{"report_id":"1bc4b95e-e99a-4a47-acea-466953ff29d3","version":6,"status":"done","tags":[],"date":"2025-08-06T06:28:24Z","url":{"schema":"https","addr":"riverexpressdelivery.com/","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"riverexpressdelivery.com/","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"title":"River Express Delivery"},"submit":{"url":{"schema":"https","addr":"riverexpressdelivery.com/","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-10T06:28:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.124.230.70","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":43006,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2025-08-04T05:18:15.597885Z","alert_count":0,"request_count":1,"received_data":1554,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-07-30T15:10:27.969323Z","alert_count":0,"request_count":5,"received_data":140373,"sent_data":2773,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":0,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2025-07-31T12:11:07.880699Z","alert_count":0,"request_count":2,"received_data":25243,"sent_data":892,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"files.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":214187,"first_seen":"2019-05-16T16:49:35Z","last_seen":"2025-07-31T06:41:47.970153Z","alert_count":0,"request_count":2,"received_data":6174,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-30T15:14:12.092299Z","alert_count":0,"request_count":1,"received_data":35550,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":46890,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2025-08-06T05:43:52.749287Z","alert_count":0,"request_count":1,"received_data":18644,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"riverexpressdelivery.com","ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-04-04","domain_rank":0,"first_seen":"2025-08-06T06:28:26.03379Z","last_seen":"2025-08-06T06:28:26.033791Z","alert_count":60,"request_count":60,"received_data":6180440,"sent_data":28120,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":0,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2025-07-31T21:16:18.315788Z","alert_count":0,"request_count":6,"received_data":394055,"sent_data":2942,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"18.159.79.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":39452,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2025-08-02T15:14:54.599147Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":613,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":0,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2025-08-02T08:49:15.206736Z","alert_count":0,"request_count":1,"received_data":7508,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.cssslider.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8572850c209f47f3b9cc114b479e8251","sha1":"9098e72414043fdbedb3707bd2bebead78f2b315","sha256":"77f3d4e863c9f4e9e9b02a57a24bda2ad5939696cc08394b3fe756d22ed9da32","sha512":"1fdfdad3fd34f739d4a1a9894a34abff316cbf63947db2217fb0e3ae0a1fc1c1b8ce888ad406b25a4dc1893f473ae897a416bfe13dc439c063740ad0a0a0a8d1","ssdeep":"96:Bb7WZobkzLGS6Y98RO+IdbBQ7+1d5LhNN3LhWKH8C75pmJLhwBp5pmJLhs29AtkT:BvWibk7lFV69AtkT","tlshash":"b9a17307b3ac5b5586ffe2c108d9880cb07dab68dd40d00db1bca7c958da8465577fba","size":5044,"data":"","first_seen":"2023-03-11T23:21:20Z","last_seen":"2026-07-30T21:34:49.754404Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ebfee3ec1ea977980a15d9926ef3087","sha1":"10dc1a89c021b46e5d2f9b52632d2ed54e14161d","sha256":"f2192f6e373dbe899b55050508f6588eb89e9fef9a7bd99cf4fb8bb5a49c9e3c","sha512":"0688d667745cc22f4557c07742f4cbafb8282b2f479bb658b98d4dd78c7ca2bd24a2d5268c691100fe05f4a56ca497ed03b3b613807cb857e74fe2648678760b","ssdeep":"1536:uP10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrR:x+414Jiz6fh6lTqya98HrR","tlshash":"8983d6d9b2c6706297b734b851bf510bb17a98dab40c8c60f0a4d4e47eb4a8d517bf2c","size":84494,"data":"","first_seen":"2023-03-12T08:51:46Z","last_seen":"2026-07-30T21:34:49.733588Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/bootstrap.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc0ae1e61d12d522d67e845f4bdebdf4","sha1":"961ba292ac8c68c7383956c7cbcd929caf64bd24","sha256":"1bbdb19132cece5103c0a2919e09320edc6687ab3879fc3bb1d28f0f0fa5d45f","sha512":"9a9dd578ca6e14a6e0c66fd731453841051c257e0065f5797ac817ef6250afb1fbcd6bac57a94b3f54bbf306675f6cfd770bf2c22975547907640a9f18e5bb37","ssdeep":"768:NsO4MAvAcCfFvM6aPMPv3Mo8ExbxHTVCLXMrJ3u6byVm7MT2NIbjyixM3XpZWVe8:NDaWkNo9s3Ccd","tlshash":"4053a35a3258b87309de54a68072470bf7295d95b147803cb9bd5cee2b3dc8232b7b78","size":61893,"data":"","first_seen":"2023-03-07T01:16:15Z","last_seen":"2026-08-14T07:28:39.700657Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/rs6.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea5cf2c55fc416c211bb6bdfe2a5ea3d","sha1":"53bf239da2028044e61ac2edd5d292ca00d09726","sha256":"edc00efff9674105335e75964130281682159ea89058596862a28da1dcaff293","sha512":"b91d9697f79e57778e5444293f2311eff828052cb649eda567b92ae99c6d7a1798eb21603e19b3c2071c89f1cb12a09200374808be0b43b878c3f9366c5099dd","ssdeep":"6144:3hYyXmh3kB5H4NrCXH2sL++DGWjkTCgB8GBFz3gZbQ336D22tiht:RbX4QH4NwGWUB8GBFz3gZ0aDFs","tlshash":"d0844de9a531386900fb4397d05a44147375e96aa3078490b2bbe2695c5ce8e02ffffd","size":379836,"data":"","first_seen":"2023-03-07T01:10:19Z","last_seen":"2026-08-13T15:00:10.961438Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/slick.