{"report_id":"b219c78c-9b7b-4afd-8e1c-8f7e5bc1ba85","version":0,"status":"done","tags":[],"date":"2026-08-23T06:08:05Z","url":{"schema":"https","addr":"crestwealthfinance.com/","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"crestwealthfinance.com/","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"title":"Crestwealthfinance || Online Banking, Mortgages, Diverse Loans, Investing","dom":{"size":242314,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10705)","md5":"38428b74c8b4858110781caf5e26d770","sha1":"1543dbdf8031b929f7ab68e6eba5d0082ad8e697","sha256":"5c3a9f725eda827fbe45ffc8c0fb970290b78fef5ecc45c1d3372d9d193706c8","sha512":"328a777d9f9fe43cfe0a7d8336390620fa14ef21b90779e4a68d0e8aa5ff18713514badcb3137342e16c2e6c0778fef464ce7f03921233f7149b83e7f5576816","ssdeep":"1536:JdNU6FDumnl+Q5kdp4dpEdp/7uCqeWQCe:1DumnlBkdp4dpEdpCCq6n","tlshash":"2b34ec3290f1103701a390e26aa01b5f6f92ea07da4b5a5433fc1bd98fd7d8adc1765e","dom_hash":"domhash2b2dd6c95c10678956893c02d27ea516","first_seen":"2026-08-23T06:08:23.721421Z","last_seen":"2026-08-23T06:08:23.721421Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"crestwealthfinance.com/","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T06:08:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.79.72.4","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-08-21T18:03:58.464505Z","alert_count":0,"request_count":1,"received_data":1616,"sent_data":547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-08-21T18:03:58.423155Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-08-21T18:03:59.211095Z","alert_count":0,"request_count":4,"received_data":330510,"sent_data":1905,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-17T08:07:26.710219Z","alert_count":0,"request_count":2,"received_data":42207,"sent_data":966,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":2,"received_data":19549,"sent_data":1113,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-08-21T18:03:58.201814Z","alert_count":0,"request_count":1,"received_data":7742,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"crestwealthfinance.com","ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":81,"request_count":81,"received_data":3777949,"sent_data":41654,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":5,"received_data":152437,"sent_data":2853,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.123.94.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-08-21T19:28:41.78346Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":637,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/circleType/jquery.circleType.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9db4d790006161f5a3472cbf07196c8e","sha1":"36eaad9bd96cc88149613da3181486c8b9eee365","sha256":"ced32c72e57225133f8a764317a376e18aca638aaba1e028c981c39601fd65ad","sha512":"ec475fcf54d941f4998a7ff17ac4b793598e4448dbbc91e80577a2cc12586e02b5e06332aa81bf4cc664028249bcdc7fd6ba7a411fa71a197b99fe39781c84f1","ssdeep":"96:fOmRvUjwWlz7SM6Y0PDexeAEgRgzV0AkzSknCUP7kp5OldXLBNq5wM:fOmR8jwF3Yca4AhWzGhkp5iA","tlshash":"89b19958aa0921291037b37ecbde6a48f736532b01179462bebc11d62fb195807d6ffc","size":5097,"data":"","first_seen":"2023-03-07T14:30:16Z","last_seen":"2026-08-23T06:08:51.319Z","times_seen":420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/nice-select/jquery.nice-select.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-23T08:57:33.921993Z","times_seen":10751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/vegas/vegas.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1be4d8a62755de12acba09a24388bd36","sha1":"450a69681b4478fcd47097783241e70219c4f598","sha256":"45d47af6a3378fa67b31eae0bd56d028ec3f94ba6bcce961d5e559c7dcf5e9ed","sha512":"e4c282247f2d9229a838b0d193837275d25a492f4df61540b6e5a2a64864d7a5e4d3fc208adc920b12f5be08f715d4fff710c1dd5b7eeb67cd51b2dcddf9fd07","ssdeep":"192:hqpGsYXXwzaX5BNsF7gx8tuLTPiDfSPQUGpDLzxwonRxFIGxKL0skgqffyOJ:haJFW8tuLTPGfTFpDLzxwoRxFDxKoskn","tlshash":"7a22758afea1954902cfd172817ae20ada7691447913e12c7cf9d5cad820ecd712faf4","size":10383,"data":"","first_seen":"2023-03-07T22:18:52Z","last_seen":"2026-08-23T06:08:51.301871Z","times_seen":1082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/wow/wow.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11ac4d7173a68c50169addca2ef1b827","sha1":"621284d032a248c41753e995680fc30089bd374c","sha256":"dd90fdb6538987fe7975bd43803b1c7d8d62912a371c788caec32d016e09dca8","sha512":"658888b9d89577b55798fc56451f9458ba9b4885573a96480fd9bd480cb59854769964da9a5f54feba19ba66fa6df44c79203d35f1d6d9cafd84886c58e233a4","ssdeep":"96:3GqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:y30suCYOVEE7ne4JqgpIwdh","tlshash":"bbd175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f38","size":6300,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-23T06:08:51.279437Z","times_seen":5639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-ajaxchimp/jquery.ajaxchimp.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d1b0e5a3a7397b267e704beb2f7272","sha1":"86df23e41520d19dd0c6928e4a5de89c1ae172a2","sha256":"2dcc9f6916671ee0ee4c5f7c7b6f13c519189b65d371a39309c0d95b79050c28","sha512":"e728f97a563dbba72519ef7ff7b6e3de3265c3cf8ef574affed6e67bc9bf2d1f1c2a79d3e7ead1f2a1d6fd4610fcca332e0ddcbd31de608a4ce64464b404926e","ssdeep":"","tlshash":"4741444025101bc2418b21f2e4c7bbe370e7d5958824f558e668e0e30ee4dcdae27a9e","size":2381,"data":"","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-08-23T06:08:51.391543Z","times_seen":5665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/sweetalert/dist/sweetalert.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","size":40808,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-08-23T08:37:50.863933Z","times_seen":11840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c894341bf3c2f8fd24f7fc0e9c25234","sha1":"c92620b37e8334357e0992f67500267a84b85541","sha256":"64367f7fb5ded2240fb26e251f94b647cb0ae9e4e7cc36b0d7426de169ba5d54","sha512":"6bd48002c197f0900b8998359152552c7fe32d169effa239ac43b3dfd8644afa7ecf6eaae35912fd8a6c7b2197ab42387f79dfc13d97e0861a888373c723d28d","ssdeep":"","tlshash":"39a0220b0b233028c333300000e0cb3aa0b3c222ba08e33b320f0300038000ac0a80c8","size":84,"data":"","first_seen":"2026-06-12T08:21:09.873643Z","last_seen":"2026-08-23T06:08:51.397757Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab351c655f265158410ab0a1a8fe2ed7","sha1":"1493a8a6aef503887bc9e965d26439f37c5e0f37","sha256":"f6648f085c4834fad182617300743bc20acb00f4830e2db9d847a54818cd7a63","sha512":"40f914ed9cc8886964e9198574358f0d2ceff8fdb3fb4e77f2adca9125185588784964200914d8c9d35ba51f057a69d6050c50fe6a99605f89ad0415fe00f688","ssdeep":"","tlshash":"daf0ab6a3c73409857cb20b4c3bff528391a30668041c857b85dd8299fb0fce7a00a94","size":480,"data":"","first_seen":"2026-08-23T06:08:23.790218Z","last_seen":"2026-08-23T06:08:51.3988Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fbf79a9147020fa04fa91b1742b64e7","sha1":"907b7c1d7e08d467f994d2c1e22b844783584ccf","sha256":"9d8f9317afdf15bcfda2aef4aa2dd9814708d62ab9dc9c61c60751c53c48b9a0","sha512":"1a837d7d3bdefd75c28dc8b504e1855e2d08845772647bde8380ec6645ffc298fa90ef079ac9e38301854974ba96001814b3bf2117eed0f33f7e9c1a9ce73eec","ssdeep":"","tlshash":"5c214c0d35f100a302a371298e574951359265879901a924ba4c4ee05f6cd7ef9b66ed","size":1164,"data":"","first_seen":"2026-08-23T06:08:23.791233Z","last_seen":"2026-08-23T06:08:51.400348Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-migrate/jquery-migrate.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","size":11224,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-23T08:34:56.823933Z","times_seen":87101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-ui/jquery-ui.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de09893dbe5e07e0c2cd760d3eb4e839","sha1":"3e074a9cf085bc4acc09271bcb45dbc7eec975d4","sha256":"057572949e21e2d645ceda110df4793df743a85a530a6c04e160926241057e95","sha512":"c2ac5adc250b67f66968d0d448563b2e03e8307184f7ddf4d8d70a99dc3b6c22c5eca91def59c161c735b3f557dd5f591f41d8f5f58383c46c6e8520067211f1","ssdeep":"6144:DK8S/EGdmTd1HmcIk95W5ZbHDVirEOuJy7knjhBHXwujgWUl/plq/pRlTH+7IXtJ:bTjHmcIk95W5FHoruJy7CjhBWDg5","tlshash":"19a4a689f39c262a857a325d5c2e41ce723c8076d60158bfbc5d59dc29e883c42bbf79","size":457819,"data":"","first_seen":"2026-08-23T06:08:23.760067Z","last_seen":"2026-08-23T06:08:51.313244Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/swiper/swiper.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b74e42eb5a00c128681fb42890676d66","sha1":"af15c1c1d94e85a0e76bd75def0b4d3b64759f76","sha256":"2f06dae9eda7f01aee86f4a386ff1749c24612c5b1e947c6c91f576c4fa8f565","sha512":"272d20406e4580242446d9dca7441ed7d105ddf0c744cc4a914c53da47f7adaff8d23ebb25f872f91feef2d13efd51067bb594eaa31490ecb91b6a2f3123bc24","ssdeep":"1536:OOgAc1fFOszeCOG3RxCK8Yi/Glq+dBZDUiOMRLMGpukRRgj8evHgZsUgeAq5qV8a:wQCL7ji/udoxKRRtYHgZsUgeAq5qOsJL","tlshash":"f4d3094eb39061a551e36257525e8241a3b72409b80ad0ac35b68cd7adbde4c13bfffc","size":140942,"data":"","first_seen":"2023-03-07T12:21:29Z","last_seen":"2026-08-23T06:08:51.376714Z","times_seen":1750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/js/custom.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e4796566f84d8f72b8f3261d86604d9","sha1":"5f6f3accfd55156e3318d9873877015167cdb09c","sha256":"efddef4914ab8878391f1ceae99551c0296f85e4f363ef0ca39444502fb3998c","sha512":"d4fb142a6baf5a7d14dc5b08889d0533843ab9e3821d73e3edde39ee415611e9a0d8f6d85d648aaa333c29c7b3528ac1f49045026c444065639402ca9e3aaac0","ssdeep":"384:1879gcPIkdXGg9SpvzwsfJ417htsP9/ayUlllBPe:oPVdXE5z1hK7gP9/D","tlshash":"eda29409711200b596ff73398f6a9905ef690227c0028645bded8d989ff06a8a0f6fdd","size":23106,"data":"","first_seen":"2023-03-14T14:58:26Z","last_seen":"2026-08-23T06:08:51.328717Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/circleType/jquery.lettering.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83f6723631eeb52da3101b72b7624728","sha1":"3c74ddfb1209f2fd56fd58e61829e01a073e303f","sha256":"c9bd115d1d0d0871a3e6b701384a903d7bd378313a0504ae94949f5bb21894f0","sha512":"549fe261b8aed5e27ac8b8a67d38bae6dd91f5315c1b90fd5fc6427db6c41614df3e728987c6f2a0a5c46b08b949c2590582f57a28ab2f5f8c733643c744f3f5","ssdeep":"","tlshash":"4311dcc4f3a3aa07479bb7bd513b620ee26654c354030c01f9a8d2563da7b490aa7ea4","size":924,"data":"","first_seen":"2023-03-07T14:30:16Z","last_seen":"2026-08-23T06:08:51.371556Z","times_seen":1022,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BI-Moxe0.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a9d55e8dc66eb0b690bd00f7271e647","sha1":"befc832793a4eb6de6db51438d8b904079c156b9","sha256":"433b24ab945d5bf78deacbbb62265f4ce7fe10d8c06fa050f4c007c0e9f4f0eb","sha512":"af067ad24e8068dc001f356c1b6e8b3f821564fd781c448c2998cf3a081be1a37979d9804f20eb8de2960507e53ba46533d583dfae51eef19e217421a3049c04","ssdeep":"384:D7wI6JME1dwQBSB8g6eBtoK6hnETSzgfQBATS:DMxN1dwQk8g6Q+nEGiQBAu","tlshash":"c472e8341240783fb62b6919526ce497623ad25ce6d3c038de5fdd4d32d8cc299a3bb9","size":16032,"data":"","first_seen":"2026-08-03T19:54:11.753674Z","last_seen":"2026-08-23T06:21:56.404401Z","times_seen":621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/bxslider/jquery.bxslider.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"697d69a48e5356f7106e38c09f7f19e0","sha1":"b57160771fa597a5b56c5b12756c693e4829be07","sha256":"bb9e7dc822c6b7b95a6329932885c72ff2caf74b243fc1c40aca0e858123b83e","sha512":"898b8be9b092ac7dcd1efe0381db28fb8ed0555419cdaf40bf739edfb7945f8e301a95e6392677b2564b1f5838a560e6f309394cc46b1bd7b570b6f9312b90e1","ssdeep":"192:7RbGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIHp:9XZ8WjOVRXy16/kXIHHSHruwc","tlshash":"9392541b713436fe46b632b5b299cf487276908ac537f8f861b5d85819e8cc4301badb","size":19359,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-08-23T06:08:51.349187Z","times_seen":7252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-appear/jquery.appear.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64531fe766285a4f78a602f316d52d48","sha1":"9a0ace71a45e5546e2d3464f3439f563d865aed4","sha256":"7212f627fb02a6e5780ddae7870b9b06906e322ba57b33a137444994f5fafb15","sha512":"c322f9e3287be200dad9093a5fb4ff0dbe5bdbd5369ed440d87dceaf04e37e4a15659513fa0390205bdedbe6ddbc48d816a81cc6f5453f1df89da074d3578855","ssdeep":"","tlshash":"3921bbca39c6bca183fb701c562b72421171913f824249a35ceecdbc3aa6c513d23e58","size":1266,"data":"","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-08-23T06:08:51.327986Z","times_seen":3242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-magnific-popup/jquery.magnific-popup.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-23T08:05:14.705487Z","times_seen":25116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d330899eb0177ca492d1cf16427c94b","sha1":"11b3e62f0c12c835c12c5d257f0ce22aea3e1954","sha256":"012c673b4f73512d934760a31f93679d3525ef13e30f4473a0db5d115a037544","sha512":"c9b9d475ba9d05ee38e02cd796dad489ddcc46a4d1728dc818475a047ea61261f9aaca97596ef5f189e1d571ce03aa1f46b382cd8a1d4fef892dc9cad53aa8b9","ssdeep":"6144:FMAopqOWSr8ad2jJKaQKhJp9cuIfoTkqM+9+:4qOW2Rd29B/DIfoTtM+9+","tlshash":"b3443ad53294b035439b51e6906f1106f33e5c19580d812cf269ece679baec8a2f7fb8","size":273837,"data":"","first_seen":"2026-08-03T19:54:11.723826Z","last_seen":"2026-08-23T06:21:56.389014Z","times_seen":611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery/jquery-3.6.0.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-23T08:20:19.991211Z","times_seen":499705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/isotope/isotope.