{"report_id":"f61a5156-dc4a-411f-a144-219298727c28","version":0,"status":"done","tags":[],"date":"2026-10-15T05:22:18Z","url":{"schema":"http","addr":"xycrestholdings.com/","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":0,"asn":214036,"as":"Ultahost, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"xycrestholdings.com/","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"title":"Home - Xycrestholdings","dom":{"size":178205,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (54036)","md5":"a952389ccf30d26168ee61137ea4f6fc","sha1":"874048081439dee3884e78f78063c798fb31f459","sha256":"6e8337eb0a4b28d8510260c54c4ad42415c29c611751dbbdf4f8c95269f545a4","sha512":"679ac91cd2902f24a597cccc3958754c57d7bb8c24e9fbac12fdb803b0c52d07724cd5744d5d8c29aee5063f689f479cbf4ed068e8859bf8af6d9a63c89f23f9","ssdeep":"1536:SfcxqNJhb0IfX3zN19LoFphgjekVHnhJVIm/+E4AVUfxmAkgl:b4hJdoJhjfxmAf","tlshash":"a104b47c22f011376c43e1e1e698ad2ded2de6d7df3b694ab54c42012fe29e64e47a10","dom_hash":"domhash5a8b2d4ed852db579066061ac3377d64","first_seen":"2026-10-15T05:22:38.331427Z","last_seen":"2026-10-15T05:22:38.331427Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xycrestholdings.com/","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":0,"asn":214036,"as":"Ultahost, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-19T05:22:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"xycrestholdings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xycrestholdings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-10-11T23:25:40.076337Z","alert_count":0,"request_count":19,"received_data":1487274,"sent_data":11610,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"18.193.50.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-10-10T09:00:40.643979Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":634,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-10-10T08:47:18.352124Z","alert_count":0,"request_count":1,"received_data":18586,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-10-15T01:09:44.241448Z","alert_count":0,"request_count":4,"received_data":79950,"sent_data":2455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xycrestholdings.com","ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-06-17","domain_rank":0,"first_seen":"2026-10-15T05:04:51.023887Z","last_seen":"2026-10-15T05:04:51.023887Z","alert_count":10,"request_count":5,"received_data":961186,"sent_data":5617,"comment":"","tags":null,"fingerprints":[{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":1,"received_data":15846,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-10-11T13:18:29.57024Z","alert_count":0,"request_count":5,"received_data":396460,"sent_data":2406,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-10-12T10:57:40.960508Z","alert_count":0,"request_count":2,"received_data":512773,"sent_data":1068,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.159.126.105","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-10-10T17:30:38.145641Z","alert_count":0,"request_count":1,"received_data":1579,"sent_data":541,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"8dce7bbdba57092071825523798d9e3e","sha1":"cd3e22b4a261de1f30ece6f32fc1b0f15c84156f","sha256":"342da57aca44a64d262c8e4a1fcaf0cd5768895dce192bd275936d82aa953f05","sha512":"4630b2eedc64f7518e1ef0bd79925f694ebdc2bc2337b8f4c83322cf25bf1d34d2d34f64814c02f9ef74e648c8e6f59614293c334865967536867848196d2aeb","ssdeep":"","tlshash":"b9d0c294444e1a01c1722ab6a0aa6c75923b1063907ce9257a344238a47b50bd359d8f","size":278,"data":"","first_seen":"2025-06-30T12:46:17.203341Z","last_seen":"2026-10-15T08:33:13.98546Z","times_seen":1796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"923f7f6110eda5beca012a3d31f98d3c","sha1":"77e8a6b30db7c2515cefc32b10a9775f82851c92","sha256":"ee85e0b54f6b3f926a2fe86648718511e2c512d8faf553bb57094c16ca8962ff","sha512":"daf513a3b5120d997638c46131ca3f0d30e2ea59c4f8700cbafaa6dcbfcc4b7dbee6599e8769cdcb40fd060a6d539e55d6bb5cb1dbc8b01d3d45f957391737da","ssdeep":"","tlshash":"ffc09bc458ca5900c2173992c0395c3761381665917d84651a3da3549537116d15dc9e","size":132,"data":"","first_seen":"2023-05-18T18:40:20Z","last_seen":"2026-10-15T08:47:52.853484Z","times_seen":2244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"c6a6b3902c8e8970ff6a97ec96d79251","sha1":"4e93e02e5dcb3f55e80075e3850b8129dedac970","sha256":"af0aef6911bb609fbd698d02bedcf2c4fb0ffd5a0df64b149cfc3971a856d1b7","sha512":"3ee9eb7e3129889f2b780dfba0367d97031bbfd6892f982dabecde7fc84a8d4d2b0e1cfd592d09344a1b1589eed1dce70319186bdd07063c49d07847a7799575","ssdeep":"","tlshash":"5ec08c9088c20900c2073ec0d1364c3f232cae24c17d44672638e398847300ae18ccee","size":156,"data":"","first_seen":"2023-09-08T12:39:05Z","last_seen":"2026-10-15T22:13:22.520505Z","times_seen":4513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"927e2aa58dc9e19d31a2642e0b93530e","sha1":"3fc0043defe196deec580923f452dd8580a66c4b","sha256":"24bc1ad206ab789c05246d4cd13ae6094af54862c7a748ea66252b0cff00a61e","sha512":"eb0176e932ac62d943a28ae81136e5847dd027c7c0915fcfc13cb959484404681f6fc2dbcb9916423729e5f3e3df82adecad64843e69f6f710e8547d58bc75dd","ssdeep":"","tlshash":"66c08cc088c20d10c20339c2c03a583e32281a60d07e886a3639a3948073026d05ccad","size":154,"data":"","first_seen":"2025-06-30T12:46:17.180302Z","last_seen":"2026-10-15T08:33:13.955503Z","times_seen":1757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d0c9096d7aeb29837dd80fd2da9749fd","sha1":"61f7fd60187a7297e0b6c630e725fafd05d5aa70","sha256":"501d1b04f9896c03853d50e6123a5a4af566e469e55d7af4a1ae9bf01f0fa4f2","sha512":"c423ae1d206c7a31408eadf51f14db8958acb449bf0b382f15132c88f4799b917196853024a856da8f7b86cbca390c1c2f07f40ca858841fa9d9497d7d745af7","ssdeep":"","tlshash":"54c02bc048c20900c30339c0c036583f22381a20c07d4467263ce3948433006e18ccee","size":139,"data":"","first_seen":"2024-08-19T15:11:24.173194Z","last_seen":"2026-10-15T22:13:22.508768Z","times_seen":4174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d9083f3ea9691bd61961b0507ef470b7","sha1":"46e225d0bd652e402314a1042fa4033b650ef92b","sha256":"2592d02a00a7236dba422bbe45007390e40c621ca390880dad5d900fbd807e69","sha512":"65d04049b7ebd66da31c622beaaaa2eb475bc32013fb8a075403d5b27b91f9a73898817bec9fbacfbb49777d59fc71975c5fc193c256d29d9cbfa2c20d65fb7c","ssdeep":"","tlshash":"8bc08cc088c20d10c21339c2c03a683f32281a60d17e486a2639a3948073026d09ccae","size":155,"data":"","first_seen":"2025-06-30T12:46:17.190409Z","last_seen":"2026-10-15T08:33:14.13946Z","times_seen":1757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"4a2b0b4b8def347812f148c9eb4c0e0c","sha1":"da70324c25d4f9504e2d9fe4223d09f23799b1f3","sha256":"2f15477aa77dc2a4ea1df308ccf9a795d7cb57a45a27ca53e28879c296ed7713","sha512":"f180daf213dc367f1a2b1855a48b2fef378ba730821b4d9d8ece8f70981c28c94d9f1ac4bcde07b12c44a7330403a50dd2335bf555efada6b5084b7ab5ca7ce3","ssdeep":"","tlshash":"f7c09bd458c65900c2173dd1d136583f623c5a65d17d4466263de3949573116d15ccee","size":138,"data":"","first_seen":"2023-05-17T12:49:57Z","last_seen":"2026-10-15T22:13:22.509836Z","times_seen":5574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"10c39bd19fa0b24c498364ef3e0187b9","sha1":"bd5e8d3164dc767680166ef72993ac0a5931a0fa","sha256":"bd8bd63b0b7782f263a9fb13622efdbdffb74b398f28c5fbe69d1743741bd009","sha512":"2528141a8ce54b9cd0f0a7a0c7776ba204c35f107460da578d952be197ae77cbbdf71057e47f286c73ff26ea036e52939912de488dde214a46314e19b6338a82","ssdeep":"","tlshash":"e7c08c8408c20930c2073882c03a543632282a6091be546917bde350a2b302ad10ccae","size":154,"data":"","first_seen":"2025-06-30T12:46:17.169412Z","last_seen":"2026-10-15T08:33:13.917502Z","times_seen":1762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a820eaaa99c8c72b00025f61ae2ae318","sha1":"1a630cdc67c0e0cbf986019058256c0e1f547b9f","sha256":"34d6194f139ba0b84a042a252bbd47176bde9c04c0aaecc83abe96ebcb520644","sha512":"6eb156c031b880702ea78a9d0d0b203bbc9107f43d35559858ac0811674bb3725b801d2bbbde18a2ca6c6b8a5d824bc7a9f758e2088e2312b5b9aad4b6869d5d","ssdeep":"","tlshash":"15e02b74004d0103807505bd74c559a466370063a035f920761c417c2f9aa564310bc7","size":295,"data":"","first_seen":"2026-06-07T09:29:26.371644Z","last_seen":"2026-10-15T08:32:39.264023Z","times_seen":520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3a79dd9c32dcfe6560d5c93cbe33ffa","sha1":"7070ba0062e7d99c66676c6ea26cebabeb017ed2","sha256":"bca526db6dc479ab380b70f196e5196e4b811f98ec374b9c92a4d4bab59bfb93","sha512":"f3958db5893d2f9a76796ca1e6a6bb37cbadee8718e35851ac99cf5015ad99fd972cd403b4f7320e94f23be5ae30eb350fbdc0d957b14442a3ae05e851fce4da","ssdeep":"96:d4m/DKBNAsp4+MptqRR1itSiQqmig4zbSCI:d4aKB6OaptqRGfSCI","tlshash":"cfa165f81db74907755a81ae80ed29068d6ce0ebac273c6a73df46840fcd1cc81b9229","size":4965,"data":"","first_seen":"2026-10-15T05:05:00.592733Z","last_seen":"2026-10-15T05:22:38.419063Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2edac4e9f86eff8b651b062053295285","sha1":"8cbaa61c86342adc313052a1125aa09ef76aadc5","sha256":"f2e6b9489e206bfb0e37448124adabd80e8edf4cb7167bddfcc96b6457744f1b","sha512":"f6b4f7a1eadc696021932ffb4af835cb2262b502f3b4e26c638e9d5f5d25879ee3e9b9af5661d88b5103623ec0238968370e3374a2462c5ad162aefb29245ff2","ssdeep":"","tlshash":"5b11eb1f28b510bf41b3332b935b0312773800573846ae163f