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ae84a8d41d0858359778239562e7805","sha1":"a179604005abcd59d4b114d8562aa354cce8a136","sha256":"93daa7f1645cfc7268f58be2271eff40b50ef729e31c1aed964795c3ca1674f6","sha512":"c68c500c01858ece35d7f40e08b67a6829b4909ef4194f5fcfb8629554629c3a8577bde82d50d1ebf1a98da8449c01ea60bc267915fb2457becafcab97be1c88","ssdeep":"1536:lXeVWuGGI2R7R+AXQyMibroAPoJATv2UsWNgJ:lXeVuGI2R7R+AAyMibroAwJATeJ","tlshash":"f183fd0b55f6131684a731b96bdfc028b3ba91275504ed9cbccc4385afd45288feabe4","size":88438,"data":"","first_seen":"2023-03-12T08:51:46Z","last_seen":"2026-08-10T06:31:17.676843Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5323b85301ce571af2db58ffad25abe5","sha1":"6af947a0d8b6be1e399473bf8c2f01238e2ee1ba","sha256":"c99af160ee36bef06942d036e6e9cecfc13ad26abc9222e3709431b626419f63","sha512":"55da3656e1b80f35ae53f1e0bc5873aa4024eaf8649f028c19e4456bef2f54c03b996d54f2405239711824c97a3ee19ed987173fcdf3e9f203c51b9cd1325b1d","ssdeep":"","tlshash":"4de02b3d3c3541955b9244f4c1b7e2283e1630708054dd57a59698aa98f0bde6d05999","size":418,"data":"","first_seen":"2025-08-06T06:28:33.032989Z","last_seen":"2025-08-06T06:28:33.032989Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/wow.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-15T17:50:25.089196Z","times_seen":14427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.filterizr.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40a5dc41f52fbf47b7af1464ed2da145","sha1":"d13cb1146ede7bc6f1ce124df4c37befb55ad336","sha256":"d5dcfce7c6aff65ef8b32d4a488d21a768f2aa7de2713059ddf43696ece03002","sha512":"b13ee74fb5a26fdfc600af6b6023499198fcce4f606c098d5708ab32067d2bc80a05f676f5ec7cd422cf360e4ca7831da1a517f15e8c7ffd26d0ede31622d74f","ssdeep":"768:RVuuc4Hh62LLE3v/ic6eICdXnj7L9wS2skeXfmMT2T5:DhpE3v/ic6eICdz9wS2skt","tlshash":"2e2393582de3162990237679eb9f714bb23a8207111ddd40792e67906f56b3883f3fe8","size":46039,"data":"","first_seen":"2023-03-12T08:55:53Z","last_seen":"2026-08-09T12:02:43.588528Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-lGOJV2Cd.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c080929ee5b9b8b7dc5d95e9b9eec0f7","sha1":"7bfee99cea3e7e33066a81046664fd48069f7f69","sha256":"bdfe5b581aff3b7b9bcda50a9c6e6a2f35666fe27513aa76b1c7a8b37cf0173b","sha512":"148559bd64d128376c21689658c6d9a0dc38518f5e52c8632d3551f03d480d9bae66958712c631a0fb1f0eeab46520d9e9ac79721ecc79fc576c77f67cb3a26d","ssdeep":"3072:CQfUXVejVfkdxSwVBVmMdgwYVPVF/z2ih1gPn4vFSC/0niYYu2g3QuO+jf/oNg9/:XsPn4vFSu0nLT3QuXD/oNgoPLwvwFe","tlshash":"fe445ad471a5703543a700e5607f1006b23e5c29a849c068f6aeddf67db99c8a2b7fbc","size":270282,"data":"","first_seen":"2025-07-28T09:46:38.948067Z","last_seen":"2025-08-07T03:39:22.606026Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetMessengerInput-CcW0tbcU.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"4a3a1ca1e1ba9166fa260f883ac1111f","sha1":"5a8ce1162a643839c1b77f35bdcce5f56e456520","sha256":"7e97703fd7338e37bb4365c649bfd445a6bbfe02bdabb91b3fbf72710fec9d6d","sha512":"8a2f87b41a737724e8b4a297ae8d8837db0841331954cfeefa5098e7534d6b458fa1b611694694da0b7268c61a226373ee5741017f021bee6fafe54e8e202142","ssdeep":"1536:8H9NDgLB5P2iTSBlJmyTrheKD5NK29sGiICi9fJ9s0goiKdPbc13hIwtNFw3KpfJ:cr8QO2Y2IPTro3/BQ","tlshash":"1d636c8433183439917b8ae9607f110bb2375684b14ec058b52fcded69ecde451bbeba","size":69007,"data":"","first_seen":"2025-07-31T11:21:35.950141Z","last_seen":"2025-08-06T11:26:31.664297Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","size":18141,"data":"","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-07-27T14:00:09.825615Z","times_seen":9281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.counterup.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","size":1067,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-15T17:50:25.062311Z","times_seen":13110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/waypoints.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe0eedf8da578f4a4c43b05448c51d9","sha1":"812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520","sha256":"a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833","sha512":"9084433d6201a0aa45efd1c9bf7c413d08192a3871cea3061b637af2cbef21de39c3dbe9fe14d7a11edc0c44588551212c94ee4866ff737f991e07907cb9b41e","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:uPG3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"3bf1f9c9b4c7b4221befa0b5d43f060bb33a9e4561098064f194e4da3db4a2da567f38","size":8044,"data":"","first_seen":"2023-03-07T01:07:26Z","last_seen":"2026-08-15T17:50:25.054204Z","times_seen":12691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/typer.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f90168a9aabbaff6c415d0e841d302d2","sha1":"99128504b9a2da84bb62431ee82285367becffc5","sha256":"c53a60d2fb574abde671ce4883e437d4b5cadbcd691f50afad471d86448e8464","sha512":"3c77e20e7db49f0761cffaf64ea52e354f6a49928ba78362959162c790b2f33d4c3c4223f77e77988ecf648ebbb94650ca58cd2fc4c1c1f5d313929366ec2cd9","ssdeep":"96:5+gkyMnVPhFnjq/y0+Qnd3n0Gn4mnzNvn/c2NlZnw0/Skaw:kjV59o+OV0M4szp/bRz","tlshash":"70c11d90b63829ae4bdf5fb6227e9486fa7df033414182ba75e64266163028d3353ccd","size":5685,"data":"","first_seen":"2023-03-09T01:33:52Z","last_seen":"2026-08-09T18:53:16.270772Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/imagesloaded.pkgd.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-08-15T17:57:10.928306Z","times_seen":24030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":23033,"data":"","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-08-15T03:47:05.0844Z","times_seen":2972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetPopup-BpQ42P8Q.