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c61eb8802947bf0d14f5430dfdebcd","sha1":"462535569e9282274bdd71e0a1393052afb426f5","sha256":"4fa72a8e292674529c8c0fdc8b0ccb7974e214d83e862316e91743ed7453b1c6","sha512":"7a43ace9c2badcf6e170cd09a0b4e53232e52f0e0f6e77522e2af9e02a0ed8002c7437effa4e51e8b32226bbdb2d6c2d78d7c2e507615b8dcae28f6756d274ed","ssdeep":"768:njlIew3PtifBnQ/KMDwmWD6sMKD6gjfGQre4+uhFVByQ9zx:njWSBnQ/LEBD6YD6Ee4+mf9zx","tlshash":"3803b649b74079304387b1a696af110f733aa47ca90690ecb369d8fb1cb684d6133f79","size":37779,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-23T06:08:51.350306Z","times_seen":3369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-23T06:21:56.385555Z","times_seen":8689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-validate/jquery.validate.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c43ece3914ba205adce6a10fbfd0828","sha1":"9a40a00ab7fe8c5993238fe9c4c6547c2dafb134","sha256":"f075a7a9741e59caf10c40e916d8cbd01a4f1a6baed1f4d15b5019606e303e70","sha512":"d89ce0e380925cfac70dc4f35740adc89b6cc89f9af096bf8c58adc87c6bf7439fdf30aa36eb2a154b7b532461d276a50799739a7731e42fb69ea5f36ab9e48f","ssdeep":"384:QQpjAy+Jx6UtHYlHUdS2L7wQ548NsOAN/tllEny+Ww5MQPN3txwV/vtPx+OLDEoG:N+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVs","tlshash":"2392b68d77d670065a9630f4a05b660760b669a0a018e87cb5b8e4c1bef8fcc50f7f78","size":21092,"data":"","first_seen":"2023-04-06T21:12:22Z","last_seen":"2026-08-23T06:08:51.342404Z","times_seen":1335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/wnumb/wNumb.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f80cfaf4e97858a1ff12021a0460cc8","sha1":"4ca63a42c6b1713305e3f226b0bae787a5c4689d","sha256":"0e41c81542907ea43b8c0e869d647d67207825bfa3f9d3ae635daf9d8abcc639","sha512":"8a0550ee1c905628ce5257e0dce99c4d92f06092015d4eb7c4bf510b5db104736998624092d0e7ce5f48c34278cab49a42d0f14d3565c2163bdf4be986856a25","ssdeep":"","tlshash":"8e4175da32c171f39f3220a0006b985bf12d9a9924dc0466e6447991bf3176f8bb7d6f","size":2235,"data":"","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-08-23T07:50:43.752818Z","times_seen":1919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/extra-scripts/jquery.paroller.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01785ef621a5fe452c87448fb659c3d1","sha1":"47a4567cfffe9a282317b4b109994ce4263a7a71","sha256":"dce18e13367b749ca9dd1e552ad631b88ee2ba1ba5aeab8d9d7582e36e019e51","sha512":"e4d5febdc4d214a719b7d635904621e0a72d33d64173fe3fd8a18ca7c85f37ffd32156d69471876bd8b832d958b37e9c55ba306abb1931b87d57eb91460b5b55","ssdeep":"","tlshash":"9d51025938a0b064f3539a9a82dfc911f03dd5a1290d0999e25edced2dda8cd82f3b07","size":2796,"data":"","first_seen":"2023-03-12T06:08:05Z","last_seen":"2026-08-23T06:08:51.352242Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/bootstrap/js/bootstrap.bundle.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"042c7b121492b284f48e2a815de85a7a","sha1":"2dac85f8c54408276a0bf3cffa91dfd4ef7a3f51","sha256":"05304a8f26373142efa126a87977201cbc22d408c573f151ee2907933e9099f7","sha512":"0d2762b8d66d7d485e8591d7b62b7d49affcde2d3a6129ef4fc26cf1daf07645420cc937270a48c5d85fda8454072503077c20b8dda2033a1335fc4502ea86c8","ssdeep":"1536:Nz3Bdr5R2tnuoJXGP2FeFx7g2v+CfYL/OVlMobdOFV:BxlPBYLug","tlshash":"6073c6493214b8730ade54a68077470bf7255da5b14b812cb9bd9cde2a3dc8232b7f78","size":80427,"data":"","first_seen":"2023-03-07T14:38:56Z","last_seen":"2026-08-23T06:08:51.290152Z","times_seen":1752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/odometer/odometer.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07013b14ea1c5e30722ded722a1dfff2","sha1":"e6b09f4356f4e0485c6c7f73e629a70a1a4a549d","sha256":"b915a94b58cd8566dbe14df96e8fac1ae0466e35660f887109c5d53e5b996960","sha512":"d765c201184b347d618c3fb63144fc68a7318af5f8388ca01d1941287b83c93344d87d10bf1b2824eaccfe7ed8dae18d52ddba4e9adc1cb38109144e33a3f54f","ssdeep":"192:CABzlvk8QecC6AOcu2flRdI5s/GMjXuu/T:FBhvk8QecCa07z+Wd/T","tlshash":"ff129580be02a725875371e151bf0709b7bb99ae6404401df67c9cdabe25c38e12bf74","size":9897,"data":"","first_seen":"2023-03-07T21:40:14Z","last_seen":"2026-08-23T06:08:51.380198Z","times_seen":1654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/owl-carousel/owl.carousel.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-23T07:06:50.706255Z","times_seen":68072,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/language-switcher/jquery.polyglot.language.switcher.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbf241a70a31b84fa4ec372bbee88f42","sha1":"6f036ae9dbbebd96e140587f0844232a603cb1ed","sha256":"9fba088bf085d90228b2fa2bf3cad343151d4dcd0cc5fddc898fa5b2b5d03159","sha512":"7681efe0a95ef24b0e9758fec4cebcf8f4fab2b7760bb732d4f9bb08cf4b308040d226da0928f64b97d56edc070643caed65027c5a0f39ec53ded5d3f259f1aa","ssdeep":"192:4nNpQH/mIX93Zd0E0CqeXm6I3Gozsuz6aotYGYQWCsG0gK5+3Ce55tC7Arvd2klP:4rm33ZSEvqe26ILzEK5+Lxz1BJD","tlshash":"e752eb0d7de7112194bbf0bd5faf2198f231814b200add647c5d96808fa4a6846aeffd","size":13571,"data":"","first_seen":"2023-03-07T14:05:29Z","last_seen":"2026-08-23T06:08:51.377921Z","times_seen":579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.3.2","filename":"https://crestwealthfinance.com/assets/vendors/jquery-migrate/jquery-migrate.min.js","line_number":2,"column_number":709}]},"http":[{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/nice-select/nice-select.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.001Z","timestamp":1787465251001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/nice-select/nice-select.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 894\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3729,"size_decoded":1217,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"253edc447aedc4053a05da979835bd6e","sha1":"08b9a298913c10ff2844d781c3e51bb597b8861c","sha256":"fbf2d1ea6d68119d3d52dbb8ea17835decc9a682dedde4fff7fb346e1a915634","sha512":"0f8ad3ae345d67e0183b015b4104a86109201917ff24cdc4ec3e2226f1c13e3ff43a6025348ec9aae716ed9b3c3c2a0d91eaf1df01b0b5e509a1bfca7e414124","ssdeep":"","tlshash":"2b7111b99b514615352e87bfabc37f68233ed0426826c8acf7d1890e0f0e68c4c96747","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.334194Z","times_seen":283,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/css/module-css/07-footer-section.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.021Z","timestamp":1787465251021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/css/module-css/07-footer-section.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2406\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18351,"size_decoded":2730,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"a295d01d32e65cb1c67f1f5cbdb21c9a","sha1":"81737d14692ab8cb5dc4865386c41feb8be9caa2","sha256":"787cedea5e5a85105eae932dae4a9f580d9deed80181b5af33745d342e38fe3e","sha512":"cf7d364212500595e33ff674aceeb26de812b09a11622e232d200b252a82a9d40ce1cb112ca319ba6b8446bb162d5dd503470f04d9611e25361b3e67a5be47ec","ssdeep":"192:zwj7+Yc1m6umZlmvnvl/VmS0f9uZ4JQ39d8Ul3pIX22GFnUlWv/TUlYFD4qmA/Y/:5GXmzKpct","tlshash":"3882dfad662111027533dba8afe23645da704053d64601a87fe893608fff7acc652f9e","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.312536Z","times_seen":171,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/flag-5.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.095Z","timestamp":1787465251095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/flag-5.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2543\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2543,"size_decoded":2808,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"9d63b207e82cfc58553d3a77ba9a1604","sha1":"c432a0cdf19dcb03bc2e1ba5752bb5d7f643e543","sha256":"17d086d5ef2a3ea5301a8908d72da27285385664b144e110eb9d1a245105a09d","sha512":"f2440df8acb4bf04a589b9441ea1ee26f86e0f888654a52c3e2639011f4fb19008bc8efb8cb75060d93a5d2d14e4fbeb5d2f37a47b6125cb188ac6608a947105","ssdeep":"","tlshash":"c1514dfd726501b89069037371bfd04ca0b2e4fa8050ddf9486cdbce7a6650615a1817","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.329283Z","times_seen":105,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/favicons/favicon-16x16.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.919Z","timestamp":1787465251919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/favicons/favicon-16x16.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14388\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14388,"size_decoded":14654,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit colormap, non-interlaced","md5":"fd98bc0ae2e6cdf5653687a0c3582777","sha1":"19161ef76940d344e79655628faf7f77b293484c","sha256":"b1c9970a87f77ca10dcce97b0805260f99eee0ec679fc4bee6c7aba4b538454b","sha512":"21668963998af958f03b08e9030aa3fe07ce3c2797a846461ed2c854b9ae53d7a3bb5d5789728b06a1ef9863ea1f4b3cb26a60639ee51426967aeefe4d5f9785","ssdeep":"384:lkaFiuPWolWDlSw7FmHAo+8craWh++uQ6Yhy:kIWwWwwa+MUIYhy","tlshash":"e152cfe19c79c4b99058de88b17923730749123caea0d1be21776b78ca6707dd93920b","first_seen":"2026-08-23T06:08:23.72468Z","last_seen":"2026-08-23T06:08:51.291839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/deals-2.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:35.079Z","timestamp":1787465255079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/deals-2.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:35 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25662\r\ndate: Sun, 23 Aug 2026 06:07:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25662,"size_decoded":25929,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 460x515, components 3","md5":"b0620d8db5e94c4793a6186d93f34f11","sha1":"9479d626a909da20a88aeb552f438488b594210d","sha256":"0ece4e3cf2d0b0de10a8a097cb471c1234d1773b3c1887c84f542f9e72693d14","sha512":"d49ec5408c8026b2659f0a85b566b600b70e6eb8e0cea26d4765e2487b11e35f6d74711fe250292fd3d953541742957d4b583a8ab00e88a0a98ff3d9fd7e490b","ssdeep":"768:tPGyc6YYF1A/NEgNrnnJnLPxYPbLwV77daw4EOrx7:tn/I/+gNLdPxYPYfdadEO17","tlshash":"88b2e17c3f2e8a540276c23b2ab34726518789e170bd339db76e6f320b3228d9650cd1","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.315954Z","times_seen":115,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/6030ccf774e68b29354525e55b1896e73f43a8b2.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.79.72.4","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:35.114Z","timestamp":1787465255114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/6030ccf774e68b29354525e55b1896e73f43a8b2.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 06:07:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ec-UNh9/6UBCHxGooajoB7UsL/QuSI\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1260,"size_decoded":913,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91bc527adc89c6d1ff8ec056a4940e5f","sha1":"50d87dffa501087c46a286a3a01ed4b0bfd0b922","sha256":"340554d2c03ea0b71f039df4a84c2bbb6270fc88d79df2ce21478ac972cd29c7","sha512":"8fefa2989079539b5cc1b71f87b40e5f0c4b0ec78565e8a25adb84ba7b2049af57abc7f5a2d0bffe4a27390d8f82b4300f9555b7ee8aaf7d4ae71038b2340f0b","ssdeep":"","tlshash":"4a21677d496822ed5249c7d6c604be036baddcb371007e7de60d194e70db2e9223646b","first_seen":"2026-08-23T06:08:23.726474Z","last_seen":"2026-08-23T06:08:51.357793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":2,"connect":21,"send":0,"wait":25,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/wow/wow.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.059Z","timestamp":1787465251059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/wow/wow.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2037\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6300,"size_decoded":2289,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6269), with CRLF line terminators","md5":"11ac4d7173a68c50169addca2ef1b827","sha1":"621284d032a248c41753e995680fc30089bd374c","sha256":"dd90fdb6538987fe7975bd43803b1c7d8d62912a371c788caec32d016e09dca8","sha512":"658888b9d89577b55798fc56451f9458ba9b4885573a96480fd9bd480cb59854769964da9a5f54feba19ba66fa6df44c79203d35f1d6d9cafd84886c58e233a4","ssdeep":"96:3GqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:y30suCYOVEE7ne4JqgpIwdh","tlshash":"bbd175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f38","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-23T06:08:51.279437Z","times_seen":5639,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/wealth-secure-2.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.083Z","timestamp":1787465251083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/wealth-secure-2.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48672\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48672,"size_decoded":48939,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x350, components 3","md5":"811c10ed5951354b5056bd1015bd78db","sha1":"168d54ed6aabfc79feb698df87106411f0103037","sha256":"f1b5fc9bd4e08bd112abb9eb923d4ed7140eea24de468d11f0016ba174dd8ab2","sha512":"9abf436e7a193363e8bb86362bc396bf29aefa60ed973b7345550c618c01ced49ddf6cc2921fa427a1cd58078021697321f44746c05bd0648a86ba6da81367ca","ssdeep":"768:nfZUrLxUzQ22HMeeaJjE9s9dD9Fk5dvXxf9syxPt7zpBockcfXLMTZbZG/yuxsKV:nKr1AQ22neaJgwZzQdPxfL57utbUFxsM","tlshash":"d92302bceb4dd5aae25c24f5a58e0f3316d856f8fa589b027b01e65f312f718c0a7045","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.295775Z","times_seen":115,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/flag-3.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.093Z","timestamp":1787465251093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/flag-3.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1951\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1951,"size_decoded":2216,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"f0304853b16053db038537863c606e69","sha1":"8dff9b67325a652b33233018fa81278f65b3a92d","sha256":"ee8d28cb7f83ea115e04f59081062b40e1b3f7704f3827e59060869dc33562cd","sha512":"6123c64dec67f719edefaa7cedff13297425fa19adbe71d79f9cb179abcfca57933b9db694ee1adf4b2b6be5a0044a44bc2178fb074f8b65d639ab8c6d775070","ssdeep":"","tlshash":"f9413ba747df78d9d8030b390a10d4818d71720afbaa1ea7529f6c2bcd2c2014a7932c","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.344968Z","times_seen":107,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":331,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/backgrounds/slogan-content-box-bg.