2c83864fd5a3c5ae2e8a","size":1004,"data":"","first_seen":"2026-06-07T09:29:26.376283Z","last_seen":"2026-10-15T08:33:13.846383Z","times_seen":376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"49f6d8db920c1cfc013b18f5109a1f06","sha1":"030d45f6b32acd2ac5107b119c050db84d96bf9e","sha256":"6330c6543499657962e04f619dcf14ed160c494004b1e4eaa67a26ff09b8c60b","sha512":"b5082dd46ea5f84a4417b4c5a1b5d5a72c7f0c1b199379cdd6469b5498b6044919e411afe0d374ad257c3f8d0222377c1230c35baaec404a0d15c5d7d196e429","ssdeep":"192:+Vxii8N6o68+WhE49YjPcn8gss8K2b/J/K8uMoIE8IiDq44c+60i6BQTreUd84Z+:QuE4R27poItq6+7t6Hp2hT","tlshash":"7d4240f934b32128c457207ea75f2548706b8147dc12fd067b4d23415fcba2d9bb9ab9","size":12634,"data":"","first_seen":"2026-06-07T09:29:26.377261Z","last_seen":"2026-10-15T08:32:39.375991Z","times_seen":502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"406cc5ca181209e4bbfb6833f5d1c376","sha1":"660d5fa294ced2c899addf8a2b863e91bebc3386","sha256":"5767982cfbb8fbbed4c664ca77a994c793f113c4cefec221a93b0b3f5c075f43","sha512":"49dea9e69c6d470bf8fdefee879f1daa2d7316ff7b2d3fbc6326ce6efbba308f25397d88443e2b286172942076b15ed7ddd3cea083c4ff263b92d14083163893","ssdeep":"","tlshash":"a6e0617d3c3150954ba251f5c1b7f12d7d1930645458dc17dc99887d1cb1fd9bd01594","size":412,"data":"","first_seen":"2026-10-15T05:05:00.603039Z","last_seen":"2026-10-15T05:22:38.435955Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"225459815c523081214799b61aec5eea","sha1":"d0adf88c0a8358c13a7cd8b796c2567eba7df6bb","sha256":"5ebcdc3b6e55da31a1ffc46e19ceaa6d3270331b6d609bbc3fd81a82db08e1a7","sha512":"23116a6c05a8866e51c8517c894131f7020ea2488470e573844b93ad45fc47a8f0fe598758080f74cf88b13ec34c4314e6425fc32c9f4ad831e9d9f28bb48f45","ssdeep":"","tlshash":"53c02bc448c30924c3073490c03690373239176091bd446f173cf350a53301ed00cced","size":147,"data":"","first_seen":"2025-06-30T12:46:17.18677Z","last_seen":"2026-10-15T08:33:13.994757Z","times_seen":1856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"004c3626de240d2449a5a9252881968e","sha1":"4b3e76f47e518801f8a2839085b2e16bb6be00e5","sha256":"8627f3d44e479e78d929cb5fb9e13ed9a57daac494fa2346fec8924ff38b168b","sha512":"b16712cefe477ed260e8bfe4b8119fd6a1a7a664d6e2020e63bd5a5f36040541fd50c408cd95186e88f5111fff783be2fc5b9c2f5d710033b01becd8e3c206ba","ssdeep":"","tlshash":"61c08cc408c31920c2433480c03a403622282b6082bd546a2738f350a6b700ed10ccae","size":152,"data":"","first_seen":"2025-03-09T12:46:44.894004Z","last_seen":"2026-10-15T08:33:14.193898Z","times_seen":1870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-G-JVW261.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"91b12d1531b985e7f2fdc1ee62d7926c","sha1":"23bf8b78c320cbe5f4863c2bec6640814e3f0d40","sha256":"c9cec49321acc57bbb2f75e3d71e8f977740a07b7916bb5a4deb898e0c84ca1f","sha512":"424ceefd1321e2ffdc5accbb5da7afea7a98b4e3f9b56aa07424306adb52aabfa9157c00c8ac01466e54fd722e5fc8942c58bb5544bbb4e28d5ccab269c28018","ssdeep":"384:ONIFT88tMPdBgaw5O+mvRan7/DKsDoKkwA3Q+crsbUzgfTtQfQIeIw:ONIFX+dBgaw5O+aanr9oKxA3Q+cwbUwb","tlshash":"a072e8741210783f712f6c492a6df497723ad298e997c5289a2fdd5c36c8cc0a873bb5","size":16028,"data":"","first_seen":"2026-10-08T09:06:18.852229Z","last_seen":"2026-10-16T12:23:03.394665Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-_WWe_iud.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd280edc7866574fe4ad69f69a887a5f","sha1":"f173f1383325575160ef312bf358c0ae25dbea27","sha256":"751126cad8d1b18164a4ce0e4f9e24769ad24a26e2ab3733186d44de48ff8d84","sha512":"1fecc71e2a7de3c6753187427361cbb97173502fcf3e2bb175bbb9dd5fdc63a53c86484c6cb5f730314b9f274248ffe7a728635147b0f19e71ee78e56f6f8d8d","ssdeep":"6144:vJjSEILiukrPQKKjhetJS9KYtprU9fcuaOg/sBI:sEIWukrP3nJwpANaJ/sBI","tlshash":"61644bc57290b035439791a6906f1105b33e9c18580d812cf269edf67dbaec8b2b7fb9","size":323863,"data":"","first_seen":"2026-10-08T09:06:18.873046Z","last_seen":"2026-10-16T12:23:03.401105Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"37bbf94201a78634b2780338ce1ba9d9","sha1":"883904fdd66539e8495d4fa23d88a5f3cf18b763","sha256":"232519394c6c8fdba6f362b1d9da16106db513cdbf899011f00daab4051df31c","sha512":"d2e88834617d3321d7f7c6d75b6d0a4f5ebfddd5a78eb4767de921f6229870da6e0179600083e8201dadec71b8c9496e9075fea2a77a99ec2557ae45cdda94f7","ssdeep":"1536:xHuOum1sTXNJebFteZza29c6TXo9pSr+COJS1Ec6:9Vx1cXNJebFQd19c6TXxhL1Ec6","tlshash":"a4430ae973daf07283ef11b650bb4646f37d2894140e4428f669e8da342948951f3fbe","size":55891,"data":"","first_seen":"2026-09-22T06:37:22.347072Z","last_seen":"2026-10-16T04:03:40.354508Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"0e46fbb7ade51a86ff8abee085231141","sha1":"3975255b46c0df094360b7801d44a52ff84b583b","sha256":"c3822501459b0ddbcef277b24e2bfedd329d564c467e7ab0a3014cd794623911","sha512":"baddbbe4b9a29455543ecd006520983059617aa4688b5eacfc1e97fd69929ae89b07835b3824e79d1ab4883ba54966906273a7a19668411a34e62b7f8e76e3be","ssdeep":"","tlshash":"26c08cc488ca0919c30b39d5c236dc3e223c1a61d07d847ba63da398a433026d14dcee","size":166,"data":"","first_seen":"2025-06-30T12:46:17.193302Z","last_seen":"2026-10-15T08:33:13.942792Z","times_seen":1759,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d8bc027a7bf4c91f68977f4adb649aeb","sha1":"82c3083c1796dc1f05f8f4e00e4c2158b4d56329","sha256":"48561bf772de82456babafb030cb14cbd36d1df838a537e1e849213ad93d3832","sha512":"07abaf6c4c6e00577cca7c3a1442146bcaf97a0213771d6bfa5adbbaed6c41537ba992fa4b80fbdbbfcb7c6e6ed54c06a0f4129cb438df3f91c21228f1baa35c","ssdeep":"","tlshash":"e8c09bc458cb5d00c31b3a95d1365c3b713c2661e1bd84691a3df3549577116d15dc5e","size":144,"data":"","first_seen":"2024-10-11T09:02:16.41319Z","last_seen":"2026-10-15T08:33:14.055929Z","times_seen":1930,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"d48402d80b22f0181eb2e24673c1d10c","sha1":"b7103c0c3061f88be951019e0e386ab4c59b2376","sha256":"1067f2927ee303594931a5c8ce98038cf9c27abba18f2f552bcaac723bb79060","sha512":"307ffd760fda5e64c8fca16910e000c94746e2d9aac46f2e9c14129a7577259d79cba193094a3fd83b9a859298688fa534e72e03069fcab15460229af953d95c","ssdeep":"","tlshash":"3fc09bc458c75910c2533591c03a54377239176191bd5469173df354957711ed15ccee","size":136,"data":"","first_seen":"2025-03-09T12:46:44.850215Z","last_seen":"2026-10-15T08:33:14.052417Z","times_seen":1875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"5e96958c269afaefffc790c2702e0ec2","sha1":"b3c630c4af6e72d1e8222b0a19a8718e91968f00","sha256":"577898cea7a144c1b5a7fbe399421a62854d9734a7b68972782e177571b91ef0","sha512":"291712c178807aa5f997dfd882d03e2e9325f38a47f79c097ef5d8fe066a1874b570d8e52511320cc99980193e74f9e6e8f1f0f135310ffc5612cf6c77076838","ssdeep":"","tlshash":"13c012b918cd1e04c1133883a02a5d76512816b5c17d44641639a37455bb055d519c5d","size":181,"data":"","first_seen":"2025-06-30T12:46:17.17745Z","last_seen":"2026-10-15T08:33:13.975095Z","times_seen":1793,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-10-16T12:23:03.371977Z","times_seen":10140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/en-BBGfNsqI.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"58a0d88f1ca8a126fef176861370790d","sha1":"16cd229c01690934e100b30052f2291f44cba788","sha256":"f9b3adcc61c7e6aba61dbe273abecde4e315074e3f975286748b481e2c37f91c","sha512":"2a031f844d133d8a847f688f4aebf1bc5378ecea296a189c90809311e9ab544ff16babd9c620b5134ea03f15d1fb238b538ab731cbd298a9fc6652878f61c7d3","ssdeep":"192:fhS/O/lSAWWu2WSJ5WlMTkMyUxHnEbutqzYuz9:f8/O4WbWo5WlukMObCq0uZ","tlshash":"a9e1f68f9a5801684bdad757be8fb94b36ad903253001a78398cc1f853757ce96e3f41","size":7348,"data":"","first_seen":"2026-10-08T09:06:18.878547Z","last_seen":"2026-10-16T08:19:09.486637Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,typography,aspect-ratio,line-clamp","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4de4fccd6de75317f836126409cc6af0","sha1":"20b532e33df9657ff5ae882eed2eb5d6b1f1ce9b","sha256":"48a9868d3bdaf51e2498d7eaba08339e239b740606d5566fd366610170a55647","sha512":"0c8c9187458a0ce04d06947a417f26434d6fa2b9478f60649d7add5509dbc5534a85fdf874382d0092214fb3c1edf779b8ac67a81f8c0a88e92229657798b20b","ssdeep":"6144:whg5Cjcfn5vuN/YVy61LL5OjeCteMPLfdBDbTbgkgaFO0s:kg5CjcfkN/YVy61LLCe83nnEeFO0s","tlshash":"94b42ba97356b13647aba1e850af1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","size":511274,"data":"","first_seen":"2025-08-04T04:38:41.903663Z","last_seen":"2026-10-15T08:33:13.603754Z","times_seen":1927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"62eb0af7972e9da272f01d2a8ce9ecf1","sha1":"fcf3f3928b71b79ec158461ae730e61b21a78297","sha256":"f84d67bc6c6156d0129907b8f69433c67fddaa17ba5fb36ce0c212a0eace11eb","sha512":"b0271679fff356edb4a0cdf0435de32bfedcdf0e6bce6b810cfe31aeb35bd9004884587c7230dc4c6f7415cd3734e77b829a4145f535e6e60a7ee3a2be7783e2","ssdeep":"","tlshash":"85c01284188e0e02c25a35a7a0355c36513d1152917de5652629a368957f209d35ee5f","size":188,"data":"","first_seen":"2025-06-30T12:46:17.17217Z","last_seen":"2026-10-15T08:33:14.142004Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"3e0133200b163a76d2de796f1318cc42","sha1":"5f05a3893892388f4aefc7ee7cc43c9c233e4b42","sha256":"df7846a94b04452e44446e90a4245168182a3833b55b11f318846a5a2ecfe592","sha512":"b4acf88a50bda22a4a340bfce02c63dd249aa6a1315d52794facf621d0ff77893d7120a8c531201571c87735530d037ee0d13601147d798df40a31a9b0e08790","ssdeep":"","tlshash":"ecc09bc458ca5901c3173591c036543761381661917d84652a3db354d537116d15cc9e","size":133,"data":"","first_seen":"2023-08-02T16:33:10Z","last_seen":"2026-10-15T08:33:14.186088Z","times_seen":1942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"530d76fe8e687a6163defa4c70f86b8d","sha1":"ddf15885511b771d5206d16b82d56af0bbc8d502","sha256":"91717b2762b8c8b34290f846d1045c100045480faa4b88b9b5f512ecf4535cdf","sha512":"ad5d8d8b0244f491291c16d5fa47ff8f039c51e3e21cd978ddb4699b240ead6462b5fee9f11085c4749d8ab0efb1b2bb922d51b592f0cc63a03c52a4ea1668d6","ssdeep":"","tlshash":"c670002aa30000000080008220808000222802ce22e00088082000a282008082022030","size":20,"data":"","first_seen":"2023-05-25T23:06:34Z","last_seen":"2026-10-15T08:33:13.928378Z","times_seen":2002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/?plugins=forms,typography,aspect-ratio,line-clamp","line_number":68,"column_number":797},{"level":"warn","text":"","filename":"https://cdn.tailwindcss.com/?plugins=forms,typography,aspect-ratio,line-clamp","line_number":1,"column_number":7621},{"level":"warn","text":"warn-As