256":"3ff6f3d89b6894e7f4b30f5af3fefe3289d0e44d8defe36472bf3952a843bcac","sha512":"2d87964ab829a962b9e7d7ccee0bb09e8f040b8ebe1f55f309cb047852c41394de7950b5e3b0d9f7ffbcf0eee732c66d32529419471e5f44af1cf23bcafea1a8","ssdeep":"24576:tcNla7I4yBFP8B+CiP8QTp7NkdbtXGBBqc:Aa7I4yTPM+5T9NEpGBkc","tlshash":"b12533af715ca36a73845b80d77cea1fb36b9a362f51e0827cc035557068eb9dd30928","first_seen":"2026-09-02T13:21:58.870436Z","last_seen":"2026-09-02T13:21:58.870436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":901,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/feature-full-control.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.346Z","timestamp":1788355254346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/feature-full-control.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 360484\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BUnkSw1jGO%2FAV0ilQOi6L1QSBdPoM0MnqWfV%2F5n0mnyN4Tb2bP5lGxNcRNnfL1pM0pakOb6EIkv2gWcOkrp3jw95r9SrxPulE%2BDM5di0aT6lusrfiFLdYS5xtbcVJbk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9c7cd37190efebd9771326793baea901\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093a85f5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":360484,"size_decoded":361283,"mime_type":"image/png","magic":"PNG image data, 521 x 536, 8-bit/color RGBA, non-interlaced","md5":"8c292817edb6bc75189f1419f204c533","sha1":"570cbf5a0e324ee9efbecb412c8644ea77cbb36c","sha256":"54e7feb760fb4cbcc29d35749e58d7ecac4e1839f14c0b545e415c5593aabf36","sha512":"edcb4ef27db48fdf8391bee2d5fb54014544d1b1f27e63f1de89213866f8ea21eaabd8988ab6a395652c6f0fbf4acde3090c3f172f709fa6a56ea89b5c67b6c2","ssdeep":"6144:GFsfVeUW5uy5Lij9tLYM7RRjVslVKVicGJ3yOBOQjqvvnlJs:GFsfr1ECHZRiwJGkaOWqnlJs","tlshash":"ed7423332d9cf5d1c56700f1d762af169cb227c3f58a8996848758d29eb0fb1612a3f8","first_seen":"2026-09-02T13:21:58.871676Z","last_seen":"2026-09-02T13:21:58.871676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":588,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/thecardsol.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.360Z","timestamp":1788355254360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/thecardsol.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2527768\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NwmVs1TadXRUoRU6moerum3a5qwqQF19p9uN2pHfR3JGNQOSs84wEPWeBJmdoEMnnEyNBfcHUZ0n7h0FtH9oY%2B%2FxkTUvcxeSeU7fG0AYjz%2F51lpxyqzFW%2B9khMAscJc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a1e362d1426c9f4de5d29d19be5ba8d8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8855699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2527768,"size_decoded":2528570,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGBA, non-interlaced","md5":"87846151592919144dbaa6080984fda5","sha1":"dd31123d6740b4ca79731bf412e1c01026e84275","sha256":"cbc2594dc80671d2b4c2f30ec24771973a1356484138e3548f4706798fdd9d41","sha512":"ae7c610a557091e693b620b505a2afc459f25ce025bccddd7a1568ca894cebec0897bcd61ad0d12856c729e8b806a2e7412b15fff0905467510569619c53b40f","ssdeep":"12288:As5NhvMm6ZiEUF1/VrtuRP+AEB94KXKeE/+bjjBdTXOvcVhJFXxKTHQC8wEeLKC/:AjZifZhB91BddivcTxO6eL5DUOlHIZXe","tlshash":"e32533fa2231ade4d5664f7cc79f41062e2286b187c8fceaa43a5601ffd855c3872d19","first_seen":"2026-09-02T13:21:58.873215Z","last_seen":"2026-09-02T13:21:58.873215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":1118,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/track.php","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:59.814Z","timestamp":1788355259814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"POST /track.php HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nContent-Type: application/json\r\nContent-Length: 325\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":325,"data":"{\"visitor_id\":\"964d8b3f-655f-408b-83df-923154b604c4\",\"session_id\":\"c6bf8960-24fe-42d6-b75e-9161d3d500f0\",\"page\":\"https://crestag.site/\",\"referrer\":\"\",\"screen_width\":1280,\"screen_height\":1024,\"language\":\"en-US\",\"client_timezone\":\"UTC\",\"action\":\"heartbeat\",\"duration_seconds\":5,\"max_scroll\":0,\"click_delta\":0,\"section_delta\":1}"}},"response":{"raw":"HTTP/3 405 \r\ndate: Wed, 02 Sep 2026 13:20:59 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XnFifOY7nkpqIW0okqZeqUebWxiqYBIcypyiCh4wIiMfRxZCsDFqtMuYEBgzmTL8zuFL76%2BsZGE%2FQG5KKw2ytWvdm5e4JRsreO0Ins1adEWAK0N4lPwDCAzLmz3SNks%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a34cd0b5d84c5699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1459,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/track.php","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:21:09.868Z","timestamp":1788355269868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"POST /track.php HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nContent-Type: application/json\r\nContent-Length: 326\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":326,"data":"{\"visitor_id\":\"964d8b3f-655f-408b-83df-923154b604c4\",\"session_id\":\"c6bf8960-24fe-42d6-b75e-9161d3d500f0\",\"page\":\"https://crestag.site/\",\"referrer\":\"\",\"screen_width\":1280,\"screen_height\":1024,\"language\":\"en-US\",\"client_timezone\":\"UTC\",\"action\":\"heartbeat\",\"duration_seconds\":15,\"max_scroll\":0,\"click_delta\":0,\"section_delta\":0}"}},"response":{"raw":"HTTP/3 405 \r\ndate: Wed, 02 Sep 2026 13:21:09 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nJjTKsGUwHKRXMc0Zx9j8sifQ9epqV%2B891%2B8LsHZ%2B%2B6Qq%2B2EOv2fBjfr0oQO%2BMyspkIOfgEoC3u%2BprRlSpnakeSZygOJEX3JEjI%2FF0Ff0k8QjS1S%2FK3Eom%2B%2FZ9vgZCc%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: a34cd0f4bcc25699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1478,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/track.php","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestag.site/","date":"2026-09-02T13:21:29.940Z","timestamp":1788355289940,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /track.php HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nContent-Type: application/json\r\nContent-Length: 326\r\nOrigin: https://crestag.site\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":326,"data":"{\"visitor_id\":\"964d8b3f-655f-408b-83df-923154b604c4\",\"session_id\":\"c6bf8960-24fe-42d6-b75e-9161d3d500f0\",\"page\":\"https://crestag.site/\",\"referrer\":\"\",\"screen_width\":1280,\"screen_height\":1024,\"language\":\"en-US\",\"client_timezone\":\"UTC\",\"action\":\"heartbeat\",\"duration_seconds\":35,\"max_scroll\":0,\"click_delta\":0,\"section_delta\":0}"}},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T19:18:10.883333Z","times_seen":18241132,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestag.site/pic/thecard-wallet-pay.png","fqdn":"crestag.site","domain":"crestag.site","tld":"site"},"ip":{"addr":"172.66.47.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.364Z","timestamp":1788355254364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crestag.