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a781de3697961f5d9ee2eeac651d591","sha1":"c53a8033a8baaff6d1e3d626ee98ec4a2aadd0d0","sha256":"23d7732ac0b01dec11ba60d1713f861315660165ed8bf22ad5dea9c8a55224d1","sha512":"04af1d3ca7086944143fce45abdd79927850a157ecfc0fe51aa05f5457fa9dbd89b023cd98359598a1119d977306217b836c669e3b21d010fdbc73403f139320","ssdeep":"96:2Xe5XRyV0lCQko/zbWirDJEwV+cwdrN11i73YY6Dx5iWIQ4dJrESUtyDTv:yBylCQko/zb/FEs0rJmoDDG6dsDTv","tlshash":"33c1ea4d2696213bbabae494f43cd293b60cd1c5a58bc93c8a2fde4476d4d8055e33f2","size":5807,"data":"","first_seen":"2025-07-31T11:21:35.984142Z","last_seen":"2025-08-06T11:26:31.679219Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf9bf844e111b538965f31580fbdf268","sha1":"fd761ee719798b4a4247231650e22d8aecfdbaf6","sha256":"49969667b10d8b29069fff4faccdaa9b27b1c5e234ba6f6cf78248200b27b6c5","sha512":"b85956efb1c4424f3e344215b77533a6c41347e472ab9c13474e5d36177677094608e9fd6c99797ae5a005c9b37c3323c9468d4b2b7e1f9c1b50e36d0fd0e36e","ssdeep":"","tlshash":"d5c04c0a6534acb8731d1118aea53e81583d84a641643e24f3fe55164b925060319513","size":154,"data":"","first_seen":"2024-09-03T18:49:06Z","last_seen":"2026-07-19T02:23:42.979965Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/appear.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b2fc9c1552372b269b85194bf8ff2e8","sha1":"1614ceb23c3cd597b8c73186426cfca84a3d38b1","sha256":"3e4628fe50187cd9d1c919cfae2bbaa7541e08edce51a08208d6b67763d16f59","sha512":"8bc94b8a3506a55a1c2cb5baca27133705add20ad53c585a004c57c93dc1ec3b4ebb747fb119d4cb6de505d07b44593c5c0109b11f2494d26054f59a1550e8a9","ssdeep":"","tlshash":"6d51ac8838436c60283b637eaa2b2108f72646774202866174ed599d3ff1d25e1defdd","size":2975,"data":"","first_seen":"2023-03-11T23:21:20Z","last_seen":"2026-08-12T23:20:15.836472Z","times_seen":328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.mCustomScrollbar.concat.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","size":40547,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-08-15T10:36:17.530396Z","times_seen":4326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/knob.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb9ac572854ea095f4ef4290c38843dc","sha1":"b8aabf82a32f98e231d5dc3921430eb6bf9a46b9","sha256":"e6cc2c3012c81c03910615d530e84f01ccd88dfecd320210ca4d3c217f539f9a","sha512":"1653208eb5a86a1ff5ddbca0db99fb01e8ac140c4fe185c0ac4fd31154ff8c029bbbbf7f85012584a3028d153531916683303f930c1a1c8475580739176caab4","ssdeep":"384:s7Gk75aNp/1SF3eMS3aPWhMFmyHo44BDJuJ0jRCaVAfV2wcZTIiTZkAFYCXQWQT2:NSF3eMLToBWuTIiTZkAeU0cf","tlshash":"08e2f04f679e2176c932636a8f1b524deb22952f0603821e3dbd96d41fb08345366fbc","size":31432,"data":"","first_seen":"2023-03-11T23:21:21Z","last_seen":"2026-07-30T21:34:49.729863Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/script.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a330903aea44945dc002a985dbbf6a0","sha1":"7aa686149fe153a8f2a4c9317ea90d39783162e5","sha256":"ce3edf64fc4ace6dfdb942ce824fd2f8b9969e0db1de00c57989581b8036134f","sha512":"547e94cfa2e49e39ea3551bcbe5f6eb3523bf58562f5dc1b544cde2d3dea68a29907ab2ae3758de9177a7a2c96e4a4b2d0b4978b1cccd25cfb3e3e6b18d46193","ssdeep":"192:cEh8AdK+JwWTHkd8Jra9nHAkW6+N9BxANsHPHwPmWK+ddq9hIb/clbcJLXSx25kI:Sd8Jra9HN+XINsHvwa+6YIcJLXe2q2T","tlshash":"f4820ec2bf4d70af85ee9324a13ed74bd95de531d22240b7f2ea3c2491a095b039d5b8","size":18648,"data":"","first_seen":"2023-05-25T18:35:57Z","last_seen":"2026-07-01T02:22:55.838436Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/rbtools.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04f0a5790668162c9241bfd598d6400c","sha1":"dd55a501364bbd8a0b43eca3cd681748cd89a03e","sha256":"463f24ed151c0bc8775c09e92c3885fd96dc17f1e91ca64d70f3ba9600e0eb86","sha512":"2f800a0eb7c2e2f7e7ae6b5d75be2cc5b92e54d6aac3a0ee1955d43cec43f7283bec1e317f0323a5eb1872b728fa5628bccf3140407b18f729b881201a6eef9f","ssdeep":"1536:AB3xC9/I/66Q1+sxBsWGXkWRqrlv7j5E5L3M8s+Adumi8IyyJTBwvrZ9IHsUq0Kv:a66U+9UWRW7CK8s+muaydMr/IMlv","tlshash":"06c33cd87151b432029666a5453f0a0ff23b9d19750b852cf328e4c87d389a991fffba","size":123959,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-08-15T17:47:13.589642Z","times_seen":4439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/popper.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","size":19188,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-15T17:50:25.047219Z","times_seen":111288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.magnific-popup.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-15T17:48:14.221627Z","times_seen":24915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/project/port2.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/project/port2.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76282\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76282,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 473x500, components 3","md5":"cc07dba7a5fa1fc8521bfdca4a8d2968","sha1":"673ab76b676f9edf5fc653fe6471c9ee2aa14865","sha256":"1558671263ef22b7304c360cb6f900bb0810601173632213bd7be3f85f5c6092","sha512":"20c280d44abd7a7e522601184246d6d67855392e9d0045cd613313528001234e54992deb2b55a68ffec574704eb8ec5829ebad27c4b4d4fac2256a7d36ac1be7","ssdeep":"1536:pgLgxQaPctTAoSc0hZem54aVxy5VgHRUx:yiQaPctMolZm5LcgHRa","tlshash":"e173123c8681fe134e5d672be773a0d42d1e9749bdd238112a7bbe681129b1ca0c65ec","first_seen":"2023-07-13T00:59:03Z","last_seen":"2026-07-14T08:31:57.925148Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":882,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/bootstrap.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/bootstrap.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 15372\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61893,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61608)","md5":"fc0ae1e61d12d522d67e845f4bdebdf4","sha1":"961ba292ac8c68c7383956c7cbcd929caf64bd24","sha256":"1bbdb19132cece5103c0a2919e09320edc6687ab3879fc3bb1d28f0f0fa5d45f","sha512":"9a9dd578ca6e14a6e0c66fd731453841051c257e0065f5797ac817ef6250afb1fbcd6bac57a94b3f54bbf306675f6cfd770bf2c22975547907640a9f18e5bb37","ssdeep":"768:NsO4MAvAcCfFvM6aPMPv3Mo8ExbxHTVCLXMrJ3u6byVm7MT2NIbjyixM3XpZWVe8:NDaWkNo9s3Ccd","tlshash":"4053a35a3258b87309de54a68072470bf7295d95b147803cb9bd5cee2b3dc8232b7b78","first_seen":"2023-03-07T01:16:15Z","last_seen":"2026-08-14T07:28:39.700657Z","times_seen":771,"resource_available":true,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/imagesloaded.pkgd.