of Tailwind CSS v3.3, the `@tailwindcss/line-clamp` plugin is now included by default.","filename":"https://cdn.tailwindcss.com/?plugins=forms,typography,aspect-ratio,line-clamp","line_number":1,"column_number":7651},{"level":"warn","text":"warn-Remove it from the `plugins` array in your configuration to eliminate this warning.","filename":"https://cdn.tailwindcss.com/?plugins=forms,typography,aspect-ratio,line-clamp","line_number":1,"column_number":7651}]},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-9b80fe.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.809Z","timestamp":1792041390809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-9b80fe.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 45440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"b180-VBwCWQ+uT+/cntb7NKqszNjyR98\"\r\naccept-ranges: bytes\r\nage: 16197\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-etou8220067-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45440,"size_decoded":46148,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45440, version 770.256","md5":"69c6d9224b743bd82635f1942fa49c13","sha1":"541c02590fae4fefdc9ed6fb34aaacccd8f247df","sha256":"8ffce383d7ddb41f6f1b477f56f64ac57a8a0ed1ef0d2aa468fcd8a25ac142b3","sha512":"76ad74b62d48dc680c0565e2d8f288801b3bd77208ec0fe4bfc3471d2569fe2835fda0c3e0bbdec0585db106f86d1f34a8a60b52b983264a68fd37684d432794","ssdeep":"768:Ff6iagEG95D+HnBXJe1a10E0qAPFnMNk1pqjnP8yD2BSLXKxf2dp9jhRvMUlboTQ:N1agEG9xq7e1EP3ITLanEBSpdpnRvMUP","tlshash":"951302475ec813daef1673bd78087748ece582b008be36b5762e6220207bf07dae5424","first_seen":"2023-11-11T10:32:49Z","last_seen":"2026-10-15T08:33:13.263702Z","times_seen":1807,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:34.395Z","timestamp":1792041394395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nContent-Type: text/plain\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 15 Oct 2026 05:16:34 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6ac72b91-271a\"\r\nexpires: Thu, 08 Oct 2026 05:42:00 GMT\r\nlast-modified: Thu, 08 Oct 2026 05:35:13 GMT\r\nx-77-nzt: kwP0iSC+UWgMPrhNK7djj5rKP5D916tElt2/OM361RDEBZrMNmm4udTyTj5xBPZrPnYoOV0\r\nx-77-nzt-ray: fdb54123bd9c153ed761d06ad3edc61a\r\nage: 8\r\nx-77-cache: HIT\r\nx-77-age: 313\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":10010,"size_decoded":2095,"mime_type":"application/json","magic":"JSON text data","md5":"2a108ddc559d2529d181c012dbd29ab8","sha1":"da82cb4b5002efa21916e38ac68de2be921409f7","sha256":"1747c9274e67ddaf3b75ba1d79c87eb4eb9852d02c245620bdf88f15360953ea","sha512":"67cbf18fb0ba64636aa0cbc89237ac2fe6069121210e62095892cd9c88a220208fe1c02202d92336c4f6ffe07c1c9a5479abf357fc2323333c65bd9689700506","ssdeep":"192:8XOyC/mH3fWQQWrVtVQbiTCojMq4s9otKmRtyijnpnPytNtmpDAq/Z/1gm3gey:2DtLlIY","tlshash":"91224752c8780e1b045ce51bd9e413915064cacbdca87e1db359a9af2f5cd3e22be27c","first_seen":"2026-10-08T09:06:18.871499Z","last_seen":"2026-10-16T12:23:03.373434Z","times_seen":148,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":31,"connect":8,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"18.193.50.134","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:34.620Z","timestamp":1792041394620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://xycrestholdings.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: oOlK3VTVwQrcXEduBE0/Eg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 15 Oct 2026 05:16:35 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: xlq0yFuTOV0+CedYA4NwRBvPJE4=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T13:26:26.159158Z","times_seen":19145079,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":0,"dns":359,"connect":378,"send":0,"wait":22,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:29.994Z","timestamp":1792041389994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"ebdaa-akUPtOjTQTVSG99UYNyYhnPTbJg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 8815\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-etou8220122-FRA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 134410\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":966058,"size_decoded":135174,"mime_type":"text/css; charset=utf-8","magic":"troff or preprocessor input, ASCII text","md5":"679c0d8a348cf1196cf35f65fe6aab63","sha1":"6a450fb4e8d34135521bdf5460dc988673d36c98","sha256":"3fe32b4cb0ccfb0e628c814a0729b0d0c122b14feec9cf6e392b85c742e540c2","sha512":"55ba1287440c35312f65ad90a3c2c65314502f94b8393582bc5d9edc57ea8f19bfb6c9dc82f79da9269ec7034f6ac10773743c96bdd0260ec7a66ec72a28cbf7","ssdeep":"3072:FsDfbhWqlpP4lltw1p41SLrnnCmIhUf4uCb9VW01Gopp2NXCudEoX8eXLID7FeF5:ODpszLbqX0DZeFI80nya1VFtih","tlshash":"7b25aba850be3898c35ab1ae1147f610fb3d736e5e4a0d0d91d1edcd69f2e048186bde","first_seen":"2024-08-19T15:58:47.224599Z","last_seen":"2026-10-15T08:33:11.810114Z","times_seen":1832,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":13,"receive":16,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-51b08f.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.794Z","timestamp":1792041390794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-51b08f.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 27240\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6a68-e3jnsqJTDs6C2dA2xdg33/psne0\"\r\naccept-ranges: bytes\r\nage: 22763\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230057-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27240,"size_decoded":27948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27240, version 770.256","md5":"e641bc7cfe65d491a2ea4c7a38a5de99","sha1":"7b78e7b2a2530ece82d9d036c5d837dffa6c9ded","sha256":"88dad7c5c5ee15455411bcd71ff71777b58ff77e46f9a54bf9d16df72b4a4780","sha512":"d6748f108064daf19ff8a5b3473a33240a163886eedd56addcf59754edf19de4c9588316f41350b3e3a5ce09a16749bbc3fc327d3bb648bdbd647b39c2389efe","ssdeep":"768:3AwV597BI2U3DSCxZhzZ8b2MizT5iRm0C4xmDjJ:3AwVhI2020ZhDvURm0uD9","tlshash":"a9c2e1194518d5336beffd9126f5b40a254a90a21095fdc2b0a075e219cfdfc7c4b72c","first_seen":"2023-11-12T10:44:26Z","last_seen":"2026-10-15T08:33:13.665627Z","times_seen":1788,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-50c900.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.807Z","timestamp":1792041390807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-50c900.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 1212\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"4bc-oXyspD/u4ucRbpXi5vvCYBLP4aw\"\r\naccept-ranges: bytes\r\nage: 22225\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230220-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1212,"size_decoded":1918,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 1212, version 770.256","md5":"2c400c85c6e3ff6efc6a00977e63525d","sha1":"a17caca43feee2e7116e95e2e6fbc26012cfe1ac","sha256":"973096ae0d008bcbdd0d0b13bfb8c52de8e1e343c1f5df0b98e84a374026f807","sha512":"26d1cce50b0947ada0732212f0a4e1330a8a3cba93042dde2e21e2690b77bcdb2a33ce059027b3c8dcc1ab77867b36aa3f48c44369206f3b80780ed8957cbf1e","ssdeep":"","tlshash":"0021aa2635f10042fb1752790fa97d72215c84313654ed4b9ec4dacd9e107424409265","first_seen":"2023-09-18T08:20:04Z","last_seen":"2026-10-15T08:33:13.383523Z","times_seen":1867,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.824Z","timestamp":1792041390824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 15 Oct 2026 05:16:34 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa92cf9-4668\"\r\nexpires: Tue, 15 Sep 2026 11:39:16 GMT\r\nlast-modified: Tue, 15 Sep 2026 11:33:13 GMT\r\nx-77-nzt: k+rKz/rtBzKcPRMeuMGFiYpmEA9f1WDs4l8UwGG428Qq/x8qpokrQ2E/NqKDefLX5UxNQxA\r\nx-77-nzt-ray: fdb541235b70a866d761d06acb7d3b0b\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 372\r\nserver: CDN77-Turbo\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 7\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6081,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-10-16T12:23:03.371977Z","times_seen":10140,"resource_available":true,"data":null}},"time_used":3373,"timings":{"blocked":-1,"dns":86,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1554224155-6726b3ff858f?