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.352Z","timestamp":1787465251352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/backgrounds/slogan-content-box-bg.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49408\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49408,"size_decoded":49675,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 780x230, components 3","md5":"4bad1683ec9404b7bf52478a47ea9828","sha1":"a118357fc58b003e4e4336910ddb92cc86b25541","sha256":"889330ed5d987fc15c3fda88d2f926ebe29136fcf7a10b257a2e2df5b5dfad23","sha512":"d5ac1e74f6807af2d1302a969b6bb118ecbc4cff46fdfcbbe24583db487922996eb18911541029df577d320fdc57a56bc7d296f6b484303127d9ac91ea8240d8","ssdeep":"768:Pc6qt8qj55abO5s6Nj2FznPBvNsp8kWfvzeHazx/NRA74xcifax28LqUCruXCoec:QgbO55iFzPBiiFjeizg4iKuXCoeQVgW","tlshash":"ff23f1cbc1ac5f97b8cf28d15a005867223ecff7b48a22fd21921609af44519395bf4b","first_seen":"2026-08-23T06:08:23.729707Z","last_seen":"2026-08-23T06:08:51.355206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.618Z","timestamp":1787465251618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 06:07:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k85QuPzozqx88gru4lMkGfbhbet0I6LL0j37mSAcmdudbNjmyH9WAej+BWYVqzHldYJVVmw\r\nx-77-nzt-ray: fdb54123ce6a7deb4b8e8a6a64debe3a\r\nx-77-cache: HIT\r\nx-77-age: 41\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-08-23T06:21:56.385555Z","times_seen":8689,"resource_available":true,"data":null}},"time_used":3379,"timings":{"blocked":0,"dns":97,"connect":8,"send":0,"wait":9,"receive":0,"ssl":3265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/fontawesome/css/all.min.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:30.996Z","timestamp":1787465250996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/fontawesome/css/all.min.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12397\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59355,"size_decoded":12722,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59165), with CRLF line terminators","md5":"dee1ef3f7e1b366ea79215ccc9f14ea4","sha1":"8c0792e3448be771aa400f408297925ee1e24f15","sha256":"3dc292741b4944515d3c99a7c3ba10aa9f35931ddfbcea32adfc435c2a29d54b","sha512":"0b71474f3726dea5330381d198aff76c4fbe0ae3d9c4016f054bd3f30a0a2de2847534abd708c2344f9271ab3fc749b2d9b3a3c8d9d5195167899f10c37ad876","ssdeep":"768:QYh31IPiyXNq4uxdowHgJlkwF//zMQGYJYX9Bft6Vol:QY0PxXE4ubNgndFTzy9ltH","tlshash":"e443fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2026-08-23T06:08:23.731353Z","last_seen":"2026-08-23T06:08:51.310586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/odometer/odometer.min.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.003Z","timestamp":1787465251003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/odometer/odometer.min.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 406\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3116,"size_decoded":729,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3116), with no line terminators","md5":"c5c5fd142cb067412692ca3202cf8884","sha1":"839930805cd5086af7bc88b4248d50f533bab7c0","sha256":"c023b507dce43045404d4f737df6672956dc2cb3dfca9dc61b74480219315ef0","sha512":"71b1a3dea5ed53d1a5356cbf3d09181b20f68191ac7a2b9edc31a48543bb0b47be25fcf4ec515b0cbc060c74d3687b9af4490ea4b07c3b1a4b59ede74dff6a8b","ssdeep":"","tlshash":"8351e2154f91136863367506bac81b60befce9015123e98e735da54bcf43db9e398b0b","first_seen":"2023-04-08T14:13:01Z","last_seen":"2026-08-23T06:08:51.348094Z","times_seen":2125,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/css/module-css/04-fact-counter-section.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.017Z","timestamp":1787465251017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/css/module-css/04-fact-counter-section.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 574\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2482,"size_decoded":897,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"014b464258574fa2608fcb3be649b96a","sha1":"2751ab0c044be245a1d47ff4647d53efa5990d44","sha256":"fed94e40540052c991d3576f4759ade062c9a08034cc1d0b0a7b4626cb9e45a7","sha512":"df6db4b98a1fbaefc505ea784fa890deb96d68e9b278099234bac8be870dc89ed807cc4c19dabe8530f7dd09715ee33ee66bb46f1f4fe638fbdb4da637ddc796","ssdeep":"","tlshash":"9351684da3121141ad37d6ac7bd01366e6704013a50a01987edad2169ffebf8c541fae","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.383079Z","times_seen":180,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/features-style3-img.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.089Z","timestamp":1787465251089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/features-style3-img.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 192820\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":192820,"size_decoded":193087,"mime_type":"image/png","magic":"PNG image data, 540 x 485, 8-bit/color RGBA, non-interlaced","md5":"c3d7a018b9c782bd4010fbd0ca491606","sha1":"b166c6afed663e5788c7011c0547a09d3a8e3a89","sha256":"50c9b19819dca666a11bf58c9823a43da09f661765feb137d4c959076a23f7ff","sha512":"3ea3bfbe4b9b9820a3ef161482383701b6b7f6a900b242b11a79b8a27759a24e4de5ad6558e25ff88cdd70534497a3ae361e41b929ac8b8eecf2279bdee61770","ssdeep":"3072:tZvDRrLJGlaspn43j6Jj/qGUTUWFPODgkU4lr3qb0OZ3dWi9Xe3Tl1OHrerE4ZMx:t5FrwcM43jEj/WTUJMfau0OZ3NXQUre4","tlshash":"551413fd71b269e6c69bdb84f97240938031109b71686cd872c62ac4f35ddbf82d9a70","first_seen":"2026-08-23T06:08:23.733365Z","last_seen":"2026-08-23T06:08:51.297588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/slides/slide-v1-1.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.338Z","timestamp":1787465251338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/slides/slide-v1-1.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 98795\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98795,"size_decoded":99062,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1820x635, components 3","md5":"eeb99cc794031b7b23669ac88db7a698","sha1":"ede909c010c4e9d67b4efd7ed0f20789e3d5866e","sha256":"504ec1037538d4ce9a74075851e8b479634b8515eac659c25eb7ecd7b034bce6","sha512":"aebf277a8f55711d96662782f57293e8d222b22d3467211929bb412918fc756e4337e99ffda828ac655a2d261b3c0b0ad498b01a30f7162ba413232bdb03743e","ssdeep":"1536:hEpvbx7R2tUmRpEehpLSWCI5uwuh7gDWVdi+npa0pwjwKCjVcqJvhPje2M:hcvrFinllujhsDWn7ujmcsv5je2M","tlshash":"97a3022d6dc0ca59f3a4d570bf31bf248a84f2249bc464c6fe2e3d669b9b441c58d22c","first_seen":"2026-08-23T06:08:23.734486Z","last_seen":"2026-08-23T06:08:51.299295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-BI-Moxe0.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:42.120Z","timestamp":1787465262120,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-BI-Moxe0.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 06:07:42 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-3ea0\"\r\nexpires: Tue, 03 Aug 2027 13:15:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: kzUOAs+YnVEckcQbucKrPwe4qu0qECKYTqd5qUP0fn8W3t5gX1O651GjIsN9PD2ql3r9sIU\r\nx-77-nzt-ray: e2f7542092d2a00f538e8a6aef90fd06\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 1702342\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16032,"size_decoded":6731,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15624)","md5":"6a9d55e8dc66eb0b690bd00f7271e647","sha1":"befc832793a4eb6de6db51438d8b904079c156b9","sha256":"433b24ab945d5bf78deacbbb62265f4ce7fe10d8c06fa050f4c007c0e9f4f0eb","sha512":"af067ad24e8068dc001f356c1b6e8b3f821564fd781c448c2998cf3a081be1a37979d9804f20eb8de2960507e53ba46533d583dfae51eef19e217421a3049c04","ssdeep":"384:D7wI6JME1dwQBSB8g6eBtoK6hnETSzgfQBATS:DMxN1dwQk8g6Q+nEGiQBAu","tlshash":"c472e8341240783fb62b6919526ce497623ad25ce6d3c038de5fdd4d32d8cc299a3bb9","first_seen":"2026-08-03T19:54:11.753674Z","last_seen":"2026-08-23T06:21:56.404401Z","times_seen":621,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/animate/animate.min.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:30.988Z","timestamp":1787465250988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/animate/animate.min.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4306\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87503,"size_decoded":4808,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"79506b530d4b2b1217ef41497b82253f","sha1":"17607667c4ca7c417e5783b06444bd8dbc6e3403","sha256":"eb0fdfc405dc15aa9276b8a0d163fa6d3c5aa48c8cfec56adff63745282f8059","sha512":"f442efeb69e8b8470697cd7a864f95229f042130d2540c198c83b08823d75f1633bc812636e46d64b9a336be5882c1acd608953342a909cfd2987141c71051d1","ssdeep":"768:G1/1U4q4z1m1I4i4X4r4l4c4BVbVZ4U4w:34q4l4i4X4r4l4c4D4U4w","tlshash":"41830b6e1d41118447734b29c7de8e28eb3d917318122eea72ce588b8fb6f6853c5e47","first_seen":"2026-08-23T06:08:23.736682Z","last_seen":"2026-08-23T06:08:51.316649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/bxslider/jquery.bxslider.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:30.994Z","timestamp":1787465250994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/bxslider/jquery.bxslider.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1086\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3884,"size_decoded":1410,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c6dce38fd931ed97dd8266fb446a9a1d","sha1":"cfff3f5bceeb3c743d503ac8cc4461160b527c6b","sha256":"8e3fcfdce957e716767fa2317b9c3b3dc1427f91fe873dfa565872d4f5515ebd","sha512":"e09493cb8a23fb7feb2a0116cef5edf6499fd371955d364bb0b0b4c38770ccab221ad9967ca29aafb52774ab9c464dda4f02f64a7375f46aa98a271f1b1cc244","ssdeep":"","tlshash":"2d81ded11a763d9aa11e917c7e95c76d4c2e8063af0f0dfee4a5a87d878dbc00233985","first_seen":"2023-04-11T05:32:16Z","last_seen":"2026-08-23T06:08:51.317655Z","times_seen":446,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/flag-6.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.096Z","timestamp":1787465251096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/flag-6.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1354\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1354,"size_decoded":1619,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"1cd8f2f0393267165062026e8ad10d50","sha1":"aef52bef9f72b33d982f502334daafdb0fe1b728","sha256":"a07a2133a42b4965904741bf0ebbdab765afa6ae8b4f4779fe718e25d594d949","sha512":"abbdb37ccd99e1c6e27dd99be699a069ed709909b21f764d5e802a0d17fe3b02c06a94557b12d8e9e8a0d10e15d7c97d99707165f9cff3a7d045c751f3eec923","ssdeep":"","tlshash":"a221fb5e05a9bca7d60fd383b262d179eaf7c6a871903d09d5e14e3e4241e156dc2045","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.34603Z","times_seen":105,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/owl-carousel/owl.theme.default.min.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.005Z","timestamp":1787465251005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/owl-carousel/owl.theme.default.min.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 375\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1013,"size_decoded":698,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-08-23T08:37:01.389699Z","times_seen":27753,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/owl-carousel/owl.carousel.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.053Z","timestamp":1787465251053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/owl-carousel/owl.carousel.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11139\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44342,"size_decoded":11392,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-23T07:06:50.706255Z","times_seen":68072,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/wnumb/wNumb.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.057Z","timestamp":1787465251057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/wnumb/wNumb.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 973\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2235,"size_decoded":1224,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2235), with no line terminators","md5":"1f80cfaf4e97858a1ff12021a0460cc8","sha1":"4ca63a42c6b1713305e3f226b0bae787a5c4689d","sha256":"0e41c81542907ea43b8c0e869d647d67207825bfa3f9d3ae635daf9d8abcc639","sha512":"8a0550ee1c905628ce5257e0dce99c4d92f06092015d4eb7c4bf510b5db104736998624092d0e7ce5f48c34278cab49a42d0f14d3565c2163bdf4be986856a25","ssdeep":"","tlshash":"8e4175da32c171f39f3220a0006b985bf12d9a9924dc0466e6447991bf3176f8bb7d6f","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-08-23T07:50:43.752818Z","times_seen":1919,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/logo.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.078Z","timestamp":1787465251078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/logo.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14388\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14388,"size_decoded":14654,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit colormap, non-interlaced","md5":"fd98bc0ae2e6cdf5653687a0c3582777","sha1":"19161ef76940d344e79655628faf7f77b293484c","sha256":"b1c9970a87f77ca10dcce97b0805260f99eee0ec679fc4bee6c7aba4b538454b","sha512":"21668963998af958f03b08e9030aa3fe07ce3c2797a846461ed2c854b9ae53d7a3bb5d5789728b06a1ef9863ea1f4b3cb26a60639ee51426967aeefe4d5f9785","ssdeep":"384:lkaFiuPWolWDlSw7FmHAo+8craWh++uQ6Yhy:kIWwWwwa+MUIYhy","tlshash":"e152cfe19c79c4b99058de88b17923730749123caea0d1be21776b78ca6707dd93920b","first_seen":"2026-08-23T06:08:23.72468Z","last_seen":"2026-08-23T06:08:51.291839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/wealth-secure-4.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.088Z","timestamp":1787465251088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/wealth-secure-4.