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1712\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5594,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-08-15T17:57:10.928306Z","times_seen":24030,"resource_available":true,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/typer.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/typer.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1409\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5685,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f90168a9aabbaff6c415d0e841d302d2","sha1":"99128504b9a2da84bb62431ee82285367becffc5","sha256":"c53a60d2fb574abde671ce4883e437d4b5cadbcd691f50afad471d86448e8464","sha512":"3c77e20e7db49f0761cffaf64ea52e354f6a49928ba78362959162c790b2f33d4c3c4223f77e77988ecf648ebbb94650ca58cd2fc4c1c1f5d313929366ec2cd9","ssdeep":"96:5+gkyMnVPhFnjq/y0+Qnd3n0Gn4mnzNvn/c2NlZnw0/Skaw:kjV59o+OV0M4szp/bRz","tlshash":"70c11d90b63829ae4bdf5fb6227e9486fa7df033414182ba75e64266163028d3353ccd","first_seen":"2023-03-09T01:33:52Z","last_seen":"2026-08-09T18:53:16.270772Z","times_seen":238,"resource_available":true,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/service/ser4.3.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/service/ser4.3.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37883\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37883,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x290, components 3","md5":"194a7fdaef97b13058a8bae3a026f1b1","sha1":"5f25d455763574ac3f43dbf85eea6b94eefb7c55","sha256":"48d998ed2428c4a8801964b149b19a46d588ba354007fcc460614c0dd15b827a","sha512":"c31a696f270e4442796a5372f0f80940063193762e69192bf2626fd330251c42e19f7cf5c8ee9854639e49fd9e844130abef0f7fee87b761e19c123274750514","ssdeep":"768:WKr8IUUyRcPn7q4F2eatafcPX8bcfRfa+IyacFkWdRah9hH0:3r8IUUWcDq5e0PWsRfa+PWy","tlshash":"a203f11394711b4eff288a1538f3a6aac4a68d4c67427df811b281d8dd3f3921329c9d","first_seen":"2025-08-06T06:28:32.919919Z","last_seen":"2026-04-06T04:39:44.226624Z","times_seen":5,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/service/ser4.4.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/service/ser4.4.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40287\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40287,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x290, components 3","md5":"528c2f539dfa2ab51204856cda0ee312","sha1":"1a5b4ebd5e93e70063d9bc44f7be1b3d27035db7","sha256":"783575b66ff1c90b194b98a1ae36cd752d1d7d06e823da5746211212df13f7b5","sha512":"df679b4f3dea70cb0f89ab2b6157291f25f33423bb19f02f43e1edde013305b23da1584f361f04f80e3153407669722142fa45dc50d8364b57e07df21ea22118","ssdeep":"768:a3oRlyMJbe8RvZMMqx8wpzNPngmE3XK/E/WI98/1aX6eYG+G8b+zjhm:a3GEMfZMZx8wplzE3XT/We8veaGSEjhm","tlshash":"3203f192dfc94e43d304af6035f2226e9c61e9d04e9cceca617b0fb36c499e5551139d","first_seen":"2025-08-06T06:28:32.921611Z","last_seen":"2026-04-06T04:39:44.203351Z","times_seen":5,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/slick.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/slick.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 14753\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88438,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0ae84a8d41d0858359778239562e7805","sha1":"a179604005abcd59d4b114d8562aa354cce8a136","sha256":"93daa7f1645cfc7268f58be2271eff40b50ef729e31c1aed964795c3ca1674f6","sha512":"c68c500c01858ece35d7f40e08b67a6829b4909ef4194f5fcfb8629554629c3a8577bde82d50d1ebf1a98da8449c01ea60bc267915fb2457becafcab97be1c88","ssdeep":"1536:lXeVWuGGI2R7R+AXQyMibroAPoJATv2UsWNgJ:lXeVuGI2R7R+AAyMibroAwJATeJ","tlshash":"f183fd0b55f6131684a731b96bdfc028b3ba91275504ed9cbccc4385afd45288feabe4","first_seen":"2023-03-12T08:51:46Z","last_seen":"2026-08-10T06:31:17.676843Z","times_seen":205,"resource_available":true,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/fonts/fa-regular-400.ttf","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/fonts/fa-regular-400.ttf HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/assets/css/fontawesome-all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 06:28:02 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 224421\r\ndate: Wed, 06 Aug 2025 06:28:02 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":454088,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"6384208c446555c028be01e1a419062c","sha1":"e7dbe9faa21f717e898cd7f9bd74dbcc33a2734a","sha256":"c6ca239de74ed4fe427a3d657f6f7be7c2882ea80c729c6c0c880a36bf0cfafb","sha512":"a73eff70ed417e941845afdf94a0f3d3c69180718e4a23c721f20ea73acdd544f1302c79f57e7661547eb89fa198fee4f682c4f252f567510f3d94d74f38853f","ssdeep":"12288:NlNLBKyhCOXQ7RsgjfGfQOIWD/LQMBUNe:lBKytyFDG4OIKkM2Ne","tlshash":"caa45b6ef69f8ba7c187c7bd9f80783221d42f14324137e2be86ea1d60569c495f061e","first_seen":"2023-05-18T15:17:42Z","last_seen":"2026-08-11T00:45:32.576101Z","times_seen":240,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/animated-slider.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/animated-slider.