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Aug 2026 13:32:31 GMT","end":"Mon, 23 Nov 2026 14:32:26 GMT"},"fingerprint":{"sha1":"A9:8E:0C:3A:CF:AF:E0:F6:5C:B3:E9:6A:C5:3B:2A:77:DD:0C:61:BD","sha256":"92:2F:76:5F:2E:EE:13:EB:A9:63:90:64:5B:8B:A3:14:19:49:87:45:7E:0D:F3:38:BA:79:CE:C5:17:C1:D8:A5"}}},"request":{"raw":"GET /pic/thecard-wallet-pay.png HTTP/1.1\r\nHost: crestag.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 13:20:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 293697\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvEtoW9n4vFXydsNFjPFPERH6ZfqpoEfXSrEAoFKRzQv7%2F%2BhM7h%2FbGpeHUmly4bX0W7UXlnAhq1GnX6bQtq6Y1V9sDI6kbGgTaYcWHxx0ZIr7IRDGKlTilfjwXIb3uE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"363010191aba54effaa5c69718e42aa6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a34cd093c8a15699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293697,"size_decoded":294496,"mime_type":"image/png","magic":"PNG image data, 449 x 567, 8-bit/color RGBA, non-interlaced","md5":"f6884c121ca98429a8a132ebfbe7d804","sha1":"c104eb18fcc01e0db4bf3404c25111197138ceea","sha256":"e01a46bc007f6db433bd4026ff2ae2c2b7dc209ec793b3a4888571d2a0b50373","sha512":"01aa560968a6e0e0eb4cc9ed02c5483809fa370dc58d99c0d5584c2b9fb4d8cb83591b47e992bab8c88755d56475db9b9806203b539904068e409f43f88def0e","ssdeep":"6144:GXDzPOhM6cYDTKtd6zoeovK/FA7bmqCKyAUg3g4liiS1opBGQtQwlE6/:GXDkKjuFMmcPU+g4QZMdll5","tlshash":"c65423dac734f4aeebada770833f2659e2364ea11962824081a54ccdbd4ffd15503d2d","first_seen":"2026-09-02T13:21:58.874438Z","last_seen":"2026-09-02T13:21:58.874438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":749,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":507,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/mdi/web.svg","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"104.26.12.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestag.site/","date":"2026-09-02T13:20:54.388Z","timestamp":1788355254388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 03:59:18 GMT","end":"Tue, 20 Oct 2026 04:59:15 GMT"},"fingerprint":{"sha1":"A0:5C:F9:5D:77:CB:4E:9B:84:15:FE:6D:47:2A:A7:50:D4:8E:EA:E8","sha256":"B3:97:63:79:5A:75:95:41:F2:82:44:7B:3D:47:41:BD:91:8F:C0:FA:CC:2F:D9:C5:DC:FE:C3:B5:FD:00:F3:75"}}},"request":{"raw":"GET /mdi/web.svg HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestag.site/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 13:20:57 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qc06Cogtn7QPrmmf%2FEaFVWbLlKAztwxO7tNMvlofuOdl9Xbf1RgqnrTuuSIb8FDsENRLtKknM09qAcTj5RJlDXy8KK1Bw7V%2BzAeF%2BZWV9%2Fw43m%2FgJYd39Y9nMMPHnoPb7lezbQ%3D%3D\"}]}\r\nlast-modified: Wed, 02 Sep 2026 13:20:57 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a34cd0a7db13120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":851,"size_decoded":1373,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"a8d59b4a55a75a6ae28b0b30b576cf84","sha1":"49a971c4036255d408b02f114b6ff69a812b2e22","sha256":"32f9d9fe46536ee2985e2c1fbe3d76c43b938f5f7030b5024365d44f0a1ee046","sha512":"12ce7dcaeb4e33af679c17f4f4098f3210f021e968cac54be1e6ba25b2fe38aab17c1493c4660aecc2ff80124009b18e90ef43a57f22c259d129d1b2f1b60876","ssdeep":"","tlshash":"18018836ee48914ec446829ccd30eb926b1f82b8b68e4328d3dcd2743816f44ec33a48","first_seen":"2026-09-02T13:21:58.875949Z","last_seen":"2026-09-02T13:21:58.875949Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3274,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":97,"receive":0,"ssl":3162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}