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.011Z","timestamp":1792041390011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1554224155-6726b3ff858f?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 13210\r\nx-imgix-id: ee63d5236dbbbc07e625c0dcbf7c5a186fab4c66\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 30 Sep 2026 22:00:28 GMT\r\nserver: imgix\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nage: 1235762\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220089-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13210,"size_decoded":13821,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9141502ba6b2c7849f85596e52c14676","sha1":"85deadd28cda09d1ad61e642ded9952c4fe1ec17","sha256":"00352144f10cb7d2ab3665c708bdce228d53e3f5e67c4964dd14b44b4cd1e138","sha512":"1691f75c6e68bc8cbe28f314e0fc48b50fb70501ce13a45b742a1bd40f4b6366442d10821e4fe591e5625fdad6b28cbbfc239d6a36b0303d442f2c8e71cc53bf","ssdeep":"384:BYNg7krw2zA/hQ2T3gEjfKqXqUlEuKIE2:BYyxxh/TgEjfKrAEB2","tlshash":"2c52bea4fd29c762da25f6781af10be12587f36cd32e39df3140963153951ec960d28a","first_seen":"2026-09-24T08:36:19.862878Z","last_seen":"2026-10-15T08:33:12.990684Z","times_seen":31,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":68,"dns":0,"connect":8,"send":0,"wait":12,"receive":3,"ssl":249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=forms@0.5.10,typography@0.5.16,aspect-ratio@0.4.2,line-clamp@0.4.4","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.028Z","timestamp":1792041390028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 01:26:56 GMT","end":"Mon, 14 Dec 2026 02:26:52 GMT"},"fingerprint":{"sha1":"9F:51:CE:D4:F2:B0:10:F2:F7:93:4C:8E:D7:DE:E9:98:70:80:05:50","sha256":"3E:11:51:86:79:CA:16:63:3A:BF:56:65:21:CF:13:E8:B7:F0:FC:D8:38:1A:6C:3F:28:A4:05:3E:43:1B:CF:28"}}},"request":{"raw":"GET /3.4.17?plugins=forms@0.5.10,typography@0.5.16,aspect-ratio@0.4.2,line-clamp@0.4.4 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::v6jsq-1786430752600-e3963998701a\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 5610636\r\nlast-modified: Wed, 26 Aug 2026 02:22:40 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SVCVmUETRMeSDiEVm7FQqQzMS41LdYR3a6x5%2FtG2g82Pg2sVx8%2FaP4W9i%2BA6rURvC614RIRusL68Hm0O14xrLH2spov9ryfhlK44Dv2%2BgjHodFLkZL8J0Bntxn4Nre2vyFJoU4c%3D\"}]}\r\ncf-ray: a4ac5a1fadf00b45-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":511274,"size_decoded":146648,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52873)","md5":"4de4fccd6de75317f836126409cc6af0","sha1":"20b532e33df9657ff5ae882eed2eb5d6b1f1ce9b","sha256":"48a9868d3bdaf51e2498d7eaba08339e239b740606d5566fd366610170a55647","sha512":"0c8c9187458a0ce04d06947a417f26434d6fa2b9478f60649d7add5509dbc5534a85fdf874382d0092214fb3c1edf779b8ac67a81f8c0a88e92229657798b20b","ssdeep":"6144:whg5Cjcfn5vuN/YVy61LL5OjeCteMPLfdBDbTbgkgaFO0s:kg5CjcfkN/YVy61LLCe83nnEeFO0s","tlshash":"94b42ba97356b13647aba1e850af1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","first_seen":"2025-08-04T04:38:41.903663Z","last_seen":"2026-10-15T08:33:13.603754Z","times_seen":1927,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1507003211169-0a1dd7228f2d?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.013Z","timestamp":1792041390013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1507003211169-0a1dd7228f2d?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 14931\r\nx-imgix-id: 33a524d021d8b773aedc6e05ff7b4eb5af0e7f1a\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 25 Sep 2026 05:46:09 GMT\r\nserver: imgix\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nage: 1726222\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230048-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14931,"size_decoded":15542,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"883fa96a1248a8ad5952c66015597cb4","sha1":"f391826692de865c0a233421df19307af24a06bb","sha256":"65582212ace88c1e210b1c370464978ee9622abaa26f2ea4af29bed8ee93a951","sha512":"4a8cdb6661f02dbc3c5fb3129044ffb6156d9321056d8febf0bdaf1672546b2a3791b440d66ca10986cbf34f3653674dd7aab152a7a7924a773d7d006fd028d6","ssdeep":"384:fYNg7kNq0ify5N72T58taQ/MXay5nXr5Ij6:fYyTTi258tT/25d","tlshash":"9362c12c5feb4462dd69ab3688a41fc47b53df19c927365da40aac0517440c0a7df1fa","first_seen":"2026-09-28T09:59:13.085972Z","last_seen":"2026-10-15T08:33:13.196283Z","times_seen":11,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":67,"dns":0,"connect":10,"send":0,"wait":9,"receive":1,"ssl":247},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-d5bbe9.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.791Z","timestamp":1792041390791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-d5bbe9.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 24172\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"5e6c-IcQovbDCGxWdqqWv6de9WCcS4Ds\"\r\naccept-ranges: bytes\r\nage: 23941\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230225-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24172,"size_decoded":24880,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24172, version 770.256","md5":"435a4fd590eb82d976b39224488e057a","sha1":"21c428bdb0c21b159daaa5afe9d7bd582712e03b","sha256":"8caf1dba6cbd53db7046e5560555f239e7bb255481e80f2f856d30d760f98dad","sha512":"7b826041fe2a088f8b42bf0483f5b6216296dafa10be7debb616904c9b1560fe1714c3343e40cf1a6dea508a3405d2d84e0c0326e2cb8138ea6bf82ffddcfe07","ssdeep":"384:ugYQ5tv1PGJcRfKeXVxqXZkszz85oTGXrwOUFjEUdC8/Q1g29m88CqDIrpr5cpyC:HYQ5V1OkieXVGZbzt6XMOUxEUQL5m8rY","tlshash":"b3b2e179d2c7b32688690160bd526412bad5b28f04850f5ed4786c93ffd63c2a3225ef","first_seen":"2023-05-17T05:19:34Z","last_seen":"2026-10-15T08:33:13.649173Z","times_seen":1912,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-f6b769.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.810Z","timestamp":1792041390810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-f6b769.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 18440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"4808-UUmkbwEg6vmftEP3J3tN6RQEdl4\"\r\naccept-ranges: bytes\r\nage: 13544\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230224-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18440,"size_decoded":19148,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18440, version 770.256","md5":"66983ee6e13d0f4ee9de3df33c6e7c0c","sha1":"5149a46f0120eaf99fb443f7277b4de91404765e","sha256":"8ad3dbb62196226b6214d8843acda08008cf431585dbfad30908e96dc05f47d1","sha512":"4d10a641b66b4b89b204c296c67037d10f3baaf3e057d8d48717f0b4a1371a294d38d2577c5033b7c03e1d93052654cf98bd2341cc1d396d08111f87ef05b7d4","ssdeep":"384:Qi2nfjh3iDKMxBxJAj49xV50nGLztcQ+MwGJwckamebkr9TCALs:Qis0KMjxKsTLztOMbJwH8byTjA","tlshash":"4782d0ef6f03b461cea0b5bc41443bec4f222a80db59bbb458cdd851579a405a32e903","first_seen":"2023-09-18T08:20:04Z","last_seen":"2026-10-15T08:33:13.28Z","times_seen":1854,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-90d968.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.812Z","timestamp":1792041390812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-brands-400-90d968.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 43440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"a9b0-n1CRkhNyXmK78iuFVzStLVUB2kU\"\r\naccept-ranges: bytes\r\nage: 28215\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-etou8220164-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43440,"size_decoded":44148,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43440, version 770.256","md5":"f768f9521e641100dbb7400b46d4aa8c","sha1":"9f50919213725e62bbf22b855734ad2d5501da45","sha256":"d4929f4afa91d468ab332ef629d7d5027495755ab17b415168f233cd203fe01b","sha512":"51a6c9d2a84fe5194ee7642ed97fefc7aeb0bdd055cba73f241e7eb2c3c4488f0afd28fba09885a5ee280a9773a743f0bc1e72310897554329da30c9b5bb5ef0","ssdeep":"768:9YpFF8WEE3j9oIra5zYfCdz/gdGSN9ybkjJCywqUfcP6ahXIfuDF9D2npsjkIKt5:+FIE1raaqdzkGYYqgcyahXUsjhcWuKIP","tlshash":"a013e1315f848a74567b5a22334653e8973e602712c8f2289ec3aef54780cf86d7e687","first_seen":"2023-11-11T10:32:49Z","last_seen":"2026-10-15T08:33:12.378446Z","times_seen":1771,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-03c840.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.813Z","timestamp":1792041390813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-03c840.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 26340\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"66e4-UYvk5KSqM6LjhCtzQQkG90/QpGY\"\r\naccept-ranges: bytes\r\nage: 13839\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230022-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26340,"size_decoded":27048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26340, version 770.256","md5":"5a5602fe5bdfff54ce95f1681d935255","sha1":"518be4e4a4aa33a2e3842b73410906f74fd0a466","sha256":"e567f8a857cb3871c7f2a1c00ae73d85bedea2a79cdac80fba9562b88b0c577a","sha512":"ee79ca8cd5f8d2a0bc5cc7c20c1eba0023e2921c141017173c326648eb5948becdb99cdf2f8b18215a1f44048b4c51954088d6babfc10a66d9fb8757eb792ac9","ssdeep":"384:27e+fooKtSIQV8nJZ5ubh8Vw16Yczh7eVAC48mja75Vvc1e64/7iqkUzxpgxK:21XAWSnAS216YRVLNsatJc3mrVN","tlshash":"28c2f1c6b7c20e45454d479f73a8113efef9fd93a663538a880654c19a9ccaac712f0d","first_seen":"2023-07-23T08:27:43Z","last_seen":"2026-10-15T08:33:13.482218Z","times_seen":1827,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-G-JVW261.