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 334\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2135,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d0bc6786acff484024bc741c006f4eef","sha1":"5898693c31016d91eb7d91e5abce88eebf9394cc","sha256":"ee808c6a75f886a850324cca0ff3de22437d08f95ac2382bb2b05d3608ec6ee3","sha512":"8d4e9663ed342ed01db6c100dc6bdf5c26f3a64183cada98536be9a26a77dee5d39ff0ec6a71c48315277cbdb0b25ddf1a484e8a501882e880b981ae00eb85a5","ssdeep":"","tlshash":"314119a68c01168ad632764cfed84f24452edb53b5075dcfb105488e837eafe90f6b46","first_seen":"2023-07-13T00:59:02Z","last_seen":"2026-07-30T15:06:08.818692Z","times_seen":68,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:12:42 GMT\r\nexpires: Fri, 31 Jul 2026 10:12:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 504920\r\nlast-modified: Wed, 23 Apr 2025 16:07:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-15T17:56:58.99602Z","times_seen":293143,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":238,"dns":10,"connect":21,"send":0,"wait":35,"receive":3,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/bg/f-bg.png","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/bg/f-bg.png HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 68875\r\ndate: Wed, 06 Aug 2025 06:28:02 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68875,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 642, 8-bit/color RGBA, non-interlaced","md5":"4bb9808b8a0cd8f7b20e7fd22cca06c9","sha1":"2c4297eef5fa683a11232dd6691c8c221be1946d","sha256":"5fd5d6f36d5a033d0f510b6adf920cdb20631cd1d32c9dbd616f652e8479f284","sha512":"b14a6dacd743b29db4229ec85a675d4db76c18eddadd570c56fc81858938447ee6673bd774f75df4c3f7489647c12aa31281ac335347982e5f2a7c13913cfcd5","ssdeep":"1536:suGD+mdGBc3WpeZ1D5TRez13RnWeXnVDoEzuA6UYFhO:ssKGGtllRezFRWeXBCUYrO","tlshash":"dc63f1e9ea578dd0d75cc232f1fd1b3c776319af28aa052087b299b5bc872d644f4280","first_seen":"2023-09-16T10:37:56Z","last_seen":"2026-02-09T21:26:27.847995Z","times_seen":10,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:03.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:03 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"68873fee-5db\"\r\nexpires: Mon, 28 Jul 2025 09:31:07 GMT\r\nlast-modified: Mon, 28 Jul 2025 09:16:30 GMT\r\nx-77-nzt: EwwBuUwJCgH3FwAAAAwBuUwKCQH3AAAAAAwBnJIhJwG3AAAAAA\r\nx-77-nzt-ray: e2f75420d781027cf3f592684b1d080b\r\nx-77-cache: HIT\r\nx-77-age: 23\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e78e68aacc713e41f52aa07900ad287","sha1":"7820e121aa5bbe7d7008e6aff92af4d6b51065df","sha256":"b565da117e803f47fc173ed3a174bd8c0344238a68bbc80f40d77b9fff31152b","sha512":"f7f802882bd9fc155a6d9f75b02d9abbb6064d8db5e421b043e559bdf218698f27baf4b47215e0ab16657ff72bdc06b6e7ce5e3568f2586376dfbe3523736c38","ssdeep":"","tlshash":"88310713c4fd0c5317dc6225b8945641695041cbec8a3e08369cc96f2f5defa10d7bad","first_seen":"2025-07-28T09:46:38.908996Z","last_seen":"2025-08-07T03:39:22.598054Z","times_seen":285,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":31,"dns":0,"connect":7,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-DGcCvwDA.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:03.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /assets/style-DGcCvwDA.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:03 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"68873fee-8911\"\r\nexpires: Tue, 28 Jul 2026 09:26:07 GMT\r\nlast-modified: Mon, 28 Jul 2025 09:16:30 GMT\r\nx-77-nzt: EwwBuUwJCgH3rrMLAAwBuUwKCQH3FgAAAAwBJRPCLgG3AAAAAA\r\nx-77-nzt-ray: e2f75420d781027cf3f59268e47e2610\r\nx-77-cache: HIT\r\nx-77-age: 766894\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":35089,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (35088)","md5":"628df02a7460555ba6e64f14897f0624","sha1":"16785e09bb64eb92724dde63fe6a775740637c18","sha256":"7d6c22ffcc0b7e3cd13f78895d8ab8df8ad1880ad130185f9c76857c9b11ac3c","sha512":"c00f075a2fa109a9ee3edc774e0702d8b1c03a345d42fdc8e9b9f228034419f601efbf42b6fe62757b3706e260037e588e17ecdee94aa6d697fc94246c97b5af","ssdeep":"768:E8J9oTcrW0vNXFZxrnSJPHs24nqfdZFu/v9+ggFgN:E8PoTcrW0lXpuPF4nqfdZFu/g2N","tlshash":"bcf2a75daad4093cac33c166e3f4e58c9229e5d1df322adaf6473a048ac27bf1987514","first_seen":"2025-07-28T09:46:38.964364Z","last_seen":"2025-08-21T13:42:44.033386Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.magnific-popup.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7046\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20219,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-15T17:48:14.221627Z","times_seen":24915,"resource_available":true,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/shape/ab-sh1.png","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/shape/ab-sh1.png HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2557\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 170 x 168, 8-bit/color RGBA, non-interlaced","md5":"9ffc77a9399c954a84bb9b70dd731faa","sha1":"e56fc0f08cd2892cbfdcd313cc805a24569ab718","sha256":"d93eeedb6e187da51b87161ecd9a87aceac1f253e9bab4d4057049a0eebd88ab","sha512":"73f02c681ea6c8ddbc58f99db74b73b111e280179fb23deb45eee3163ee85fc5fb913ecf2c5bf3206f5a7c7c1fb4876bdcf93c82dbf79b25518e610002dfb8a7","ssdeep":"","tlshash":"83513ad947687b91cbcfc4552a928dccb2126c904a1a6bd0106ea44a97113382fa9e88","first_seen":"2025-08-06T06:28:32.936757Z","last_seen":"2026-07-30T15:06:08.757149Z","times_seen":11,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":879,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/shape/ab-sh2.png","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/shape/ab-sh2.png HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 433\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":433,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 96, 8-bit/color RGBA, non-interlaced","md5":"907fcd0241fc51218b249588a5fb93ff","sha1":"9b4ba0040ce90d897f20a432cc7e5b528595affb","sha256":"5ddc8c9ec28e1ab4ca2246e06d725d56026a42e68af9e04435c071974141800f","sha512":"3bb723139568895d730dbc4aa4c34a35a6b7da67522836d47f5a54bca9a5b3a98548245e9fae08753e75a18a5937d2158e6099270601d890324b9ba9ea4d88bf","ssdeep":"","tlshash":"f3e0a7935214bc5ec5e9da3d31d68040bdf2c452852e143a557a90252d1478b4d80641","first_seen":"2025-08-06T06:28:32.938321Z","last_seen":"2026-07-30T15:06:08.77472Z","times_seen":11,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 28886\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84494,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"5ebfee3ec1ea977980a15d9926ef3087","sha1":"10dc1a89c021b46e5d2f9b52632d2ed54e14161d","sha256":"f2192f6e373dbe899b55050508f6588eb89e9fef9a7bd99cf4fb8bb5a49c9e3c","sha512":"0688d667745cc22f4557c07742f4cbafb8282b2f479bb658b98d4dd78c7ca2bd24a2d5268c691100fe05f4a56ca497ed03b3b613807cb857e74fe2648678760b","ssdeep":"1536:uP10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrR:x+414Jiz6fh6lTqya98HrR","tlshash":"8983d6d9b2c6706297b734b851bf510bb17a98dab40c8c60f0a4d4e47eb4a8d517bf2c","first_seen":"2023-03-12T08:51:46Z","last_seen":"2026-07-30T21:34:49.733588Z","times_seen":113,"resource_available":true,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":920,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/appear.