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 51352\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51352,"size_decoded":51619,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x350, components 3","md5":"60fddf3d7b109730a26e6a6e775cf7f7","sha1":"681ac2545a20456c8e56dcf4eba33c41823afb20","sha256":"7e7c924043018de0b561ae00e0a0e18e9cb9ac331ca87f79022643c3880a622b","sha512":"71aa272760883d751d295c96dc65417bc93c7cbb0b482562f5fb54e27c97b07ea4e14b30555d7fe06bd0e0923a2c025a6b9d0e9cf468177932f4be5e4d794d3a","ssdeep":"1536:/SSu6tKHiJAHFnbuqZAJowQSuq9OyZ2Luu4:/SSuyQiJKZbuTJ159O5qu4","tlshash":"ea3302f1cb62f085a0d4b9767a16db52074fafbbd46c1a10f39ce8bd663a3c10647612","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.381411Z","times_seen":103,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/shapes/slider-1-shape-1.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.339Z","timestamp":1787465251339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/shapes/slider-1-shape-1.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45678\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45678,"size_decoded":45944,"mime_type":"image/png","magic":"PNG image data, 468 x 636, 8-bit/color RGBA, non-interlaced","md5":"e8d09f224b15267291923db8e39242c8","sha1":"7affded5ccd66f8c34e46921f05a088719e3159e","sha256":"c99d101635a0c124daf91d31ad1383fabcf21e1b4d158a96aba28b05706d7f60","sha512":"da7ab81c5612b51f1656f65411a5c4bdbd291ae96e7d023eeb02673e59d5cb38cd35556488ee8307c45526dd1ad69670027aa65b9467b200a74de0dea896b784","ssdeep":"768:v3D3btQ90Bf2PVBchommmJXTSCSzg2lwMg9ZE1oLxNDrR2Krw58Y2d2X9EzFPxJT:v3DpLqV2hKmJXW9g9Eszi5fdqzPJjv","tlshash":"e12302bd32158b227f58f6257cd45900d867d3a10c2efb61727cbac660b4be35ac6c46","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.314378Z","times_seen":103,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/backgrounds/service-style1.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.347Z","timestamp":1787465251347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/backgrounds/service-style1.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 159633\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":159633,"size_decoded":159901,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x965, components 3","md5":"2a42d2794e90b2925eeabec4f3f4e17e","sha1":"023b49576b7ea8911a50f8fd38ab02e76bdb5eb4","sha256":"fcbe615d7a955b9f146cab8c0f9cdf9cf3a6256d510f50867ead522a73874d20","sha512":"d1c3d18271c4a20d092ef4aa2aa4fdf14e76acf667fd066e7cc4221236fa30fed7d29338981099b8220a6a27e58f6a0ef5771a1492ed9ac05d3d3a28d607d4b9","ssdeep":"3072:CYT2GsXtbP2d3sq8OMgODbYOXBYEV1lioEBUAEHpN+J8T:C2Sqd3sq8lgO5B5liokkJN+yT","tlshash":"a1f3129993e1252fc720a3bcc017170d1bf7ca636370c76f6427e94d9a72b25e6ea805","first_seen":"2026-08-23T06:08:23.741861Z","last_seen":"2026-08-23T06:08:51.315133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CliJwUTR.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:42.125Z","timestamp":1787465262125,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CliJwUTR.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 06:07:42 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-8d68\"\r\nexpires: Wed, 07 Jul 2027 08:30:01 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: ky2MlpAoIfYTNthSzhl6iR+EA5R4delhyhGfmbw6/6C7jxDdveat5UnrLYww/sL69uTzHZw\r\nx-77-nzt-ray: e2f7542092d2a00f538e8a6a7f183d07\r\nx-77-cache: HIT\r\nx-77-age: 4052220\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36200,"size_decoded":8208,"mime_type":"text/css","magic":"ASCII text, with very long lines (36187)","md5":"840dfdb09fc1a11a5c3a5b5f808e3160","sha1":"46140a50b100fa33b974027c13bb9f2de5c784b7","sha256":"b5b9a339413a55a0d828ab6be236e2a495594a19fb3283f846c607d7b6996ad7","sha512":"61e37700ee60ed584c8ae7b6313c5dddf6950c9664aa57f32bb4a70d775b1a1d5bfc249c6c1238495ef2cb7e12bae5f00c4ddb3df4dde44a01081117b74e2ba2","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+eZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XqcrNSN56DwQ43","tlshash":"05f2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-07-07T11:50:17.712499Z","last_seen":"2026-08-23T06:21:56.398862Z","times_seen":3654,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/animate/custom-animate.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:30.990Z","timestamp":1787465250990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/animate/custom-animate.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2110\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28628,"size_decoded":2434,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"2dece635afd23f6b036e02cb8af4f975","sha1":"27eabcc5d00bbdc206ff39a996263ae42ee9d6ee","sha256":"e6cb74d2a49c67ab9a04287cecc82b9785b1040cbdf7de34f7edcbe8c42c91e3","sha512":"d42f1554c7c753c186aed383ff1d58570bcacb2a6e2df2f82fd195dc982e0d500e5b3089523a032f02f3a8f2280006ae962972861742328960dcd37e77e0f78a","ssdeep":"192:dvYXY2+Y27h9+J9+QbCQ6wxiK8Ks8Kn3pX3pQrk8ZKI4NTHP3h6FS6F3sDAgUsDB:y0gvzECy","tlshash":"fad25a961c42044487774731d7db4e2ceb38596368131dbab3d7248e4f69bac138eeae","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.330917Z","times_seen":184,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/bootstrap/css/bootstrap.min.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:30.992Z","timestamp":1787465250992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20260\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":154911,"size_decoded":20585,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"36364c22c358e4030807564d3800390b","sha1":"d3d4cefba80ed65cb9806b8fc94cd9ab4a410fd7","sha256":"a92c158caf9574157757167364e0caef63c3989be87cbeeba8de96b67dea05a3","sha512":"2b9e3d508a4ceefa0d47a4f90f0016b1ae2b26883d6763c71638bfd0bedeacb08f669227081733385c2faf85effed743eb792e6b8082470554468065f91ec477","ssdeep":"1536:4t64783RipVVsEBpy0cuJcf22WWp5QyVapz600I4J4:4t64vyVapz600I4J4","tlshash":"a8e393d7f581241dd4a7c219a4d1bffd052f4686e3025eabb0277bb88b4a6c70963e4c","first_seen":"2026-08-23T06:08:23.744109Z","last_seen":"2026-08-23T06:08:51.323632Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/owl-carousel/owl.carousel.min.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.004Z","timestamp":1787465251004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/owl-carousel/owl.carousel.min.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 915\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3351,"size_decoded":1238,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-08-23T08:37:01.359534Z","times_seen":44306,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/css/module-css/03-about-section.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.016Z","timestamp":1787465251016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/css/module-css/03-about-section.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1083\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7067,"size_decoded":1407,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"a397d9b3908a6a667020e3337141de30","sha1":"b2b3d613444ef26d9f00f2a2eb1f4cd7e4bbaafe","sha256":"fe8562abe84fdcd7753bd6586c4f2705ce7549cc74c42d482b9f6e7fb06ab45a","sha512":"3cadc0d3c721ebf09a2510e104d848be607384c11f3713491f8a92c6d17d69a1372cff23d000f8723ec96fb1e384c25962a2f88ffdcd01dffd997f45d02fd2e7","ssdeep":"192:IAgqBlrjaVwLynH3C1M7UXT0ZDL4I+HHfcZn:Xi","tlshash":"4ce1ad99c6131409a637d6e41fa412dad9340047cf82006ab7e672758ffa7acc653eee","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.325245Z","times_seen":178,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/circleType/jquery.circleType.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.039Z","timestamp":1787465251039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/circleType/jquery.circleType.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1229\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5097,"size_decoded":1481,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9db4d790006161f5a3472cbf07196c8e","sha1":"36eaad9bd96cc88149613da3181486c8b9eee365","sha256":"ced32c72e57225133f8a764317a376e18aca638aaba1e028c981c39601fd65ad","sha512":"ec475fcf54d941f4998a7ff17ac4b793598e4448dbbc91e80577a2cc12586e02b5e06332aa81bf4cc664028249bcdc7fd6ba7a411fa71a197b99fe39781c84f1","ssdeep":"96:fOmRvUjwWlz7SM6Y0PDexeAEgRgzV0AkzSknCUP7kp5OldXLBNq5wM:fOmR8jwF3Yca4AhWzGhkp5iA","tlshash":"89b19958aa0921291037b37ecbde6a48f736532b01179462bebc11d62fb195807d6ffc","first_seen":"2023-03-07T14:30:16Z","last_seen":"2026-08-23T06:08:51.319Z","times_seen":420,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/language-switcher/jquery.polyglot.language.switcher.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.063Z","timestamp":1787465251063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/language-switcher/jquery.polyglot.language.switcher.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3236\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13571,"size_decoded":3488,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"bbf241a70a31b84fa4ec372bbee88f42","sha1":"6f036ae9dbbebd96e140587f0844232a603cb1ed","sha256":"9fba088bf085d90228b2fa2bf3cad343151d4dcd0cc5fddc898fa5b2b5d03159","sha512":"7681efe0a95ef24b0e9758fec4cebcf8f4fab2b7760bb732d4f9bb08cf4b308040d226da0928f64b97d56edc070643caed65027c5a0f39ec53ded5d3f259f1aa","ssdeep":"192:4nNpQH/mIX93Zd0E0CqeXm6I3Gozsuz6aotYGYQWCsG0gK5+3Ce55tC7Arvd2klP:4rm33ZSEvqe26ILzEK5+Lxz1BJD","tlshash":"e752eb0d7de7112194bbf0bd5faf2198f231814b200add647c5d96808fa4a6846aeffd","first_seen":"2023-03-07T14:05:29Z","last_seen":"2026-08-23T06:08:51.377921Z","times_seen":579,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/flag-4.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.094Z","timestamp":1787465251094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/flag-4.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 905\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":905,"size_decoded":1169,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"d088a837aa8d965b9accd1eba810c669","sha1":"5c3085d1f185cf07928502c5053413b0ae556b31","sha256":"62b5f233dfb1ecb78108bb9e0170f47a8c692fc7c397b8d76008f5e6e20abb88","sha512":"a27c20fc043c21fbcb7e3423a092206bade4685b3716c967c23f017f30d0c522731c34993df37f30d5bd60745749eba06fac6b1fc9cc90a38e412db23fcf0b88","ssdeep":"","tlshash":"aa1167f3f13e9465c7035777716ce7860953a638c756b704d05e0abede4520984fb819","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.321361Z","times_seen":105,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.391Z","timestamp":1787465251391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 05:07:21 GMT\r\nexpires: Fri, 20 Aug 2027 05:07:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 262810\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-23T08:36:27.055928Z","times_seen":34289,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":38,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/css/module-css/02-banner-section.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.014Z","timestamp":1787465251014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/css/module-css/02-banner-section.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1984\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17061,"size_decoded":2308,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"5eee834547e62f5582ad922aaa8f1ebd","sha1":"288fc8abf3a59a423621d537527bf054a0b4d5d0","sha256":"08011778c7feb3098aca677669ff1131b4dd9c051dcd4d276bb4f1322eafe1ea","sha512":"e6c57b8285054db9f48160928f1ea0d8c4901a912c3e0ec594c1c8039c4f763172e7b0c9e0fcc93192b33fe7f7470974186225f9121de5ee94634863bde054b2","ssdeep":"384:XnTd8lClslBl+lqxF67vTdDxF67PlClslBl+ljwlClslBl+lNxF67YlClslBl+lk:XClClslBl+lqxF67NxF67PlClslBl+l1","tlshash":"4f72a8694e1111015233c76c6bd55b58ebbd9043ee02149df3c6250fcff66ac22aeeab","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.334914Z","times_seen":97,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/css/module-css/06-partner-section.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.019Z","timestamp":1787465251019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/css/module-css/06-partner-section.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 524\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2170,"size_decoded":847,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"de3d7969bc4e5af3290cf3baba0ce4fc","sha1":"5c1cc8b464f2d89aff51b7b9568ecd0d9bf6377e","sha256":"c739731b8b83b1f846c2f8e0aecd89536b0e4cfda1dec57ed9da432d2564660d","sha512":"9e7c1a3bce8d0079c0f4df80c6e75d981d577059c7140254106251443927b55ec1be9d25f3e8f464ecadf4ed8e41340430c58e95ac4470ef85c21ce083efa8f0","ssdeep":"","tlshash":"aa41e06d660601618a33cbf01ba12349d5708153ce5b00bcbf819265dffa77cc7a3d69","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.326146Z","times_seen":177,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/swiper/swiper.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.054Z","timestamp":1787465251054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/swiper/swiper.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34402\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140942,"size_decoded":34655,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65272), with CRLF line terminators","md5":"b74e42eb5a00c128681fb42890676d66","sha1":"af15c1c1d94e85a0e76bd75def0b4d3b64759f76","sha256":"2f06dae9eda7f01aee86f4a386ff1749c24612c5b1e947c6c91f576c4fa8f565","sha512":"272d20406e4580242446d9dca7441ed7d105ddf0c744cc4a914c53da47f7adaff8d23ebb25f872f91feef2d13efd51067bb594eaa31490ecb91b6a2f3123bc24","ssdeep":"1536:OOgAc1fFOszeCOG3RxCK8Yi/Glq+dBZDUiOMRLMGpukRRgj8evHgZsUgeAq5qV8a:wQCL7ji/udoxKRRtYHgZsUgeAq5qOsJL","tlshash":"f4d3094eb39061a551e36257525e8241a3b72409b80ad0ac35b68cd7adbde4c13bfffc","first_seen":"2023-03-07T12:21:29Z","last_seen":"2026-08-23T06:08:51.376714Z","times_seen":1750,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.405Z","timestamp":1787465251405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:14:11 GMT\r\nexpires: Mon, 16 Aug 2027 10:14:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 590000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-23T08:24:11.891922Z","times_seen":41347,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":32,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-BKfXgL7M.