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:34.475Z","timestamp":1792041394475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-G-JVW261.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 15 Oct 2026 05:16:34 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6ac72b91-3e9c\"\r\nexpires: Fri, 08 Oct 2027 05:36:46 GMT\r\nlast-modified: Thu, 08 Oct 2026 05:35:13 GMT\r\nx-77-nzt: k23t22ehsvvbxSWhNDuOU7WpgvqPYQ0J+TBAAtX6KdEQzj1hvhpSSoNvKc8qkEveoVi1DZI\r\nx-77-nzt-ray: fdb54123bd9c153ed761d06aa4f1311c\r\nage: 603588\r\nx-77-cache: HIT\r\nx-77-age: 603533\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16028,"size_decoded":6796,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15620)","md5":"91b12d1531b985e7f2fdc1ee62d7926c","sha1":"23bf8b78c320cbe5f4863c2bec6640814e3f0d40","sha256":"c9cec49321acc57bbb2f75e3d71e8f977740a07b7916bb5a4deb898e0c84ca1f","sha512":"424ceefd1321e2ffdc5accbb5da7afea7a98b4e3f9b56aa07424306adb52aabfa9157c00c8ac01466e54fd722e5fc8942c58bb5544bbb4e28d5ccab269c28018","ssdeep":"384:ONIFT88tMPdBgaw5O+mvRan7/DKsDoKkwA3Q+crsbUzgfTtQfQIeIw:ONIFX+dBgaw5O+aanr9oKxA3Q+cwbUwb","tlshash":"a072e8741210783f712f6c492a6df497723ad298e997c5289a2fdd5c36c8cc0a873bb5","first_seen":"2026-10-08T09:06:18.852229Z","last_seen":"2026-10-16T12:23:03.394665Z","times_seen":152,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/en-BBGfNsqI.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:34.596Z","timestamp":1792041394596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/en-BBGfNsqI.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://widget-v3.smartsuppcdn.com/assets/shared-_WWe_iud.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 15 Oct 2026 05:16:34 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6ac72b91-1cb4\"\r\nexpires: Fri, 08 Oct 2027 05:37:00 GMT\r\nlast-modified: Thu, 08 Oct 2026 05:35:13 GMT\r\nx-77-nzt: k4C0DU5MmHCzCmNq9veXUumeMqBS3mTV/dswimv4ipvGZjTDSnExvElm8EWkiyw0XsWvbCo\r\nx-77-nzt-ray: fdb54123bd9c153ed761d06a7fb07b23\r\nage: 603574\r\nx-77-cache: HIT\r\nx-77-age: 603455\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7348,"size_decoded":3510,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (3592)","md5":"58a0d88f1ca8a126fef176861370790d","sha1":"16cd229c01690934e100b30052f2291f44cba788","sha256":"f9b3adcc61c7e6aba61dbe273abecde4e315074e3f975286748b481e2c37f91c","sha512":"2a031f844d133d8a847f688f4aebf1bc5378ecea296a189c90809311e9ab544ff16babd9c620b5134ea03f15d1fb238b538ab731cbd298a9fc6652878f61c7d3","ssdeep":"192:fhS/O/lSAWWu2WSJ5WlMTkMyUxHnEbutqzYuz9:f8/O4WbWo5WlukMObCq0uZ","tlshash":"a9e1f68f9a5801684bdad757be8fb94b36ad903253001a78398cc1f853757ce96e3f41","first_seen":"2026-10-08T09:06:18.878547Z","last_seen":"2026-10-16T08:19:09.486637Z","times_seen":136,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-1e5361.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.796Z","timestamp":1792041390796,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-1e5361.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 26072\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"65d8-bNnYACO8MD6tZe6nOJGBDdQnQpY\"\r\naccept-ranges: bytes\r\nage: 908\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230186-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26072,"size_decoded":26778,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26072, version 770.256","md5":"de1fb9513aedcbb6321e4f148bb6b1c5","sha1":"6cd9d80023bc303ead65eea73891810dd4274296","sha256":"b1e0586a5e9a737b2a97b328305d1a8c0e5f4d1b37f88fd6fe2daf8bb530ef29","sha512":"c5d68fc0707815f98b06d4bda823b13ac7bf6ccc0922187cb7d737090112f8bfa2a471b1fea0cf6ece611a2993febc0df1e60e581105816d6da2d5cee0489ebc","ssdeep":"384:UtMu5PfVAE6D4jm60miR+KunuzKvKkdku7nF6zgJwUhuPvn02d0by23va1Iq9:tuZ0mpngyku7noMJwUhun02Sby2/I9","tlshash":"0ac2e0e51e51259beafe118b236045c16f66305ba32c4fdaf8cce51bfd125d4808bd87","first_seen":"2023-11-12T10:44:26Z","last_seen":"2026-10-15T08:33:13.115836Z","times_seen":1773,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-6d2a10.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.803Z","timestamp":1792041390803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-6d2a10.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 27140\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6a04-mXluGnhdRVmhYbS6OXfOqLSD/M8\"\r\naccept-ranges: bytes\r\nage: 36847\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230102-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27140,"size_decoded":27848,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27140, version 770.256","md5":"13521f5a2b3e46b05fda2160ed605726","sha1":"99796e1a785d4559a161b4ba3977cea8b483fccf","sha256":"ba8612612f7dbda223e6f36a1a04466cf4977a3a709bdba3d6238fcadbee508c","sha512":"24f605f9065dfef286677cabf92087c406bc56fc53662478e7304dab068e153635017fa88efe97e2218f09088e7dddea5b42ef6f6cf5e3eb00105df50f24fc88","ssdeep":"768:8iIkJET/AharmX4pi/7UO25kkgsSVJ2Fr2O:8ihET/AharA4pijUOhkgdyr2O","tlshash":"b5c2f18c16c4464df58b75fd6a4717c3e94da2938037b3a7a8412dc93d21c23a8ecd7a","first_seen":"2023-09-18T08:20:05Z","last_seen":"2026-10-15T08:33:12.336764Z","times_seen":1744,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/storage/app/public/photos/pc2rihBR1xJ4fJ36o9chG1kcEqSQTrDZhV9c1Jxt.png","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:31.012Z","timestamp":1792041391012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.cbworldwide-legal.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 14:35:23 GMT","end":"Sat, 12 Dec 2026 14:35:22 GMT"},"fingerprint":{"sha1":"3B:59:39:3A:7D:24:C6:53:B2:1D:ED:9D:DE:5D:AB:BE:C7:B5:EB:89","sha256":"35:1D:27:72:58:8C:3F:07:E6:FE:1E:F8:5F:09:97:CC:8B:2A:6E:0F:0C:91:6B:86:79:C6:42:C2:B8:72:F3:F2"}}},"request":{"raw":"GET /storage/app/public/photos/pc2rihBR1xJ4fJ36o9chG1kcEqSQTrDZhV9c1Jxt.png HTTP/1.1\r\nHost: xycrestholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D; xycrestholdings_session=eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D"},{"name":"xycrestholdings_session","value":"eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 14 Nov 2026 05:16:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 13 Sep 2026 21:17:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 284018\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":284018,"size_decoded":284412,"mime_type":"image/png","magic":"PNG image data, 524 x 476, 8-bit/color RGBA, non-interlaced","md5":"9496b7c61e1efc89e25690bc3fea8225","sha1":"0d7ee7149e1d6dfdcf8265d1d19100c1bc894b76","sha256":"ae3a5c8b9ab644d3e86da9af531a87c27d2daa54df6866d22a412e1082c1e3f9","sha512":"f50f88f9edf7a4b93e6930ac814e9fad33adb2e31ecd10267fa3028301f78dd99ab2d86cbfd1a6cf82be7872631f183997dd3a3d13d5b28c9d63c19973816e8d","ssdeep":"6144:8UV3KubX4Ho6csJzi5zYHNJaFg0VJgzU6S0vgY+BFW9ZZufCO:X3K8X4H3bm1WYgyJgg6SYIk9mfv","tlshash":"5d5423ebbe20c553c9b2bd370232b5774432a9136b968e1341cb293ad6f79419e07f94","first_seen":"2026-10-15T05:05:00.515203Z","last_seen":"2026-10-15T05:22:38.357664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"xycrestholdings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xycrestholdings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/e6fa886fc6b18c2016afd6d2eb32b09f4ac363be.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.159.126.105","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:34.262Z","timestamp":1792041394262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/e6fa886fc6b18c2016afd6d2eb32b09f4ac363be.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nContent-Type: text/plain\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 15 Oct 2026 05:16:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c7-B/6NfaaDpZne/g/uc5qfSnm44ZA\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1223,"size_decoded":879,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1623b3b9e850c9c1491c70aef8d248c2","sha1":"07fe8d7da683a599defe0fee739a9f4a79b8e190","sha256":"b5b4d35c58c664f860fdab342e28e4f7337c31f56e8da3582e65972af84deb9e","sha512":"bcfb7323cde3f50f57c38880ba4f962f1f35f106a93074f2f3da73256fe2b54698c6065b11f1bc93d6f74811f6d2543fc6f5aa7afea2e5df1ff45b4f25fcc6d2","ssdeep":"","tlshash":"5321766d4a6822fd5245c7d6c5047a036bacdcb371003e7eea0d0a0e70db2e6223646b","first_seen":"2026-06-06T06:44:39.646667Z","last_seen":"2026-10-16T08:19:09.470737Z","times_seen":2922,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":13,"connect":22,"send":0,"wait":25,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-15T05:16:29.303Z","timestamp":1792041389303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.cbworldwide-legal.