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/appear.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 842\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2975,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7b2fc9c1552372b269b85194bf8ff2e8","sha1":"1614ceb23c3cd597b8c73186426cfca84a3d38b1","sha256":"3e4628fe50187cd9d1c919cfae2bbaa7541e08edce51a08208d6b67763d16f59","sha512":"8bc94b8a3506a55a1c2cb5baca27133705add20ad53c585a004c57c93dc1ec3b4ebb747fb119d4cb6de505d07b44593c5c0109b11f2494d26054f59a1550e8a9","ssdeep":"","tlshash":"6d51ac8838436c60283b637eaa2b2108f72646774202866174ed599d3ff1d25e1defdd","first_seen":"2023-03-11T23:21:20Z","last_seen":"2026-08-12T23:20:15.836472Z","times_seen":328,"resource_available":true,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:09:08 GMT\r\nexpires: Fri, 31 Jul 2026 10:09:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 505134\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-15T18:03:34.564215Z","times_seen":965911,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":156,"dns":1,"connect":10,"send":0,"wait":57,"receive":2,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetMessengerInput-CcW0tbcU.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:16.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /assets/WidgetMessengerInput-CcW0tbcU.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget-v3.smartsuppcdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"68873fee-10d8f\"\r\nexpires: Tue, 28 Jul 2026 09:26:07 GMT\r\nlast-modified: Mon, 28 Jul 2025 09:16:30 GMT\r\nx-77-nzt: EwwBuUwJCgH3A7MLAAwBuUwKDAH3yAAAAAwBnJIhJwG3BgAAAA\r\nx-77-nzt-ray: e2f75420d781027c00f69268edeefb1f\r\nx-77-cache: HIT\r\nx-77-age: 766723\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":69007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"4a3a1ca1e1ba9166fa260f883ac1111f","sha1":"5a8ce1162a643839c1b77f35bdcce5f56e456520","sha256":"7e97703fd7338e37bb4365c649bfd445a6bbfe02bdabb91b3fbf72710fec9d6d","sha512":"8a2f87b41a737724e8b4a297ae8d8837db0841331954cfeefa5098e7534d6b458fa1b611694694da0b7268c61a226373ee5741017f021bee6fafe54e8e202142","ssdeep":"1536:8H9NDgLB5P2iTSBlJmyTrheKD5NK29sGiICi9fJ9s0goiKdPbc13hIwtNFw3KpfJ:cr8QO2Y2IPTro3/BQ","tlshash":"1d636c8433183439917b8ae9607f110bb2375684b14ec058b52fcded69ecde451bbeba","first_seen":"2025-07-31T11:21:35.950141Z","last_seen":"2025-08-06T11:26:31.664297Z","times_seen":11,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/style.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Apr 2025 12:55:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 20803\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":161221,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"58bbea1e112a7ce75604cc92bf56cf88","sha1":"fd525d9de02a5b5e93d9047d55fa5e57ae979a22","sha256":"47308b29ac99bf25b4b24e06803db5954f7c9352e181b4716f43546d1e7e6536","sha512":"85b6f40daca10a803ae442574fc59628c7081a888d342b278361acd3245147bad256d5eaa10d7041a8e9675fc8ecabcd3fbb0ab30c9aeb7b719d933114a687b9","ssdeep":"3072:2DSBuOyhm+HvRPeZ9urLqyRyEv2AkVcAZE6L4EMtGhCN/VxyTPa6lnaj2Rzejfnc:2DSBuRs+HZPenyRyEv2/fZE68EMomxyZ","tlshash":"01f33589aeb615047007d478a996ee51f3386342eb0ecde8f7e5600ccfc9dd5816e68e","first_seen":"2025-08-06T06:28:32.944792Z","last_seen":"2025-08-06T06:28:32.944792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/blog/blg2.3.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/blog/blg2.3.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25413\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x231, components 3","md5":"40d78dfeff5be38727daecc03fb910a9","sha1":"2425f31cc13b7c621518a5e7bdb87d55eb96c9d5","sha256":"343c8e792bad95dd479645aff3c46345cdf28b553e30d0f3adf37bbe4995a05e","sha512":"a0a40d9de010a17467c20dd966fba7bb83e489bffb4d97cdb200c33eea2223673d2e7e1907dffe804003accd0062e9289115c33a9c8127f3e76da291f7a18318","ssdeep":"384:En7VDkR1Iimw7NVZS27vQmcTNfN+xYBUYbB8WimaRhIvZxTZoi/LQp0x8:E7VDYm4NjU5V+K5eWGiZpc+S","tlshash":"97b2d1b370166307de68aa647efc621b4c0b14cde6a8e469ae73a49234f4136458ffd4","first_seen":"2025-08-06T06:28:32.947871Z","last_seen":"2026-06-09T06:10:27.159876Z","times_seen":5,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":921,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/poppins/v23/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:13:27 GMT\r\nexpires: Fri, 31 Jul 2026 10:13:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 504875\r\nlast-modified: Wed, 23 Apr 2025 16:07:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-15T18:03:24.411778Z","times_seen":298089,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":150,"dns":3,"connect":11,"send":0,"wait":22,"receive":1,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/animate.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/animate.