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:42.123Z","timestamp":1787465262123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-BKfXgL7M.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 06:07:42 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a7093a4-42dad\"\r\nexpires: Tue, 03 Aug 2027 13:15:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k6w39cyBG2K+X1y/ke9rjYh5KXmp9DstjyDFoMqyGsENMJ98ASLqj1TfL11N0tGrGJvHAgk\r\nx-77-nzt-ray: e2f7542092d2a00f538e8a6aa8f51f07\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 1702342\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":273837,"size_decoded":93096,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"6d330899eb0177ca492d1cf16427c94b","sha1":"11b3e62f0c12c835c12c5d257f0ce22aea3e1954","sha256":"012c673b4f73512d934760a31f93679d3525ef13e30f4473a0db5d115a037544","sha512":"c9b9d475ba9d05ee38e02cd796dad489ddcc46a4d1728dc818475a047ea61261f9aaca97596ef5f189e1d571ce03aa1f46b382cd8a1d4fef892dc9cad53aa8b9","ssdeep":"6144:FMAopqOWSr8ad2jJKaQKhJp9cuIfoTkqM+9+:4qOW2Rd29B/DIfoTtM+9+","tlshash":"b3443ad53294b035439b51e6906f1106f33e5c19580d812cf269ece679baec8a2f7fb8","first_seen":"2026-08-03T19:54:11.723826Z","last_seen":"2026-08-23T06:21:56.389014Z","times_seen":611,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.123.94.114","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:42.338Z","timestamp":1787465262338,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://crestwealthfinance.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: q6rkk7uIgWAOeEdTYBI73g==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 23 Aug 2026 06:07:42 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: +2j6eXT/ygiahxMgV4gAjYev62c=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T08:26:51.72387Z","times_seen":18052433,"resource_available":true,"data":null}},"time_used":806,"timings":{"blocked":0,"dns":371,"connect":389,"send":0,"wait":22,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-magnific-popup/jquery.magnific-popup.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:30.998Z","timestamp":1787465250998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/jquery-magnific-popup/jquery.magnific-popup.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1706\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7501,"size_decoded":2030,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"3056fa93690b191b784cecf063029d3d","sha1":"eaa07a97b4babc7e052ce649c32b096584f2e8bf","sha256":"df221e7108c1c789381d3d4412f7d4b43cd1f83174b20595e9e093231207fd1e","sha512":"4a5e8b089ad7e15e70458f7101f967f56c07334e4d6ab9f5e254582dd49820b377dc1ec0daeae75996bcc894ee920d420a4c0de38ea36c1de8e456e4f2bf6a4a","ssdeep":"96:0Qsi7sStyXYV8RTQEpz8Z1dni9mwDYqOuw6lYikXhrqdStZFvtFhBF0FDLEx:NFtyXYoNAU2QkXZqdStZFvRBFwLEx","tlshash":"27f1f198df122342d637dba5e7934729a7120073eb0305abffe1184ab7d9a5c0225fd9","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.343257Z","times_seen":292,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/sweetalert/dist/sweetalert.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.067Z","timestamp":1787465251067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /sweetalert/dist/sweetalert.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 55\r\nlocation: /sweetalert@2.1.2/dist/sweetalert.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a2f7effb4abcb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T08:26:51.72387Z","times_seen":18052433,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/slides/slide-v1-3.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.344Z","timestamp":1787465251344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/slides/slide-v1-3.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 185114\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":185114,"size_decoded":185382,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1820x635, components 3","md5":"827437f2374bf6177fec77ffcf5dea7d","sha1":"0a3f92fb6d2eaf8bd55923d6004acacfb03c107f","sha256":"b5226d0c58e256f84cd5fcf3321e86024f822352bfbe617ffd534ec1103b4838","sha512":"16e4ac091374a6e592b6df531e4950ff071f5626cfabfc2d9665c93666691b5a6dbc441a1412fac2f9c63c245701c48bbe3a167db0d2c657890da86c56f18171","ssdeep":"3072:U3HFKFAcFzbe4Qx//BQxU4Q/NPx3asrtxTAOQjl9yxMA8DwKO0e92eN7TR2:U3ebS/QU7NP9XTAKxMrDwKOLhR2","tlshash":"3004f117cd158f4ba028c3fdbf631f691b5d2b09a4c6bbee41714e866f242118d8b46d","first_seen":"2026-08-23T06:08:23.754539Z","last_seen":"2026-08-23T06:08:51.305217Z","times_seen":2,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:35.241Z","timestamp":1787465255241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 06:07:42 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a7093a4-891\"\r\nexpires: Mon, 03 Aug 2026 13:20:01 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:12:04 GMT\r\nx-77-nzt: k+KA+I6QFyVxRel6eoW9tzvpqrHoI8vbqF9aNO4RJvtKeBLe5MQQ0kvquwAblsANY0c1CAI\r\nx-77-nzt-ray: e2f7542092d2a00f538e8a6a09c0cb03\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 32\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1044,"mime_type":"application/json","magic":"JSON text data","md5":"9f40d3a11c02b8dc0a1627186b6f2cd4","sha1":"705146cfc3126ce2d8ec54d6a5743c79aa0a91e4","sha256":"9f5c54c74d4c6345396c9b2e3a04393f90570c1eb949b2c9bf09a251e65487f1","sha512":"a2a090de8960f7292b52268ef5e5212d6a74b19840794d91c6e222f17e7f0a6b125d577fda4d95701f350b0c8d5c49025f0bf220c8f349ef58996693aad11b1a","ssdeep":"","tlshash":"fb413793c0f80d9317cc652b789585415d90c3c7ac893e0d76ae8a6f6f4cda914e677c","first_seen":"2026-08-03T19:54:11.717069Z","last_seen":"2026-08-23T06:21:56.448118Z","times_seen":593,"resource_available":false,"data":null}},"time_used":6834,"timings":{"blocked":-1,"dns":35,"connect":8,"send":0,"wait":8,"receive":0,"ssl":6783},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:30.986Z","timestamp":1787465250986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Aug 2026 06:07:31 GMT\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5337,"size_decoded":1194,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b458ca40ede53de02766760c01c60b30","sha1":"a94795f15110aec67060cca674a8319e4faf5eaf","sha256":"6ec1a6257d053cd4692575a0b49d6b9fe1b429e8e692310a2024d31c1de5c293","sha512":"322ddf278f7be9c00f173520fdb9cf7964c60badb15ee84d444ba069ba7da5fc22440d5b180e2c36ce29384450ff1dbe80f5bf0e917895e182ca8d39ae27b958","ssdeep":"96:jYgEa0Jc+ufYgEacNkYgXa0Jc+ufYgXacNkYgpa0Jc+ufYgpacNkOEaXsXJc+ufx:MOQVOkNQVNkrQVr8wD+rw8+NwG+3","tlshash":"dcb1e081042ba154db972dc426de7d32ef1fa1946454a874affe1888fc9ac2e5361b4c","first_seen":"2025-09-11T18:19:56.026325Z","last_seen":"2026-08-23T06:08:51.341638Z","times_seen":2257,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/css/responsive.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.026Z","timestamp":1787465251026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/css/responsive.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4913\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54570,"size_decoded":5237,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"89b3f8c1569a25a4e9e62265f03fc883","sha1":"81897cfb9a15fecf3b32bfedeeef2e5c1790f186","sha256":"162a2153a6d5caa1988e70ebf4fcec333018c65664d00c4fe0292fa33a967596","sha512":"746f6af687b08abedbcdfb2eb53bc226bbe6f6956d9b71da32b7384bab59a7ced21a6014e8620ed8df8aee6c7066edd2528c62a3cc1932c8e6678274a6e90b8a","ssdeep":"192:UJ4cisb8sLu27P7lvl1IlGIlWMliMlJIwxBm2oSqzYgQdUVZzHuRlo1aGIl2wxIj:U+svUxIFku92Ix3LFC1npY9bP","tlshash":"4333768ea90311084a37f3b5dfb67a68eb4300a3d34280d1bdec6296cfb564d8495f9d","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.327004Z","times_seen":118,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-ajaxchimp/jquery.ajaxchimp.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.043Z","timestamp":1787465251043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/jquery-ajaxchimp/jquery.ajaxchimp.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 844\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2381,"size_decoded":1095,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2381), with no line terminators","md5":"36d1b0e5a3a7397b267e704beb2f7272","sha1":"86df23e41520d19dd0c6928e4a5de89c1ae172a2","sha256":"2dcc9f6916671ee0ee4c5f7c7b6f13c519189b65d371a39309c0d95b79050c28","sha512":"e728f97a563dbba72519ef7ff7b6e3de3265c3cf8ef574affed6e67bc9bf2d1f1c2a79d3e7ead1f2a1d6fd4610fcca332e0ddcbd31de608a4ce64464b404926e","ssdeep":"","tlshash":"4741444025101bc2418b21f2e4c7bbe370e7d5958824f558e668e0e30ee4dcdae27a9e","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-08-23T06:08:51.391543Z","times_seen":5665,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-appear/jquery.appear.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.045Z","timestamp":1787465251045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/jquery-appear/jquery.appear.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 548\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1266,"size_decoded":799,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1266), with no line terminators","md5":"64531fe766285a4f78a602f316d52d48","sha1":"9a0ace71a45e5546e2d3464f3439f563d865aed4","sha256":"7212f627fb02a6e5780ddae7870b9b06906e322ba57b33a137444994f5fafb15","sha512":"c322f9e3287be200dad9093a5fb4ff0dbe5bdbd5369ed440d87dceaf04e37e4a15659513fa0390205bdedbe6ddbc48d816a81cc6f5453f1df89da074d3578855","ssdeep":"","tlshash":"3921bbca39c6bca183fb701c562b72421171913f824249a35ceecdbc3aa6c513d23e58","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-08-23T06:08:51.327986Z","times_seen":3242,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-validate/jquery.validate.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.049Z","timestamp":1787465251049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/jquery-validate/jquery.validate.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6548\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21093,"size_decoded":6800,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20951), with CRLF line terminators","md5":"3c43ece3914ba205adce6a10fbfd0828","sha1":"9a40a00ab7fe8c5993238fe9c4c6547c2dafb134","sha256":"f075a7a9741e59caf10c40e916d8cbd01a4f1a6baed1f4d15b5019606e303e70","sha512":"d89ce0e380925cfac70dc4f35740adc89b6cc89f9af096bf8c58adc87c6bf7439fdf30aa36eb2a154b7b532461d276a50799739a7731e42fb69ea5f36ab9e48f","ssdeep":"384:QQpjAy+Jx6UtHYlHUdS2L7wQ548NsOAN/tllEny+Ww5MQPN3txwV/vtPx+OLDEoG:N+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVs","tlshash":"2392b68d77d670065a9630f4a05b660760b669a0a018e87cb5b8e4c1bef8fcc50f7f78","first_seen":"2023-04-06T21:12:22Z","last_seen":"2026-08-23T06:08:51.342404Z","times_seen":1335,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/js/custom.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.065Z","timestamp":1787465251065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/js/custom.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4760\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23106,"size_decoded":5012,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5e4796566f84d8f72b8f3261d86604d9","sha1":"5f6f3accfd55156e3318d9873877015167cdb09c","sha256":"efddef4914ab8878391f1ceae99551c0296f85e4f363ef0ca39444502fb3998c","sha512":"d4fb142a6baf5a7d14dc5b08889d0533843ab9e3821d73e3edde39ee415611e9a0d8f6d85d648aaa333c29c7b3528ac1f49045026c444065639402ca9e3aaac0","ssdeep":"384:1879gcPIkdXGg9SpvzwsfJ417htsP9/ayUlllBPe:oPVdXE5z1hK7gP9/D","tlshash":"eda29409711200b596ff73398f6a9905ef690227c0028645bded8d989ff06a8a0f6fdd","first_seen":"2023-03-14T14:58:26Z","last_seen":"2026-08-23T06:08:51.328717Z","times_seen":122,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.401Z","timestamp":1787465251401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:14:11 GMT\r\nexpires: Mon, 16 Aug 2027 10:14:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 590000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-23T08:24:11.891922Z","times_seen":41347,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":24,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery/jquery-3.6.0.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.033Z","timestamp":1787465251033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/jquery/jquery-3.6.0.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30267\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89501,"size_decoded":30520,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-23T08:20:19.991211Z","times_seen":499705,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-ui/jquery-ui.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.048Z","timestamp":1787465251048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/jquery-ui/jquery-ui.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 106946\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":457819,"size_decoded":107200,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (535)","md5":"de09893dbe5e07e0c2cd760d3eb4e839","sha1":"3e074a9cf085bc4acc09271bcb45dbc7eec975d4","sha256":"057572949e21e2d645ceda110df4793df743a85a530a6c04e160926241057e95","sha512":"c2ac5adc250b67f66968d0d448563b2e03e8307184f7ddf4d8d70a99dc3b6c22c5eca91def59c161c735b3f557dd5f591f41d8f5f58383c46c6e8520067211f1","ssdeep":"6144:DK8S/EGdmTd1HmcIk95W5ZbHDVirEOuJy7knjhBHXwujgWUl/plq/pRlTH+7IXtJ:bTjHmcIk95W5FHoruJy7CjhBWDg5","tlshash":"19a4a689f39c262a857a325d5c2e41ce723c8076d60158bfbc5d59dc29e883c42bbf79","first_seen":"2026-08-23T06:08:23.760067Z","last_seen":"2026-08-23T06:08:51.313244Z","times_seen":2,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/vegas/vegas.