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 14:35:23 GMT","end":"Sat, 12 Dec 2026 14:35:22 GMT"},"fingerprint":{"sha1":"3B:59:39:3A:7D:24:C6:53:B2:1D:ED:9D:DE:5D:AB:BE:C7:B5:EB:89","sha256":"35:1D:27:72:58:8C:3F:07:E6:FE:1E:F8:5F:09:97:CC:8B:2A:6E:0F:0C:91:6B:86:79:C6:42:C2:B8:72:F3:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xycrestholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D; expires=Wed, 06-Jan-2027 13:16:28 GMT; Max-Age=7200000; path=/; samesite=lax; secure\nxycrestholdings_session=eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D; expires=Wed, 06-Jan-2027 13:16:28 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 17490\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 15 Oct 2026 05:16:28 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2027-01-06T13:16:28Z","raw_expires":"Wed, 06-Jan-2027 13:16:28 GMT","max_age":7200000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D; expires=Wed, 06-Jan-2027 13:16:28 GMT; Max-Age=7200000; path=/; samesite=lax; secure"},{"name":"xycrestholdings_session","value":"eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2027-01-06T13:16:28Z","raw_expires":"Wed, 06-Jan-2027 13:16:28 GMT","max_age":7200000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"xycrestholdings_session=eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D; expires=Wed, 06-Jan-2027 13:16:28 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":113113,"size_decoded":18823,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (413), with CRLF, LF line terminators","md5":"a2e5f4e525ff3b8121cf0d8b5eddde24","sha1":"cfa32b7163d8c6375c2f20d16059fb26256e823b","sha256":"fa6354e655da99838f9c894666ae3fa7777a4e88900bfb84881b3cb92763ef24","sha512":"5acff5aeb77f4cd229e5bf48b21abd470e2fe6e77e340cd8cbf15483a2ac4563a94a6a4f7d636d5167c560893e170b139dd90d3c35cede5444db4a22b4243a91","ssdeep":"1536:kfcoJNi9jWoJ0p3gDVHnhJVIm/iE4AVUfxmAkT:o6WJKcfxmAu","tlshash":"64b3873c22e1123550d7c2b2e6e49f29dd69cb57db17ed8ab29c86831fa7c058f53260","first_seen":"2026-10-15T05:22:38.366495Z","last_seen":"2026-10-15T05:22:38.366495Z","times_seen":1,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":4,"connect":20,"send":0,"wait":186,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"xycrestholdings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xycrestholdings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:29.997Z","timestamp":1792041389997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 15 Oct 2026 05:16:30 GMT\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1525,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f90607e2f92a8d6a64d2f172e17d6e1d","sha1":"85fc70bdf19c644f63c90692674bf2749ce74d3a","sha256":"cc591d4eb4d2a8591c86b2b867e5296d6da025718d1d06db89e6c74b55c1104b","sha512":"1ab6f0992b860b4edaae68a6cd22c3de76122d9a08cb8b936f1eab29fa85b3b9d22eed6f9904ad09a02c394d8cae87bffb592c60b157253f1ca1b5ef92d4c7db","ssdeep":"192:9NNIxO34OxvENOPCO3/NxoNNryfO3iExBONEhYO3RrxSfNx0NO3kCx7YNCbOO3Ly:vXyMopi+s7KQ2","tlshash":"41627792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2026-10-05T19:26:58.215954Z","last_seen":"2026-10-16T13:07:14.578995Z","times_seen":220,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":42,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-3523ab.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.789Z","timestamp":1792041390789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-3523ab.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 26948\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6944-jz/5EME1ZTBALG5sMkF26WUGYyo\"\r\naccept-ranges: bytes\r\nage: 22213\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230215-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26948,"size_decoded":27656,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26948, version 770.256","md5":"62ae04e01f929844af244c14318f9245","sha1":"8f3ff910c1356530402c6e6c324176e96506632a","sha256":"99e1c2ffcd21cbef5c62ee7e5a88e86a23c95d6faa7cc9e3569b5dd2ed82bae5","sha512":"07496ec9a91deed32d0ae8f16dc13dea50f73164bbfb22d9b9e2aae56405908366d1f5ef5bfa27c5d0bac2b5d835e0e05c775c36181b36ba8b96defe9a48409a","ssdeep":"384:x7VW4MAQctcX1/ql2cMcnn9OAo9rnU0ANRqNkx0IF5PYstaMxwAndyLagsvl:x7VrML1Cl2c5nAAoUfRqo0CPMSFnYp4","tlshash":"b7c2f139f5a713209f8008a72278d34209d273cef41606e9e9fda9ef991e958c572c6c","first_seen":"2023-11-12T10:44:26Z","last_seen":"2026-10-15T08:33:12.926862Z","times_seen":1831,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-b4a9ce.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.798Z","timestamp":1792041390798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-b4a9ce.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 27232\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6a60-z1IVIrKbHuW+8NbsfeN6A7L4oi0\"\r\naccept-ranges: bytes\r\nage: 16194\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-etou8220142-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27232,"size_decoded":27940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27232, version 770.256","md5":"cbdff72e5d0487b36c7c47f09ea2ef28","sha1":"cf521522b29b1ee5bef0d6ec7de37a03b2f8a22d","sha256":"246c899ffd4360235af942b261e2671563f2f9ec6c2708a8fb56a5364245a57d","sha512":"3228e87115c554729550af7ed902bf759e5feb9d0cab8ec324aa426c02e3ee64c5c924bfc1f0d38dffa205ca4846afe39b2397022e606a1aeb307d8d868b5413","ssdeep":"768:0iO04O+mQEW5w4sEcglXT+wehNBtSdDwSEw:/OeiE4Xcg5+wONBBSh","tlshash":"12c2f164d3d1d8e3e3e94770956850d5002a1eff83faf126e54d09106a09ee77aaa192","first_seen":"2023-05-17T05:19:34Z","last_seen":"2026-10-15T08:33:12.903308Z","times_seen":1992,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CoaqmBWZ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:34.478Z","timestamp":1792041394478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CoaqmBWZ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 15 Oct 2026 05:16:34 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-8d76\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k3XnQa937bsuKD/ucsVu2LHzoMQMotyOnUcKBnpz2og3XZDkv3gC4UzWBXLD6qeZDJutxj4\r\nx-77-nzt-ray: fdb54123bd9c153ed761d06a1d13631c\r\nage: 2579775\r\nx-77-cache: HIT\r\nx-77-age: 2579775\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36214,"size_decoded":8258,"mime_type":"text/css","magic":"ASCII text, with very long lines (36201)","md5":"d67581c9b3003d85736b4a54c38a6f38","sha1":"0ada53753b0d87201b854a692e2bafd682b99811","sha256":"f849d090665d31e2c158996956b91a47ca60d0beb614a0ee17b25d3172636a86","sha512":"f7d871280eac56430f11bdeea780dd2d1681bea7347a9ef71f8977455147ac51a86ab59e2d5b9379677debd38ea37f726fd75207f250eeb57cd3013e70710c3f","ssdeep":"384:F8fY2l09kg7Tc6/WYtGLadKzSVX8Kj6+iZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM09kgTcCWYtG4XicrNSN56DwQ43","tlshash":"06f2966daad9093dac23c179e3f8e58c911af5e5df3226daf74239008ac17ff0986514","first_seen":"2026-09-15T08:49:00.636328Z","last_seen":"2026-10-16T12:23:03.364369Z","times_seen":648,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-ca12ba.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.795Z","timestamp":1792041390795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-ca12ba.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 28692\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"7014-w+zU/QyRKfuJKxX55Qw5Y5rT45g\"\r\naccept-ranges: bytes\r\nage: 38769\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230127-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28692,"size_decoded":29400,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28692, version 770.256","md5":"f26a2ee466e8dc9a7648edff4f806a80","sha1":"c3ecd4fd0c9129fb892b15f9e50c39639ad3e398","sha256":"609ddde20d5061b1d72e72b510a96fddae68a66f7310fc8dde8538068252bee1","sha512":"04701e0aadc299aa3f1a2cf7f98142df0382724d4e40304552c4664652d8f5582778532fb859deafc0f077dcc52c8fd26be1d9c388a95141ad9f178f59bed0d7","ssdeep":"768:HcMQAT61dcVgHpboFLHiJjAbLS+q6zpE8klG:8MyAVGpC8cU6WFG","tlshash":"acd2e1a8f9901331ff9615b0fdcb8069cac71cb57d7685f842fa6ece49c1a2c6da4106","first_seen":"2023-11-12T10:44:26Z","last_seen":"2026-10-15T08:33:13.017469Z","times_seen":1770,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=forms,typography,aspect-ratio,line-clamp","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:29.962Z","timestamp":1792041389962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Sep 2026 01:26:56 GMT","end":"Mon, 14 Dec 2026 02:26:52 GMT"},"fingerprint":{"sha1":"9F:51:CE:D4:F2:B0:10:F2:F7:93:4C:8E:D7:DE:E9:98:70:80:05:50","sha256":"3E:11:51:86:79:CA:16:63:3A:BF:56:65:21:CF:13:E8:B7:F0:FC:D8:38:1A:6C:3F:28:A4:05:3E:43:1B:CF:28"}}},"request":{"raw":"GET /?plugins=forms,typography,aspect-ratio,line-clamp HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Thu, 15 Oct 2026 05:16:29 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=forms@0.5.10,typography@0.5.16,aspect-ratio@0.4.2,line-clamp@0.4.4\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::br7fr-1792040722922-0b8141f1d702\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 666\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=chrzkvblLi9TIBXjisc0UjHto%2F6mVotKM6YsQ%2F7OTXx0NPB7UXckjCRinVtskrEGTAkyLgVdSrfTmYI3qJTNqRKK8p2Zvx87Wy42Bv9%2BMXTxO1WPrWHiJKgrwS0J5c2xmIIxq7E%3D\"}]}\r\ncf-ray: a4ac5a1f5dbb0b45-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T13:26:26.159158Z","times_seen":19145079,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":11,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/images/home/metro.jpg","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.007Z","timestamp":1792041390007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.cbworldwide-legal.