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5271\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84769,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460), with CRLF line terminators","md5":"7eb52066ffc1ff53ad28c0f1f9b84ddd","sha1":"eabfc8814ebbcf156ff7a4711b2ff2f262230ee9","sha256":"40c6a84b71ea8a4f80f22b20eb51fcf9958f8ca67dd02de3bfb6bf53457601d9","sha512":"cacd15338500c626397c09be14b92a0afb60e0d05772efd0f35a75d95b545b918e3e1c805597ada15dd4714672b861e9c21efeebf7bd54bd212b0ad434b18285","ssdeep":"192:5DvQHnFzkjRlRY9lMaazNEjzGjz1l+fl+Qr3nNviOgLnQwChMplWm8SpZuG8zAF8:5bWrOZYfYMtNCESmhj+Jjq+a","tlshash":"f083a56a2c90114456361b25c7de4e68ea3ce17318226dfab3ce588b8f71b9c13cde57","first_seen":"2023-05-18T15:17:42Z","last_seen":"2026-08-07T07:52:56.870047Z","times_seen":219,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.filterizr.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/jquery.filterizr.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 10115\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":46039,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"40a5dc41f52fbf47b7af1464ed2da145","sha1":"d13cb1146ede7bc6f1ce124df4c37befb55ad336","sha256":"d5dcfce7c6aff65ef8b32d4a488d21a768f2aa7de2713059ddf43696ece03002","sha512":"b13ee74fb5a26fdfc600af6b6023499198fcce4f606c098d5708ab32067d2bc80a05f676f5ec7cd422cf360e4ca7831da1a517f15e8c7ffd26d0ede31622d74f","ssdeep":"768:RVuuc4Hh62LLE3v/ic6eICdXnj7L9wS2skeXfmMT2T5:DhpE3v/ic6eICdz9wS2skt","tlshash":"2e2393582de3162990237679eb9f714bb23a8207111ddd40792e67906f56b3883f3fe8","first_seen":"2023-03-12T08:55:53Z","last_seen":"2026-08-09T12:02:43.588528Z","times_seen":251,"resource_available":true,"data":null}},"time_used":918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 00:43:38 GMT","end":"Sat, 04 Oct 2025 01:43:32 GMT"},"fingerprint":{"sha1":"22:68:E8:B5:F9:E4:CF:80:A9:38:68:74:E2:0E:38:8C:C7:F9:CD:39","sha256":"70:F5:91:15:CB:2A:27:6C:64:F4:98:58:9E:AC:E2:89:49:53:80:C3:41:74:71:13:8A:57:E3:C3:63:B9:7E:ED"}}},"request":{"raw":"GET /flags/svg/en.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:02 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nvary: accept-encoding\r\nexpires: Tue, 04 Aug 2026 04:13:34 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 180868\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O8uJuDNJhWigc8q1MHmOY0N3dsI9Rf8j9O9KlnNP8Qlq%2BhZjOpTSrD5LxubkYdFw9ycKu2F1BOtFToBaxq%2BPosM3TNTdA0O9UvRXlhw%3D\"}]}\r\netag: W/\"639d0089-35e\"\r\ncontent-encoding: br\r\ncf-ray: 96ac78cd6b4f569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-08-15T17:57:02.925672Z","times_seen":14002,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/logo/logob.png","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/logo/logob.png HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 07 Apr 2025 12:23:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 709960\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":709960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 11304 x 3581, 8-bit/color RGBA, non-interlaced","md5":"fa231ad0995d22af7b7ad37c92a4c957","sha1":"a02b0ce369e9163498d2af1e96c459814fb51ee6","sha256":"62792dbef0af68429ca70e33ef5c67cf662df89a96d2ead76d88894769669c24","sha512":"31324e925112a1497504d043e83eb89e409d0fe553b30896b6ee1f884c5dc1f177e2d201c912dc15017bebf28f5b6f6ec5fbfbe7fa6022d6fd1cf2dbbfc72e08","ssdeep":"12288:nk93nFUTfnL2kU+jJUnadF+yGzi494kcsfz3q4PR8eWTObir+vnzF5x:nUVUTfLPVJUnadAziK4kcQz6WVbisnzB","tlshash":"f5e4128709479fc0fe7218b8d87a6f0937bd96df09645b6727fad870be82715e086084","first_seen":"2025-08-06T06:28:32.957038Z","last_seen":"2025-08-06T06:28:32.957038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":434,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/wow.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/wow.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2572\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-15T17:50:25.089196Z","times_seen":14427,"resource_available":true,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":917,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/rs6.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/rs6.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 94998\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":379836,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64288)","md5":"ea5cf2c55fc416c211bb6bdfe2a5ea3d","sha1":"53bf239da2028044e61ac2edd5d292ca00d09726","sha256":"edc00efff9674105335e75964130281682159ea89058596862a28da1dcaff293","sha512":"b91d9697f79e57778e5444293f2311eff828052cb649eda567b92ae99c6d7a1798eb21603e19b3c2071c89f1cb12a09200374808be0b43b878c3f9366c5099dd","ssdeep":"6144:3hYyXmh3kB5H4NrCXH2sL++DGWjkTCgB8GBFz3gZbQ336D22tiht:RbX4QH4NwGWUB8GBFz3gZ0aDFs","tlshash":"d0844de9a531386900fb4397d05a44147375e96aa3078490b2bbe2695c5ce8e02ffffd","first_seen":"2023-03-07T01:10:19Z","last_seen":"2026-08-13T15:00:10.961438Z","times_seen":1336,"resource_available":true,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":933,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/fonts/flaticon813b.ttf?54617465a4b56bfe6058ff0d8a8eb35c","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/fonts/flaticon813b.ttf?54617465a4b56bfe6058ff0d8a8eb35c HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/assets/css/flaticon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 06:28:02 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11020\r\ndate: Wed, 06 Aug 2025 06:28:02 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20104,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, flaticonRegularflaticonflaticonVersion 1.0flaticonGenerated by svg2ttf from Fontello project.htt","md5":"0282f86e3660baa4febfc8c7f76e4e5a","sha1":"5ecf33eecf6588ab1ee4029a6305a87202d42c58","sha256":"d6c9721454614959a043ce7aabba0901bff6d743d1eb7493fe0d77883b6e8419","sha512":"ae50b0ae18cb8fda6453abbf0a2d6feb5502ad15d3771c8b5b5a7340473e6e28823c66f5bfda61e658832cd20229d23a5fdcba6624125f073bd974fdd001722f","ssdeep":"384:rdvfFoCbkD/5AgUh0dPo9rGpWvgPHTFA4iLYe1k9KOh8vr4aB+N+K:JvfyD/20JEGYvg7W4iLJoB6vr4b0K","tlshash":"69926c7ba3af0d3bd15a99bf5c90c2298276799053436ec3ae9d622cd4136c41ef072d","first_seen":"2023-05-25T18:35:57Z","last_seen":"2026-07-30T21:34:49.765277Z","times_seen":78,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":499,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/bootstrap.min.