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.056Z","timestamp":1787465251056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/vegas/vegas.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3058\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10383,"size_decoded":3310,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9895)","md5":"1be4d8a62755de12acba09a24388bd36","sha1":"450a69681b4478fcd47097783241e70219c4f598","sha256":"45d47af6a3378fa67b31eae0bd56d028ec3f94ba6bcce961d5e559c7dcf5e9ed","sha512":"e4c282247f2d9229a838b0d193837275d25a492f4df61540b6e5a2a64864d7a5e4d3fc208adc920b12f5be08f715d4fff710c1dd5b7eeb67cd51b2dcddf9fd07","ssdeep":"192:hqpGsYXXwzaX5BNsF7gx8tuLTPiDfSPQUGpDLzxwonRxFIGxKL0skgqffyOJ:haJFW8tuLTPGfTFpDLzxwoRxFDxKoskn","tlshash":"7a22758afea1954902cfd172817ae20ada7691447913e12c7cf9d5cad820ecd712faf4","first_seen":"2023-03-07T22:18:52Z","last_seen":"2026-08-23T06:08:51.301871Z","times_seen":1082,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/flag-2.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.092Z","timestamp":1787465251092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/flag-2.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1169\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1169,"size_decoded":1434,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"dededfb188b1f1c88359aaf1826dab0d","sha1":"4200871c689d06c270069798a2ab46295a356f49","sha256":"82da340721d25f220aaa6f24b1864578112194051b8a8b817f9ca1d5531fea95","sha512":"361235a56d6f33cbbc977a3e24717f7676434b3557351c8c6d211334ec09e4ea77a2f19b35bc80522cce0db39b6ce52f1e92804b2dbbd18970d330edd7e1e4dd","ssdeep":"","tlshash":"6d21d7d3abec5d968e97300159d338e29fc44c3c3424435e04f778a0b28716d158f34a","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.374185Z","times_seen":107,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/footer/footer-logo-1.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.098Z","timestamp":1787465251098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/footer/footer-logo-1.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14388\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14388,"size_decoded":14654,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit colormap, non-interlaced","md5":"fd98bc0ae2e6cdf5653687a0c3582777","sha1":"19161ef76940d344e79655628faf7f77b293484c","sha256":"b1c9970a87f77ca10dcce97b0805260f99eee0ec679fc4bee6c7aba4b538454b","sha512":"21668963998af958f03b08e9030aa3fe07ce3c2797a846461ed2c854b9ae53d7a3bb5d5789728b06a1ef9863ea1f4b3cb26a60639ee51426967aeefe4d5f9785","ssdeep":"384:lkaFiuPWolWDlSw7FmHAo+8craWh++uQ6Yhy:kIWwWwwa+MUIYhy","tlshash":"e152cfe19c79c4b99058de88b17923730749123caea0d1be21776b78ca6707dd93920b","first_seen":"2026-08-23T06:08:23.72468Z","last_seen":"2026-08-23T06:08:51.291839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/thm-icons/fonts/icomoon.ttf?orkqwr","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.393Z","timestamp":1787465251393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/thm-icons/fonts/icomoon.ttf?orkqwr HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/assets/vendors/thm-icons/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 27102\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45972,"size_decoded":27412,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"6c6899cb8e3695e9092953b8063b7845","sha1":"299649cd1e3ac589bce4635549881af1eeffb61e","sha256":"95413812f229838339c39d1d2a510e3418fc8a92a422f21da7c9ad6623d1e85a","sha512":"b986f1c371be900469d4f6c787068a771ef698b2bac3b4d8ac50855814e0aa4ac94200c222135e2631ecfbfe5c9576e1ac091e8defc17f82cf976c5752eb36b8","ssdeep":"768:IZK/8W0R0zLK0K35F/HBCE7KaVuLeMMYcaywjNaGJjN23DnH9oRkzCluVbwBPEhy:IA/EILM35FPBgDyzYMwhaGjN23DdgyFP","tlshash":"b8239d2be3a6de5ef8135d7a5d4193365eedb439933a63abb1462c28e009cf04c64a14","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.281989Z","times_seen":202,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.399Z","timestamp":1787465251399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 05:07:21 GMT\r\nexpires: Fri, 20 Aug 2027 05:07:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 262810\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-23T08:36:27.055928Z","times_seen":34289,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":43,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/css/module-css/01-header-section.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.013Z","timestamp":1787465251013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/css/module-css/01-header-section.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5207\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":46199,"size_decoded":5531,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"762a8d2adbb1f48633c7cd1c6ccd0a7f","sha1":"13e215d1b701193ee4ec0e0e43b391c0fdfc90d4","sha256":"19bde7be38c3d80c87d6ab8fc89d0c2b83af7f558089eff7fb7e7a67a8f11a54","sha512":"97b7dd27146ff6783e57c2f7244d6273319e0a5b219cfa34b82840f014ba7828aa65551ca63347858fb72e9a87efe8d4879bcbd054e51a36f8f93bc3baa36601","ssdeep":"384:ZsooIgBsKnfb1f2pCxwgFSBpTmSIFqTS0p4JT+:Zsoo1nfb1f2pCxwuipHVp4JT+","tlshash":"1823324cce1210429537d79cafd01b18eae890138b0600a87bd55259cffb5add7daebe","first_seen":"2023-07-13T06:19:36Z","last_seen":"2026-08-23T06:08:51.364461Z","times_seen":46,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/circleType/jquery.lettering.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.041Z","timestamp":1787465251041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/circleType/jquery.lettering.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":924,"size_decoded":679,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (859)","md5":"83f6723631eeb52da3101b72b7624728","sha1":"3c74ddfb1209f2fd56fd58e61829e01a073e303f","sha256":"c9bd115d1d0d0871a3e6b701384a903d7bd378313a0504ae94949f5bb21894f0","sha512":"549fe261b8aed5e27ac8b8a67d38bae6dd91f5315c1b90fd5fc6427db6c41614df3e728987c6f2a0a5c46b08b949c2590582f57a28ab2f5f8c733643c744f3f5","ssdeep":"","tlshash":"4311dcc4f3a3aa07479bb7bd513b620ee26654c354030c01f9a8d2563da7b490aa7ea4","first_seen":"2023-03-07T14:30:16Z","last_seen":"2026-08-23T06:08:51.371556Z","times_seen":1022,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/isotope/isotope.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.042Z","timestamp":1787465251042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/isotope/isotope.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9890\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37779,"size_decoded":10142,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32039), with CRLF line terminators","md5":"55c61eb8802947bf0d14f5430dfdebcd","sha1":"462535569e9282274bdd71e0a1393052afb426f5","sha256":"4fa72a8e292674529c8c0fdc8b0ccb7974e214d83e862316e91743ed7453b1c6","sha512":"7a43ace9c2badcf6e170cd09a0b4e53232e52f0e0f6e77522e2af9e02a0ed8002c7437effa4e51e8b32226bbdb2d6c2d78d7c2e507615b8dcae28f6756d274ed","ssdeep":"768:njlIew3PtifBnQ/KMDwmWD6sMKD6gjfGQre4+uhFVByQ9zx:njWSBnQ/LEBD6YD6Ee4+mf9zx","tlshash":"3803b649b74079304387b1a696af110f733aa47ca90690ecb369d8fb1cb684d6133f79","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-08-23T06:08:51.350306Z","times_seen":3369,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/extra-scripts/jquery.paroller.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.061Z","timestamp":1787465251061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/extra-scripts/jquery.paroller.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 839\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2796,"size_decoded":1090,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2796), with no line terminators","md5":"01785ef621a5fe452c87448fb659c3d1","sha1":"47a4567cfffe9a282317b4b109994ce4263a7a71","sha256":"dce18e13367b749ca9dd1e552ad631b88ee2ba1ba5aeab8d9d7582e36e019e51","sha512":"e4d5febdc4d214a719b7d635904621e0a72d33d64173fe3fd8a18ca7c85f37ffd32156d69471876bd8b832d958b37e9c55ba306abb1931b87d57eb91460b5b55","ssdeep":"","tlshash":"9d51025938a0b064f3539a9a82dfc911f03dd5a1290d0999e25edced2dda8cd82f3b07","first_seen":"2023-03-12T06:08:05Z","last_seen":"2026-08-23T06:08:51.352242Z","times_seen":497,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/shapes/footer-right-shape.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.097Z","timestamp":1787465251097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/shapes/footer-right-shape.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12176\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12176,"size_decoded":12442,"mime_type":"image/png","magic":"PNG image data, 425 x 425, 8-bit/color RGBA, non-interlaced","md5":"0909237071b4a802b0c6f44b4427e299","sha1":"d0eb101e69d3607b8b5dd86be1d0d5dbe4dd5fbb","sha256":"f387d8be270fbe22d2863a0f91a53be2961b81321694a79290b317e6c2fd8234","sha512":"83a9231fd81133f9c92179248931a4adf7db72a8a67aefc907b9ae011567bb03f6723a6c9ef55a502e52bef23251d93e954c71f54208064bf1c24198bbda238a","ssdeep":"192:cgu6F9yTQZzYgu8BHlwsZ/m1uqn8P/svWNO0e8kWUItQkuBTkK9MhXPwRohkOz7G:cc9wQtYgu0lVqn8P/YMOB9G52TkLwRog","tlshash":"6942bf5d6ac2e5f3d65174a268f182cbd127af08cd69caf48998a44b6c1c8dc8c09dd6","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.396693Z","times_seen":138,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":322,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/slides/slide-v1-2.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.341Z","timestamp":1787465251341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/slides/slide-v1-2.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 230725\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":230725,"size_decoded":230993,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1820x635, components 3","md5":"a967d1287d163623bda355697a79a801","sha1":"4a830b488a886616b2c83685e28c3d6c86cb630b","sha256":"06a7bbe931420a278ad2418fadea3f4a6fce20c664af7c61f7ef7c2b5837c760","sha512":"30456d1e51577368d1cb2593a91ebcad4392f2eb963965d1bb90498403eed9c43a1c1db827ae46c39d54d5fd9b47ec74e1ad59ed93e83921e1c8bedeb1c8f43b","ssdeep":"6144:0CDzMP4y9Ky/QPZC0KQQarpBhFCE3xmUxCECeMgT:0CDzy95/QPZCnV0FCEBNzMgT","tlshash":"87342375b881b39b7b14bc7a1ed12b884ee2bc3d2583d305c7a3cd7a9153da8e42854d","first_seen":"2026-08-23T06:08:23.765615Z","last_seen":"2026-08-23T06:08:51.337116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/backgrounds/money-exchange-value.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.350Z","timestamp":1787465251350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/backgrounds/money-exchange-value.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44572\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44572,"size_decoded":44839,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x705, components 3","md5":"2b8923b9420e2f3ec509be9cde955cf0","sha1":"82b81c394465c36344b2784d7f4e03a89e0ab31a","sha256":"6f65bae834ac7e4132cc2d468f9d09afafdcb400ec3f33779c853c30c426f9ec","sha512":"8218e8008407852133240c1258e225be4418389851c60721546f2973d9ec07460160dfbc9aa4dda0dad9362219f96811d834c10fedf406a25ef01e61ab9ac6b9","ssdeep":"768:Z4J6pTdGnj/W5sFBK5UqwzBresV+XnR2gjvlU2fQD5WGxTC:Q6pTX5sFc5UPVrw24K5WGQ","tlshash":"d413f291da20623cd83a3bfc49eb27b03f2389fcd3445d2bda414fd9746625146a663b","first_seen":"2026-08-23T06:08:23.766713Z","last_seen":"2026-08-23T06:08:51.338558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/favicons/apple-touch-icon.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.916Z","timestamp":1787465251916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/favicons/apple-touch-icon.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14388\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14388,"size_decoded":14654,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit colormap, non-interlaced","md5":"fd98bc0ae2e6cdf5653687a0c3582777","sha1":"19161ef76940d344e79655628faf7f77b293484c","sha256":"b1c9970a87f77ca10dcce97b0805260f99eee0ec679fc4bee6c7aba4b538454b","sha512":"21668963998af958f03b08e9030aa3fe07ce3c2797a846461ed2c854b9ae53d7a3bb5d5789728b06a1ef9863ea1f4b3cb26a60639ee51426967aeefe4d5f9785","ssdeep":"384:lkaFiuPWolWDlSw7FmHAo+8craWh++uQ6Yhy:kIWwWwwa+MUIYhy","tlshash":"e152cfe19c79c4b99058de88b17923730749123caea0d1be21776b78ca6707dd93920b","first_seen":"2026-08-23T06:08:23.72468Z","last_seen":"2026-08-23T06:08:51.291839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/wealth-secure-1.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.081Z","timestamp":1787465251081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/wealth-secure-1.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43409\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43409,"size_decoded":43676,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x350, components 3","md5":"e598877d1b9373dbeb821c1b529eece0","sha1":"310237987c8f50501843002dafd533c163b975c6","sha256":"c38d1f12bbc20616480f473a553636ddf50c52abcd2e878b1a293fa8cd500db1","sha512":"b60582f751552feac6e861e6ed4f82c662e9661517bb4b1f2cdb4f96c8564ab9a8f6cfdde0bd1f49f759c14269d48043aadb5c1488fc5c8b8cb4da3550c08151","ssdeep":"768:iHp2TmB+OAmmeXb/X0Zi6zaawKn5ShAZgKCChNf66wwuNQjOcko0j4tsqXlca7LM:iHEKBummgV6zaBrhMgKNHC6w/nZ43cqM","tlshash":"0813f1b174bcd889059be11a2192af3ba43dd6157683001b7209ebcf1ac00e97b6d7d6","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.280705Z","times_seen":111,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/css/module-css/05-testimonial-section.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.018Z","timestamp":1787465251018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/css/module-css/05-testimonial-section.