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 14:35:23 GMT","end":"Sat, 12 Dec 2026 14:35:22 GMT"},"fingerprint":{"sha1":"3B:59:39:3A:7D:24:C6:53:B2:1D:ED:9D:DE:5D:AB:BE:C7:B5:EB:89","sha256":"35:1D:27:72:58:8C:3F:07:E6:FE:1E:F8:5F:09:97:CC:8B:2A:6E:0F:0C:91:6B:86:79:C6:42:C2:B8:72:F3:F2"}}},"request":{"raw":"GET /images/home/metro.jpg HTTP/1.1\r\nHost: xycrestholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D; xycrestholdings_session=eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D"},{"name":"xycrestholdings_session","value":"eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 14 Nov 2026 05:16:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Jul 2025 22:57:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110812\r\ndate: Thu, 15 Oct 2026 05:16:29 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":110812,"size_decoded":111207,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=800, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1600], progressive, precision 8, 1600x800, components 3","md5":"06427eda3d89ade05e3edec0186bd922","sha1":"3a2a15c3e788573849c4c1e1025c61556d178c4e","sha256":"a36aa5e4deb7a3cfe317b655d71dbb9be49cc9eaaef23873bcfd26e6f0e635e3","sha512":"6095660772f288f4e2472871dc1b6eb49b259caee0b2be6846a89d0dfbb39e5263e354010ca27afdd4781aa5e51641723e33565a660bdb64b642f01c5c9709aa","ssdeep":"1536:37O77kXrrK+mqtsVe+4PaFZopjDkt2dLKvGra4Q7eHhtg6hhLf:3ScXrrK+fQe3PaToxmmKOraheHhttnD","tlshash":"19b30231ebb48e13f9d0d07284b3db439ab1a66917b7cf82319c94713ba85d14d2936b","first_seen":"2023-11-12T03:48:53Z","last_seen":"2026-10-15T08:33:13.577439Z","times_seen":2694,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"xycrestholdings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xycrestholdings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/images/home/feature.jpg","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.010Z","timestamp":1792041390010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.cbworldwide-legal.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 14:35:23 GMT","end":"Sat, 12 Dec 2026 14:35:22 GMT"},"fingerprint":{"sha1":"3B:59:39:3A:7D:24:C6:53:B2:1D:ED:9D:DE:5D:AB:BE:C7:B5:EB:89","sha256":"35:1D:27:72:58:8C:3F:07:E6:FE:1E:F8:5F:09:97:CC:8B:2A:6E:0F:0C:91:6B:86:79:C6:42:C2:B8:72:F3:F2"}}},"request":{"raw":"GET /images/home/feature.jpg HTTP/1.1\r\nHost: xycrestholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D; xycrestholdings_session=eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D"},{"name":"xycrestholdings_session","value":"eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 14 Nov 2026 05:16:29 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 29 Jul 2025 22:57:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 166256\r\ndate: Thu, 15 Oct 2026 05:16:29 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":166256,"size_decoded":166651,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1000x600, components 3","md5":"d8baf10f6a1bdc5762eedc1ed28fc73d","sha1":"6f9b262e75fad4076db0cdd9da6b7bd65c241bed","sha256":"dbede3778e4219f02405cfdc2159e993728a59d543424f29347b67ae2b070f7c","sha512":"88189fddb53ef68d2f1fdd56e4927990679c431f381ae8a045c837441ab5a81e2199e95ffb9a90e94f34a80440ab9d80ac2a94c2c38a570072ed3c5ee2787521","ssdeep":"3072:4HVGwsN1ZN/pJ+EF0VY2wpyq9MkmzlzmuPtBaWwwI2SBwrzck:47IZN/n+twpXm19YVq6wrzv","tlshash":"2df31395a19120c7fd8e293ab0eacf37ed064822de495b918109edd715c0fe3396a47e","first_seen":"2023-11-12T03:48:53Z","last_seen":"2026-10-15T08:33:13.803915Z","times_seen":2895,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"xycrestholdings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xycrestholdings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1559526324-4b87b5e36e44?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.020Z","timestamp":1792041390020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1559526324-4b87b5e36e44?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 16093\r\nx-imgix-id: 3bf02058323625747cf2f4c1c1460233afe6ec8b\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 30 Sep 2026 12:07:58 GMT\r\nserver: imgix\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nage: 1271311\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230073-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16093,"size_decoded":16704,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e9840f9a3b9f85ab684ed2c49b18375e","sha1":"9edf159e238746e0591c77d1403fae580ac185a1","sha256":"3023f087f09b3fb596d8d93fb6609815dae9dd699c4aabf6ec0e9c552baa8f3c","sha512":"67f5c087eac8051466c8b7cf3bfeada4c1e4182df9060371309c1e15f2b2716ed984628c06bfb67e2ce09fc50c09b400100794f0e6db982cfdc6796e019e582c","ssdeep":"384:NYNg7kJxdfN+xmXtTxldN6T87pFFwVqwSL:NYymxd7DLNR7PysbL","tlshash":"8e72c074ff23aaa2ee2abeb41c640b6d1143708fe36172d32479f7361153ddd4a85089","first_seen":"2026-09-30T23:18:57.723264Z","last_seen":"2026-10-15T08:33:13.306051Z","times_seen":48,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":67,"dns":0,"connect":9,"send":0,"wait":10,"receive":5,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/alpinejs@3.x.x/dist/cdn.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:29.989Z","timestamp":1792041389989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/alpinejs@3.x.x/dist/cdn.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.17.4\r\nx-jsd-version-type: version\r\netag: W/\"da53-iDkE/dZlOehJXU+iPYil888Yt2M\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nage: 21094\r\nx-served-by: cache-fra-etou8220091-FRA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 20458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55891,"size_decoded":21235,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49101)","md5":"37bbf94201a78634b2780338ce1ba9d9","sha1":"883904fdd66539e8495d4fa23d88a5f3cf18b763","sha256":"232519394c6c8fdba6f362b1d9da16106db513cdbf899011f00daab4051df31c","sha512":"d2e88834617d3321d7f7c6d75b6d0a4f5ebfddd5a78eb4767de921f6229870da6e0179600083e8201dadec71b8c9496e9075fea2a77a99ec2557ae45cdda94f7","ssdeep":"1536:xHuOum1sTXNJebFteZza29c6TXo9pSr+COJS1Ec6:9Vx1cXNJebFQd19c6TXxhL1Ec6","tlshash":"a4430ae973daf07283ef11b650bb4646f37d2894140e4428f669e8da342948951f3fbe","first_seen":"2026-09-22T06:37:22.347072Z","last_seen":"2026-10-16T04:03:40.354508Z","times_seen":447,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-bc0b04.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.801Z","timestamp":1792041390801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-bc0b04.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 26656\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6820-SMFvkM58uR2+ABgGO0a80wOsEHA\"\r\naccept-ranges: bytes\r\nage: 36628\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-etou8220100-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26656,"size_decoded":27364,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26656, version 770.256","md5":"bddd68550c2403bf538971f8d2e790d2","sha1":"48c16f90ce7cb91dbe0018063b46bcd303ac1070","sha256":"7b28a4ebab92341a419dc2c940cbb6b95201f16b1d003b105609c5fae2aa3d5d","sha512":"e767fc34f01ef88b700960c4b1e61854bba8dfeb7bd97ace276d482b8defbbd2ea688a90eb269902903774d76434f36bedf396055357f0f36f01b0d69948c8f2","ssdeep":"384:AkE8BKRW4y++gMXqD+DCqeKxJ/Bift98A1HXq7JLPJwNgDOb5/8Q6/wfOnS:1E8QAqD+DCqeKc83DPDg5/8Q6YWS","tlshash":"08c2e221a8353b2b05f7a10a6b535b1af4c6cd3c658e56f141e90b544bbc31b2f2bb86","first_seen":"2025-03-27T02:53:39.606681Z","last_seen":"2026-10-15T08:33:12.26745Z","times_seen":1765,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-ec38a0.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.804Z","timestamp":1792041390804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-ec38a0.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 27932\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6d1c-NwTo5bWi9RY9OQ9mFxZBWa1S6mQ\"\r\naccept-ranges: bytes\r\nage: 12381\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230224-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27932,"size_decoded":28640,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27932, version 770.256","md5":"7daa7b5691db2523c5103fc5eb793811","sha1":"3704e8e5b5a2f5163d390f6617164159ad52ea64","sha256":"ddcba12747e062e2f09ee1d0172eb0ba75145d0b9688e5a7033798f56b7e299c","sha512":"af6979e0fbfbd32867dd91b852732531945b18db60b99f5784dbfdd8b8d42b79031b66d511842821d2a7f89ebcf05ef02be5801a988206467812f15034b3d645","ssdeep":"768:Dl8U4uqa8B5xynz0bqA2epM/wLnFte1qOlqwErHh93ahkm7PX:DqU4bPxynz0bqA64zF8O9CLX","tlshash":"55c2e17f503a9ea182bf9134bbe1f3ef87688c782f36d9d978d5c82451011053d98c56","first_seen":"2023-11-12T10:44:26Z","last_seen":"2026-10-15T08:33:13.719528Z","times_seen":1732,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-292b12.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.806Z","timestamp":1792041390806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-292b12.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 27012\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6984-noFCP+a2+PAIj9LpBWmp8ClBXek\"\r\naccept-ranges: bytes\r\nage: 42553\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-etou8220155-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27012,"size_decoded":27720,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27012, version 770.256","md5":"a0a448499e4f778eac4eaf824ea8e316","sha1":"9e81423fe6b6f8f0088fd2e90569a9f029415de9","sha256":"1c354369e2dbd57644b4af2b9d038bf7fdfc6fff28de882f18482dd4763772f4","sha512":"1191ef7e4246c6d3f8d72f58040f8c515d68876afeca2bbb7c0e02cb342cace24e439baf6d9c0f927e33ee57ac7e8b8b77e059a9124b701c302967c0873aba2c","ssdeep":"768:M4uVQjt+PPb+6/SkAoVhoflWYB15rV8tkL:fuVQ2PskA2OlzprG0","tlshash":"79c2e0f0f8b5bbef40363e3543b7a3e4839583c2877051184199994864523ff9ea1b67","first_seen":"2023-11-11T10:32:49Z","last_seen":"2026-10-15T08:33:12.943112Z","times_seen":1807,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-_WWe_iud.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:34.476Z","timestamp":1792041394476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-_WWe_iud.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 15 Oct 2026 05:16:34 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6ac72b91-4f117\"\r\nexpires: Fri, 08 Oct 2027 05:36:46 GMT\r\nlast-modified: Thu, 08 Oct 2026 05:35:13 GMT\r\nx-77-nzt: k8iR8QSAAXY6THXsJWx5W11bAKIJgn68OEe84B11D0lhATpjvTx7Wdjnj1HYio5O9EjWIIk\r\nx-77-nzt-ray: fdb54123bd9c153ed761d06a8f8a451c\r\nage: 603588\r\nx-77-cache: HIT\r\nx-77-age: 603533\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":323863,"size_decoded":107921,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44725)","md5":"dd280edc7866574fe4ad69f69a887a5f","sha1":"f173f1383325575160ef312bf358c0ae25dbea27","sha256":"751126cad8d1b18164a4ce0e4f9e24769ad24a26e2ab3733186d44de48ff8d84","sha512":"1fecc71e2a7de3c6753187427361cbb97173502fcf3e2bb175bbb9dd5fdc63a53c86484c6cb5f730314b9f274248ffe7a728635147b0f19e71ee78e56f6f8d8d","ssdeep":"6144:vJjSEILiukrPQKKjhetJS9KYtprU9fcuaOg/sBI:sEIWukrP3nJwpANaJ/sBI","tlshash":"61644bc57290b035439791a6906f1105b33e9c18580d812cf269edf67dbaec8b2b7fb9","first_seen":"2026-10-08T09:06:18.873046Z","last_seen":"2026-10-16T12:23:03.401105Z","times_seen":150,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xycrestholdings.com/storage/app/public/photos/BLnBKcLwy1zmPAeOv2qdgef3qJ9TxaNrvF6qXC2K.png","fqdn":"xycrestholdings.com","domain":"xycrestholdings.com","tld":"com"},"ip":{"addr":"79.133.41.203","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.006Z","timestamp":1792041390006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.cbworldwide-legal.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 14:35:23 GMT","end":"Sat, 12 Dec 2026 14:35:22 GMT"},"fingerprint":{"sha1":"3B:59:39:3A:7D:24:C6:53:B2:1D:ED:9D:DE:5D:AB:BE:C7:B5:EB:89","sha256":"35:1D:27:72:58:8C:3F:07:E6:FE:1E:F8:5F:09:97:CC:8B:2A:6E:0F:0C:91:6B:86:79:C6:42:C2:B8:72:F3:F2"}}},"request":{"raw":"GET /storage/app/public/photos/BLnBKcLwy1zmPAeOv2qdgef3qJ9TxaNrvF6qXC2K.png HTTP/1.1\r\nHost: xycrestholdings.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D; xycrestholdings_session=eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Im5aaVBsWnN3eUg0OGJKaTRmTDNmdGc9PSIsInZhbHVlIjoibHBGSHIvcVZRZERqSXJIb3BYTnhYNTRYcUpHdGVMblhwSmJNZWYxT0JzQ0VhZzJvYXBnSm1oSHpKTzB5SExWSWxsd2ZVVDhLVGhiRHIzU3krRXVZNEsyWnhibE9lb0JwYjd2TXlLVVF0N0NaRFh0SWR6bm8vUVVUaGlZdVJaNFYiLCJtYWMiOiI1MTYwNjhjZjVhNDY0N2EwMjZkYzFjNzdkYWRlNDBhY2NkOThhM2MzNTlhNTk2MDI3NzBiYWNhZWMzMDFjMDQzIiwidGFnIjoiIn0%3D"},{"name":"xycrestholdings_session","value":"eyJpdiI6IjM3Wm1xbGhuMHRUb2p6VTR3SUtjS2c9PSIsInZhbHVlIjoiRkVyZkgrdWE0V3g5bHczR0VHWk1oR3grSlh0azBWblZTVG1INzRtZE0ySnBpT2Z3YVo1cGdIdkgxTzcvUGVtVUEvTFZXYmlCWDFoNjk1RTZiOEhnZXdUV0ZCeTBVMGQwMVVMUlhUSUluTm1hQ3krczJxcWs0UVFaUlFGMG01bEciLCJtYWMiOiJmZTM1MGE4ZThjNjRlNWQxM2JiY2E2ZmU5ZDI5ODFhYjhkNDA3ZWFjNWIxZDIzY2RlYWFhNzQ4ODc0Zjg1NjRmIiwidGFnIjoiIn0%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 14 Nov 2026 05:16:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 13 Sep 2026 21:17:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 284018\r\ndate: Thu, 15 Oct 2026 05:16:29 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":284018,"size_decoded":284470,"mime_type":"image/png","magic":"PNG image data, 524 x 476, 8-bit/color RGBA, non-interlaced","md5":"9496b7c61e1efc89e25690bc3fea8225","sha1":"0d7ee7149e1d6dfdcf8265d1d19100c1bc894b76","sha256":"ae3a5c8b9ab644d3e86da9af531a87c27d2daa54df6866d22a412e1082c1e3f9","sha512":"f50f88f9edf7a4b93e6930ac814e9fad33adb2e31ecd10267fa3028301f78dd99ab2d86cbfd1a6cf82be7872631f183997dd3a3d13d5b28c9d63c19973816e8d","ssdeep":"6144:8UV3KubX4Ho6csJzi5zYHNJaFg0VJgzU6S0vgY+BFW9ZZufCO:X3K8X4H3bm1WYgyJgg6SYIk9mfv","tlshash":"5d5423ebbe20c553c9b2bd370232b5774432a9136b968e1341cb293ad6f79419e07f94","first_seen":"2026-10-15T05:05:00.515203Z","last_seen":"2026-10-15T05:22:38.357664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-15","alert":"Phishing Block","trigger":"xycrestholdings.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-15","alert":"Sinkholed","trigger":"xycrestholdings.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1551836022-deb4988cc6c0?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.015Z","timestamp":1792041390015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1551836022-deb4988cc6c0?ixlib=rb-4.0.3\u0026auto=format\u0026fit=crop\u0026w=400\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xycrestholdings.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: ca7ead0b6cd9fefd022e7676ac874ea80d0f387b\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 09 Oct 2026 05:00:22 GMT\r\nserver: imgix\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nage: 519368\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230111-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33253\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33253,"size_decoded":33883,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"59310853623db2ce588599df10f50d36","sha1":"94dd7df669c1c1dd482494eb7a37081a0096a809","sha256":"167088df46df2b742e2580d391e3b35dc0ad79de56f6b165a91df4e63c0576d3","sha512":"bd2f1b4294065f73d9747e4b0117bfa2ce9148c0916105b890db7807a555f0f6626776aedf4eea93af63f825535478124445102336ec6d29fd8dfd56c1cfa2f8","ssdeep":"768:VYyM2v0ea1L7i/665vF1miner71/sE3NoKGi2:Vnvs1XJsvYr+Qx2","tlshash":"81e2e12a97fab715dd65c33a0696138176c3f721af3bba02490c97700d946c11f8ec2e","first_seen":"2026-10-15T05:05:00.5042Z","last_seen":"2026-10-15T08:33:13.533652Z","times_seen":6,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":67,"dns":0,"connect":9,"send":0,"wait":10,"receive":4,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-b4a9ce.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.784Z","timestamp":1792041390784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-b4a9ce.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 27232\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"6a60-z1IVIrKbHuW+8NbsfeN6A7L4oi0\"\r\naccept-ranges: bytes\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nage: 16194\r\nx-served-by: cache-fra-etou8220142-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27232,"size_decoded":27940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27232, version 770.256","md5":"cbdff72e5d0487b36c7c47f09ea2ef28","sha1":"cf521522b29b1ee5bef0d6ec7de37a03b2f8a22d","sha256":"246c899ffd4360235af942b261e2671563f2f9ec6c2708a8fb56a5364245a57d","sha512":"3228e87115c554729550af7ed902bf759e5feb9d0cab8ec324aa426c02e3ee64c5c924bfc1f0d38dffa205ca4846afe39b2397022e606a1aeb307d8d868b5413","ssdeep":"768:0iO04O+mQEW5w4sEcglXT+wehNBtSdDwSEw:/OeiE4Xcg5+wONBBSh","tlshash":"12c2f164d3d1d8e3e3e94770956850d5002a1eff83faf126e54d09106a09ee77aaa192","first_seen":"2023-05-17T05:19:34Z","last_seen":"2026-10-15T08:33:12.903308Z","times_seen":1992,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-e41116.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xycrestholdings.com/","date":"2026-10-15T05:16:30.786Z","timestamp":1792041390786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/aquawolf04/font-awesome-pro@5cd1511/webfonts/pro-fa-solid-900-e41116.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xycrestholdings.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/gh/aquawolf04/font-awesome-pro@5cd1511/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 20552\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5cd1511\r\nx-jsd-version-type: branch\r\netag: W/\"5048-/TFHwqxBJISxNgPDLgmZBe37oF0\"\r\naccept-ranges: bytes\r\nage: 22936\r\ndate: Thu, 15 Oct 2026 05:16:30 GMT\r\nx-served-by: cache-fra-eddf8230074-FRA, cache-bma-essb1270031-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20552,"size_decoded":21260,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20552, version 770.256","md5":"600091aa6fb1fbd488759d5f337b4a4f","sha1":"fd3147c2ac412484b13603c32e099905edfba05d","sha256":"be7b08b14811d0145cfe0252cee6a348230749f09460a922c9304d7c4e3dfa4d","sha512":"7f515f1a454a3cb0d88080b2cd5749c7b2a98be6f4d9811e9d4d051aafaceb718d1564f33443b6c844f7f238044889558da3566baa9cc9237e24768fe09e3c29","ssdeep":"384:A5ZaFi1L/219LZ5Nu+lOZZARZpQRGoM41P3Lw7+fmhp2J+E:A5p+1dZnuGY4QgFafM7+uLS","tlshash":"b092d08e395e0b11c814c3a7e511b979548b5b4b59a02a6d0cbed4efd87c1c39ae2683","first_seen":"2023-11-11T10:32:49Z","last_seen":"2026-10-15T08:33:11.89297Z","times_seen":1845,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}