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 814\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4788,"size_decoded":1137,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"1c33161a6180b02455f219e2db093c9b","sha1":"2eeef6b6e479006b29b9c9b54c8f6e89c53c8635","sha256":"948e97504dec138f81e77d7afa9b58f531834f1ab0cbc77340b4ed7a43093309","sha512":"33632bb61dfdd1b605a5f6271bf6ee8701576b4a116e10138649997a40d410b493d08fd3e8c6259b69ceef812250b7ada401fc55c3d2db3fde2a6988c985fbfe","ssdeep":"96:kgDETUY4hWkdj+Ws3TdtZsVBV92dUTFQUe6vg2WDMsgL8NL4oLlxLj6LdVLRLt0Y:/4wlhfZMK/28FsDvxWMqFW4IPq","tlshash":"09a1eecdd32302072a33a6b8af1452c4df6240139f4606647ee56262dfb93bc85a3d6e","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.331579Z","times_seen":174,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/css/module-css/08-blog-section.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.023Z","timestamp":1787465251023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/css/module-css/08-blog-section.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4298\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36615,"size_decoded":4622,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"cf2749951b14e8209b0f00a7965fc860","sha1":"7ff3975367a4054a0917fc7981c0ca805eed533f","sha256":"5421f38dc7993b274d296f6fc3b3b65cec6fb90e8d5c6e3560ac1fee45cd3cdd","sha512":"b8f5f73cbcedeb47fe4bcb853e8b9a9078e6479cdabfcd5f8402b567fa655bf81ba99568cb59c94f734335dac070d002a32ece3aa0dfecccf8eebea36c24933f","ssdeep":"768:SewCwswBw+wM2UjAoxMoxeJSc2gy7BNNpe:SewCwswBw+wM2UjAoxMoxeJScy7BNNpe","tlshash":"3df2d08c97271245e637d6fc1fd5165ada381093da020198fbe453518ffabbc8242eee","first_seen":"2023-05-04T01:28:05Z","last_seen":"2026-08-23T06:08:51.378945Z","times_seen":116,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/css/style.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.024Z","timestamp":1787465251024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24535\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":224800,"size_decoded":24860,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1b93498274005987e678d7160d2f19b2","sha1":"c6f3fd7a11f1d4c1f209a30892946cb7b611efde","sha256":"373c26c98b9e09149a36fdd915ca8db1f586c244df913b4b50ec87917501ff4c","sha512":"2115b232b80e708da0add1d9475145b7319127acec42a101a5d8507002bc807a59e78c6d494f42388fc265fe928bfaf04f8fd30a514602b6646ddfa6ce6e4abd","ssdeep":"3072:MngU8uZmTA5TtCIRWclmjqbTZ4cU+pC8TXoxCXoxYRtqezXfa3FdTI0Qt:Mna8sIMQ2QhTXlXDfN0Qt","tlshash":"422444d99b760504791fe2a429d1675ae33840c3e94fc9bcabe5201caec93dc016bb5f","first_seen":"2026-08-23T06:08:23.76933Z","last_seen":"2026-08-23T06:08:51.366221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-magnific-popup/jquery.magnific-popup.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.046Z","timestamp":1787465251046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/jquery-magnific-popup/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7046\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20219,"size_decoded":7298,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-23T08:05:14.705487Z","times_seen":25116,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/nice-select/jquery.nice-select.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.051Z","timestamp":1787465251051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/nice-select/jquery.nice-select.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 930\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":1181,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-23T08:57:33.921993Z","times_seen":10751,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/shapes/shape-1.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.079Z","timestamp":1787465251079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/shapes/shape-1.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3688\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3688,"size_decoded":3953,"mime_type":"image/png","magic":"PNG image data, 99 x 236, 8-bit/color RGBA, non-interlaced","md5":"a28286828702f27555853309114a6b37","sha1":"3a5adff65f055032b1f206f5c374047b2d851057","sha256":"6eb3abf164ee0674681cf3c45bbceb54f28e2323b6dc655596db235e5e8f294e","sha512":"e8bedd1cd0281db38c8bd71143aa2fd63c61bb5139309a2d6a7f89b9fe33468b9f51d52b81f769d1648e5b2908cbaadb8417129ce2a7e247c0667e581223ba7d","ssdeep":"","tlshash":"2f713b86fb81cd21928490931dd1c2529a3386469e94e0747dabdc23142817a20be2ef","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.309748Z","times_seen":128,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/mobile-nav-logo.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.099Z","timestamp":1787465251099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/mobile-nav-logo.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14388\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14388,"size_decoded":14654,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit colormap, non-interlaced","md5":"fd98bc0ae2e6cdf5653687a0c3582777","sha1":"19161ef76940d344e79655628faf7f77b293484c","sha256":"b1c9970a87f77ca10dcce97b0805260f99eee0ec679fc4bee6c7aba4b538454b","sha512":"21668963998af958f03b08e9030aa3fe07ce3c2797a846461ed2c854b9ae53d7a3bb5d5789728b06a1ef9863ea1f4b3cb26a60639ee51426967aeefe4d5f9785","ssdeep":"384:lkaFiuPWolWDlSw7FmHAo+8craWh++uQ6Yhy:kIWwWwwa+MUIYhy","tlshash":"e152cfe19c79c4b99058de88b17923730749123caea0d1be21776b78ca6707dd93920b","first_seen":"2026-08-23T06:08:23.72468Z","last_seen":"2026-08-23T06:08:51.291839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:30.983Z","timestamp":1787465250983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Aug 2026 06:07:31 GMT\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12864,"size_decoded":1441,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"47cabbdecadc902ac84a6d9cee4e5644","sha1":"0cf23e67bb68a8701df2523b103c8614255d50c5","sha256":"6cb6c9324cab91ab024247e2e9d10ec371642dde873cf44af4d7eb455ea3a9a9","sha512":"457609607e66e5747a29792df54244a9b3591770466e4b3f7e03336d705ba78ac1d9fb0d7a4885be1c117a6ffc66e1ac0c4f34283850ef79a1b6a1cb75f0a5c1","ssdeep":"192:SJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668hs:UmkwU+ME02EQJ","tlshash":"0842a9900027e804eb470cd677ce7e39ad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-11T15:36:38.535296Z","last_seen":"2026-08-23T06:08:51.360269Z","times_seen":1491,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":32,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/vegas/vegas.min.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.009Z","timestamp":1787465251009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/vegas/vegas.min.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1085\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9459,"size_decoded":1409,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (9416)","md5":"e5ca567518c6c7414660b5f35cf92e06","sha1":"f702d0d70863b5455e8c6a06e41900f660568015","sha256":"4bcee76930d7f33223d1ad3e4c5c7f8dac59b2b336c2ac23f71105b2ace24b7b","sha512":"69d020e3ac8376888890a13909c96d3918e311a306e00377252afad0323f83ddeb963f8923684c8c897c6109f6278974e3faa82fdd053aa3e416c421c4ff98fb","ssdeep":"96:GfZExkrWH3/s9dD/NdDnGd36gj9d3WAut6wW69GMatHv:GfZE0Wvs//PnidWAut6wW6kHv","tlshash":"44127ed9695341cc80374799d3da4a588e3fcac326616cee7344280b5353bedb2ce6a7","first_seen":"2023-04-07T02:43:29Z","last_seen":"2026-08-23T06:08:51.361544Z","times_seen":689,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/bxslider/jquery.bxslider.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.037Z","timestamp":1787465251037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/bxslider/jquery.bxslider.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4925\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19359,"size_decoded":5177,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19040)","md5":"697d69a48e5356f7106e38c09f7f19e0","sha1":"b57160771fa597a5b56c5b12756c693e4829be07","sha256":"bb9e7dc822c6b7b95a6329932885c72ff2caf74b243fc1c40aca0e858123b83e","sha512":"898b8be9b092ac7dcd1efe0381db28fb8ed0555419cdaf40bf739edfb7945f8e301a95e6392677b2564b1f5838a560e6f309394cc46b1bd7b570b6f9312b90e1","ssdeep":"192:7RbGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIHp:9XZ8WjOVRXy16/kXIHHSHruwc","tlshash":"9392541b713436fe46b632b5b299cf487276908ac537f8f861b5d85819e8cc4301badb","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-08-23T06:08:51.349187Z","times_seen":7252,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/odometer/odometer.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.052Z","timestamp":1787465251052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/odometer/odometer.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3374\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9897,"size_decoded":3626,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9874), with CRLF line terminators","md5":"07013b14ea1c5e30722ded722a1dfff2","sha1":"e6b09f4356f4e0485c6c7f73e629a70a1a4a549d","sha256":"b915a94b58cd8566dbe14df96e8fac1ae0466e35660f887109c5d53e5b996960","sha512":"d765c201184b347d618c3fb63144fc68a7318af5f8388ca01d1941287b83c93344d87d10bf1b2824eaccfe7ed8dae18d52ddba4e9adc1cb38109144e33a3f54f","ssdeep":"192:CABzlvk8QecC6AOcu2flRdI5s/GMjXuu/T:FBhvk8QecCa07z+Wd/T","tlshash":"ff129580be02a725875371e151bf0709b7bb99ae6404401df67c9cdabe25c38e12bf74","first_seen":"2023-03-07T21:40:14Z","last_seen":"2026-08-23T06:08:51.380198Z","times_seen":1654,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/features-style2-banner-1.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.348Z","timestamp":1787465251348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/features-style2-banner-1.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31411\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31411,"size_decoded":31678,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x295, components 3","md5":"849517828cbd5d1665dc9fe956af8936","sha1":"649601c5c625b96596141f9f37ca6f93052be637","sha256":"6843d47dc841bfc87a7cc56e395c977eaa19cf5e2b91f4ad34dbf027173b16fc","sha512":"3b8a0148220d97bfd90dbd5abf5ea046d539d90179192a5f96cc630489243088c826917883d1718da388c733013d1eb8d8c47b1b424cc0253b2666e5e5c3e505","ssdeep":"768:3WsFyY3OW6gEmvU3JgkmlVlTzxBOFBqA5vrlDG1/w:GsFyYeW6MvwGkkTdBkwCJG1o","tlshash":"82e2f123cb599204fdb371619d781b0d170d9933ee2009b6deb5cd6534eb9f3a81b086","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.306844Z","times_seen":111,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.397Z","timestamp":1787465251397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/assets/vendors/fontawesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 80304\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80304,"size_decoded":80571,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392","md5":"3a72bd4de4eee67dd0628f555c652a94","sha1":"a385b6a3a5f98560a3a7ea2f299e091ea19b84d1","sha256":"95604290f868e7eab37ec66f2d941e9d5e999b6a7d4ff6d914c0e8c568091009","sha512":"7e2be561b0bd585211704665b7ed4afd86878fc2018ba685287dbc0f8b93991929f9b97607c465619c14390418c5024682a34d40fb07e1723325e33f6bfb36e7","ssdeep":"1536:Tek2SfK4WGTQa1GlyGLjWSYktyIWeOo4XyydPl2m54fsxDFsbaLsND1VvI8:ak2yTQcGLLqmyDelE7dPZD5FeND1B","tlshash":"f0730272fd7b05541fe8e3bd39390568bb881acd35c849f20586fc95e0ab67a7684d03","first_seen":"2026-08-23T06:08:23.775635Z","last_seen":"2026-08-23T06:08:51.332257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/fontawesome/webfonts/fa-solid-900.woff","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.714Z","timestamp":1787465251714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/fontawesome/webfonts/fa-solid-900.woff HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/assets/vendors/fontawesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 104280\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":104280,"size_decoded":104547,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 104280, version 331.-31392","md5":"4451e1d86df7491dd874f2c41eee1053","sha1":"3b86a0ce15d8d534b65e98560e321a933d310688","sha256":"aab971ade1633ab836222074ceae0aad8a082d900908f27491b221d6e83998ca","sha512":"d7992acea79eb27ffb1ad2578f4726b13050d5497e3c83d7918643c4c2b6ece68be7ae5bef9cb9f7b926c65bfab900b495051edd371cefd69c0262bc01a759e6","ssdeep":"3072:rKk3maPY87+7d9Vu2wFeNEkmR3rTCIcS93AQh7uTuT:rP3maA8wd9sSXU3333Zhqk","tlshash":"30a3129539c93304d74f220ba9a05bc7dd7c62c949514bb225beead30fff46b2985740","first_seen":"2023-04-10T06:09:30Z","last_seen":"2026-08-23T06:08:51.386567Z","times_seen":820,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/deals-1.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:35.078Z","timestamp":1787465255078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/deals-1.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:35 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91965\r\ndate: Sun, 23 Aug 2026 06:07:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91965,"size_decoded":92232,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 460x515, components 3","md5":"a58d7f7105d7e22df8c3ec1f88dddd38","sha1":"d889013e46210871d0be74a22d343206d563424a","sha256":"1e9d0c76deaf2b3023e4f998794d4e22cefad3d6e96c8591c85c982db559194a","sha512":"83533d30389ed56d973dc3cf53bc581a57c5d34bd1f9e5ad4c8fa9ea392024e12d405a8851f69d9136faeffaec127c1009e0cc963d355d3c5fb05a33ca21bc8c","ssdeep":"1536:nLgn++GWQU2iZYSuCDV+tbeormGgm55Wnz8SSBoktCvJpIMwXeChq4ze/uqthut:nLgnu9UjZYmDV+FFgsWQfoQCvL+ebOIU","tlshash":"2b9302e547b0e6e648ef0604907e4fe2572dd9bbf7a7a9cd24fe4112084d1823486fe2","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.382263Z","times_seen":115,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-ui/jquery-ui.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:30.999Z","timestamp":1787465250999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/jquery-ui/jquery-ui.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7108\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33553,"size_decoded":7432,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2366)","md5":"5f8095ac02e84b201396558c2bd1e97c","sha1":"60e96a23b4e62fb18cd7e45ddf1683c501152eef","sha256":"469f3aae1fee2e5416768c3be98e47fbbcf9ab2a7ab2cbbdfda8478a426ad0bd","sha512":"6d1774052a4ac271d3a621bbc6d597022a4f5b3ce2b97748e528384b170efee0b63429502cfb5d842eec46a0cbb053626abfc0b65747ed3011fac900b2a3a9ff","ssdeep":"192:MsOxJWrMMQY+BDlr0sNJdBsUPSMfe3znJ572tk/J/da5Y6BjSmMErEURHHNfCE5M:TrnyGOqrJ1M2ex5YE7zS21uqs","tlshash":"b5e2db316b433909ba1bd1a065911bf3e32e1342fe6b7d7e609a259cd3d94e080bf5b4","first_seen":"2026-08-23T06:08:23.778547Z","last_seen":"2026-08-23T06:08:51.387858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/language-switcher/polyglot-language-switcher.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.011Z","timestamp":1787465251011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/language-switcher/polyglot-language-switcher.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 792\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3306,"size_decoded":1115,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fa8963079e595f60cfd3d3bda026dfd2","sha1":"689f73df473abdefb2ff0b6f051d20cede681d30","sha256":"19b5ce5b135fd8f8bfe8788e61145271a9492791f98eb03257c7bb33cbebef2b","sha512":"ed54a0793ae927ae34a8ff0ab8044472cf097adab55f1ec918e85a20ee82eb69338e2ce9ca908737090efe10e7ccc604c27db0326479b2000d6051adfd1ad498","ssdeep":"","tlshash":"4f618b658d530861b80be3987a7fae54e7281037a51d8c283b1f3598dfcb5e8886f6d4","first_seen":"2025-04-15T10:50:53.06441Z","last_seen":"2026-08-23T06:08:51.363175Z","times_seen":19,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/wealth-secure-3.jpg","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.086Z","timestamp":1787465251086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/wealth-secure-3.jpg HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67144\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67144,"size_decoded":67411,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 340x350, components 3","md5":"1c61740023ce9817d8150707688e5250","sha1":"7e9be7a6685a97898098b7597d7aa7a40ef9aa82","sha256":"fe91711dbd9f290a38551def25b46d6037f42d660abac8e8756b94145de43c72","sha512":"77162b4c1a01c0c2f528ecde7da101938e9202836f5b16a7ccebb8108787bfcd6d387fc9f8de2555d9b5d6e2c386616987347d57fe0845a5b00c5f250b56d2c3","ssdeep":"1536:IQyPDgXFM3lhioOR7rfVZ+NFn1vyPhbJjatTN3RikU4VfjRRsWtr:IPgO0oOFjVQ31WhbFaTEH4+C","tlshash":"7d6302b2265080a3def6b7f9e30de92b58b14c47f160633668df291d5934f8b541e2c5","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.303885Z","times_seen":118,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/resources/flag-1.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.091Z","timestamp":1787465251091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/resources/flag-1.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2068\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2068,"size_decoded":2333,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"84d0eb8cf9fe373cd47051e41407f9d5","sha1":"3efda42a02e6e5d4ca620967423762fb751291b1","sha256":"0104a27c472b0c078f00fe55de3a6c592676260f6640918ee50fe4c16600e3dc","sha512":"bdbbab32d123ed0545cd6aff2c5a95a71671fd6e0cd1e949f34331f952fb3acc0eb268a9c2996314f24e7fc49fd5648b34dbb23461fc3f4ec8dc819760a28cfb","ssdeep":"","tlshash":"2f412aa2c1e81fbcdec73f36b75dac240ee8c6110b5527550aee946f33160295c8889d","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.385262Z","times_seen":107,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/sweetalert@2.1.2/dist/sweetalert.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.182Z","timestamp":1787465251182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /sweetalert@2.1.2/dist/sweetalert.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a2f7effbdb1eb505-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 459491\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 23 Aug 2027 06:07:31 GMT\r\nlast-modified: Wed, 01 Jul 2026 04:33:09 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:KsRuvuRtUVvobe66OFtOQfjP8WA2SzYsmm4VPfMnxms=:\r\nfly-request-id: 01KRBZPERKHSFYX7MMT6V22M8K-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":40808,"size_decoded":12727,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40808), with no line terminators","md5":"f3b8ce97ff6ce324da6232da353adf40","sha1":"2a3daabc70232c6350ab48d32605dc4a6ac1f1fa","sha256":"2ac46ebee46d515be86deeba385b4e41f8cff160364b362c9a6e153df327c66b","sha512":"000d41ce9e50d0ad4a6a728a9af37fe1ddc844a565bfd3d883014fbe6df69cf3ba412f321f51ceecb6e0075a6088ec4fb5f7a0e73127d9b6bae0c51ca89c7a08","ssdeep":"384:/BLa4qL1li0jldLUuuRzdNU/CfFqLyX9ye1hAbj/i5Yy/kyyeu8pgUqaF2XSSHEj:ZLahUvdNU/CNqWX9ye1hWz8+B3c2Bkj","tlshash":"96031a96758470a643e398f191ef020ef2359523b84798d5b361e8e88ff4e8d50a7f1b","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-08-23T08:37:50.863933Z","times_seen":11840,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/shapes/counting-box-bg.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.345Z","timestamp":1787465251345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/shapes/counting-box-bg.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5750\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5750,"size_decoded":6015,"mime_type":"image/png","magic":"PNG image data, 162 x 165, 8-bit/color RGBA, non-interlaced","md5":"8156d338d3f21c1437c7c95b706b7ec6","sha1":"cd9714c356d682bb3ebc1abb282f67b114ff3dd3","sha256":"6372d580f923be624338a235b3efe98ed89591179950d61afa387ed82c1b11d3","sha512":"d55068e5d12bcdb7f68c245fa1fb2f60b68582526f06ebb7081c2ddd7e131e5cf0c60ccc3961d89b5cf84faaa616ad075bd404dd84fdd6d81ec2a7a8e0a10dd4","ssdeep":"96:3+R72WQI0LWwgTBVnGFCEYT65iszyx98zA9aRY8U1F71tFNr34DOQoZGr:myI0LeTzcCk5iayaRrSvF53YV","tlshash":"60c18ccfde451641929549b238e11823e40ee0907bf4ad9e0d8edd274b6aae56e6ccc3","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.375516Z","times_seen":123,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:42.240Z","timestamp":1787465262240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://crestwealthfinance.com/\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 06:07:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 143765d349003193ebd3783518e376c4c54f428f\r\nx-77-nzt: k/sJDOvdSxTgoKtEv6sK2qDCQnBUqFymQzcDWQLbotpRACeTv0bIM8juYQmGidVTIFiJWPo\r\nx-77-nzt-ray: fdb54123f89e27e6538e8a6afa37b211\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 40\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3356,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-08-23T06:21:56.424064Z","times_seen":1031,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":35,"connect":8,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/swiper/swiper.min.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.007Z","timestamp":1787465251007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/swiper/swiper.min.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3821\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13690,"size_decoded":4145,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13426), with CRLF line terminators","md5":"55a51f6674e3065d4c3f08df60c74542","sha1":"babe9950a0560d597b2f2a0e0c7f7c174a34c0ce","sha256":"7091abac8f337c926c1db05c5fd07a27e19b1c7bba4d5143e80b193eef8a660a","sha512":"e5cf689198b459e923a504d82600f58f01187a00d2c60520d0adf7fd06911a49b61f5542029933a7f4ff35857350ac6a9cea882a3f199ba6a7184a503ab1b51f","ssdeep":"384:T7UbeLoS7Rgx9BU0m/XCcif65W/1mXA82FHpx:TobK57gbhm/XDif65W/1mXA82Fn","tlshash":"b052236417003837f3774f6e46a1e6b59f60cc838a934dadb2c0dd44d6f98b9121eb95","first_seen":"2026-08-23T06:08:23.784071Z","last_seen":"2026-08-23T06:08:51.318259Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/thm-icons/style.css","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.010Z","timestamp":1787465251010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/thm-icons/style.css HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2300\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25076,"size_decoded":2624,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0a13eed10f6ca7c8d18ce2c1dae86def","sha1":"3862a890120fc79e39c29c97053364266db91a5f","sha256":"8b171fc559e064dbfea088f905e7b1922ad348132d5a2dbed77a88b10a23ea27","sha512":"81de728998c3ca2bfdc87076988a01a0e508b7cf98bec98e8f0fbcebb08d7b7a499d2b2cc6ce31a938b102a436f2e545c50ff425398aaa3d2bce7fa9eb2ffb9b","ssdeep":"192:Q+7vAIYW8yFB9Yg8/iQOKQFFEp7FYMcZR:aIYWvB9YRf4FFEp7FYMcZR","tlshash":"07b237d08e7d1d61038ad1d41282d175fb8861d44e87ce0ba7a374acefd6b09a8e39dd","first_seen":"2024-08-20T14:44:48.790168Z","last_seen":"2026-08-23T06:08:51.288034Z","times_seen":50,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/bootstrap/js/bootstrap.bundle.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.035Z","timestamp":1787465251035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21566\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80427,"size_decoded":21819,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65293)","md5":"042c7b121492b284f48e2a815de85a7a","sha1":"2dac85f8c54408276a0bf3cffa91dfd4ef7a3f51","sha256":"05304a8f26373142efa126a87977201cbc22d408c573f151ee2907933e9099f7","sha512":"0d2762b8d66d7d485e8591d7b62b7d49affcde2d3a6129ef4fc26cf1daf07645420cc937270a48c5d85fda8454072503077c20b8dda2033a1335fc4502ea86c8","ssdeep":"1536:Nz3Bdr5R2tnuoJXGP2FeFx7g2v+CfYL/OVlMobdOFV:BxlPBYLug","tlshash":"6073c6493214b8730ade54a68077470bf7255da5b14b812cb9bd9cde2a3dc8232b7f78","first_seen":"2023-03-07T14:38:56Z","last_seen":"2026-08-23T06:08:51.290152Z","times_seen":1752,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/vendors/jquery-migrate/jquery-migrate.min.js","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.047Z","timestamp":1787465251047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/vendors/jquery-migrate/jquery-migrate.min.js HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3995\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11224,"size_decoded":4247,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11126)","md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-23T08:34:56.823933Z","times_seen":87101,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.395Z","timestamp":1787465251395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://crestwealthfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 16 Aug 2026 10:14:11 GMT\r\nexpires: Mon, 16 Aug 2027 10:14:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 590000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-23T08:24:11.891922Z","times_seen":41347,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/assets/images/shapes/shape-2.png","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://crestwealthfinance.com/","date":"2026-08-23T06:07:31.080Z","timestamp":1787465251080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET /assets/images/shapes/shape-2.png HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://crestwealthfinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 06:07:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 13:00:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3547\r\ndate: Sun, 23 Aug 2026 06:07:31 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3547,"size_decoded":3812,"mime_type":"image/png","magic":"PNG image data, 236 x 98, 8-bit/color RGBA, non-interlaced","md5":"c817b9b859087e2ca39e5e31d8aead39","sha1":"59b1000a0d3e7a3618002cc8d928576285c7fcc0","sha256":"14bc38815322f8ab54414c337368ce9bb8357035b41d8e3f15eaa27b6186baa1","sha512":"7e43522d3cb93466dfe12f17d4855d2c10eba34cd0a4093573af236d58a35b28a50379e3a773fbef68c272caa62b6a92dc748924a76f8a17abed54a1b3be0669","ssdeep":"","tlshash":"2a714c8dbb0dad449798981a38d9026ed2ab8903dd81f9b53d8fd0b259b527d04190de","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-08-23T06:08:51.353672Z","times_seen":127,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crestwealthfinance.com/","fqdn":"crestwealthfinance.com","domain":"crestwealthfinance.com","tld":"com"},"ip":{"addr":"163.61.188.5","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T06:07:29.820Z","timestamp":1787465249820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.crestwealthfinance.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:55:09 GMT","end":"Sun, 15 Nov 2026 23:55:08 GMT"},"fingerprint":{"sha1":"3A:6B:F8:82:1D:9E:F9:D1:A6:4B:F8:00:35:50:E1:57:7D:FB:5C:47","sha256":"8D:B7:DC:9A:66:AB:96:AE:77:A5:EC:31:D3:D9:34:BF:FC:0A:96:44:CC:F5:B6:FC:E2:53:0E:AF:23:40:BD:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: crestwealthfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Aug 2026 06:07:30 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":195133,"size_decoded":13119,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"cd99da8656aa5c9a9a277574c063f319","sha1":"4c5df5f312b31fc42ead4ed8f3ffc8ebe520f540","sha256":"e8382629e9beef84ebf67e3fc70904c8ecdc25175b48527f5e7200d48fb88478","sha512":"61f23e4734ef0c461efc1ce9b18e82ddb9216f5ac23394f360d59dd42c018a4db732b8a278a5d481e59640d8d44e3ffd5d04271aba4f080dc7e95e6e48093126","ssdeep":"384:xcvEMyhvINsrj5yX5UbnNpUJUBzU1IfTOZ607nOjpQv7nzzfZv7nYZzfv7nzZzf0:xrAW/XwBbVKcEKcEKczcms77+rg8M/g","tlshash":"81147335a0c1143701b381e14a616baaff81824bdb4b8a5932fd2bdb5ff3d09dc17a59","first_seen":"2026-08-23T06:08:23.788075Z","last_seen":"2026-08-23T06:08:51.32991Z","times_seen":2,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":226,"connect":87,"send":0,"wait":173,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"crestwealthfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}