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 20270\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":154903,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"c152bd17fb24d928525a5aaaffd9f042","sha1":"aaa0ba2a732dafcb34e480f303744c2913687ea4","sha256":"9180f20062dab5950a582d5b5076c9578d01119ecd8334b71cbe144435ed62df","sha512":"5bfd5e0df33dcc6dd887f634167fff7fd8cd506c5e3f506f57b0211295143b7e453342959422d5df51098c047906e301978f71694207c67520d21de22ef10a92","ssdeep":"1536:4t64783RipVVsEBpy0cuJcr22WWp5CyVUpz600I4fM:4t64RyVUpz600I4fM","tlshash":"82e393d7f581241dd4a7c219a4d1bffd052f4686e3025eabb0277bb88b4a6c70963e4c","first_seen":"2023-07-23T23:38:54Z","last_seen":"2026-07-01T02:22:55.818247Z","times_seen":42,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/service/ser4.2.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/service/ser4.2.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 46791\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":46791,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x290, components 3","md5":"37223ccf75392ac327210d6dbcb2af32","sha1":"71da303e728401dc93986cb1b16f69bec9d5f859","sha256":"b8b38a586691f8ac8599e863ac43fbbc7d73cdf889c65ca36da47d011c76eb39","sha512":"4b53126f71994f42696bb90da62f9f78c9e5e2865efd0f80e0c745ef28e9c3d9cd34017041b36cdd4963ff4ff8a4f1b23bba3da5b444e5eb71024efd757fb59d","ssdeep":"768:pfk3iN2JyGwNI3QB/tiQaVbtuP/65VGZYY7k7AKyMtBvLu8FvME7ldYu0tP0hL1S:mswP3atin/uP/65VGZYpNTFkMdYntsh8","tlshash":"d72302c7005873c1ff7bd8e97675e116cda5189c0814ef84ba3ad60c5cb2a3d4f8a568","first_seen":"2025-08-06T06:28:32.968428Z","last_seen":"2026-04-06T04:39:44.180994Z","times_seen":5,"resource_available":false,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/testimonial/tst-bg.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/testimonial/tst-bg.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22984\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22984,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 387x231, components 3","md5":"d2b6c0341665fad635021e0be011c5de","sha1":"3bc276030c074c7c99aa552f2142b90df2666b88","sha256":"0b1e16a91af438b1b74366c3d27f8b4afa1736c060dedf5344e414df8aa6b975","sha512":"17b6d8c6e906c813daa3ac057f8fe4c07e33dbdb5f491d35a55dbec4e66c44bc4d7f2b0dbe841bea52fdb557e22893ad6a03b152be3a5bc788e9f50064d9528b","ssdeep":"384:1jIea30J4Q4hoQGvRXx/Wxs0JItmfuuDc+MXN0gpkn+:ae00yQ4hoQissXmWugnXVpR","tlshash":"13a2c07097931b23362f967954fb4aaeeaedda30654161e7b4b08c62c9f15cc0d23463","first_seen":"2025-08-06T06:28:32.971224Z","last_seen":"2026-07-01T02:22:55.828126Z","times_seen":6,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:09:08 GMT\r\nexpires: Fri, 31 Jul 2026 10:09:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 505134\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-15T18:03:34.564215Z","times_seen":965911,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":230,"dns":9,"connect":8,"send":0,"wait":8,"receive":4,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/fonts/fa-light-300.ttf","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/fonts/fa-light-300.ttf HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/assets/css/fontawesome-all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 06:28:02 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 245620\r\ndate: Wed, 06 Aug 2025 06:28:02 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":493688,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"83850a424941e57871549f4b733350cd","sha1":"f50eacf03aa2462f183c350a8414a7dc99c08080","sha256":"ae50664bfe3069eaad27e5e10da2c268f9e45cf8dc70368f24164081ef8a5a13","sha512":"94c9881d0183f69911bf812bb23cede31b596528d5b2f893a337b4363ce457ab5de4193d4935004f6b138d3d8b79f5b2773c15854b31de29385375e86b548775","ssdeep":"6144:zJ6IMPmuOQbNg2RwKKGdrPKzh/nw7F0sZ3PnH5jG684ku+k10CQgRUZVKxAIs59J:b6NmY7C+41AeMHb7hRGOg45na7EyjP","tlshash":"94b46c5df7df8f5bc297e67d9f80f82221d02e25328137d2ae47aa1d60569c884f091e","first_seen":"2023-05-18T15:17:42Z","last_seen":"2026-08-11T00:45:32.51355Z","times_seen":324,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 31 Jul 2025 10:09:08 GMT\r\nexpires: Fri, 31 Jul 2026 10:09:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 505134\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-15T18:03:34.564215Z","times_seen":965911,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.smartsuppcdn.com/files/agents/avatars/1098585-qdLZD7BydK.jpg?size=80","fqdn":"files.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:16.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /files/agents/avatars/1098585-qdLZD7BydK.jpg?size=80 HTTP/1.1\r\nHost: files.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5622\r\ncache-control: public, max-age=31557600\r\nexpires: Thu, 06 Aug 2026 05:57:51 GMT\r\nlast-modified: Thu, 08 May 2025 00:00:15 GMT\r\nx-request-id: 49636770-728a-11f0-9114-ada41b70067b\r\nx-version: e510ece013222d284686eea2744ae2b6c36edcfc\r\nx-77-nzt: EwgBuUwJGwFBCAG5TAoMAUEMASUTwjEBtyEHAAA\r\nx-77-nzt-ray: fdb54123ad5affc700f69268d2dee525\r\nx-77-cache: HIT\r\nx-77-age: 1825\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":5622,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 80x80, components 3","md5":"d258386400a12afa2db769031d31cc42","sha1":"bb75c786246884172bddb2eb0849c0049cc56d25","sha256":"1b8bb019a981d3588f5a2404ef2564744cd8e5289fb8e7258f6fd528c539aae3","sha512":"c2d258026891d284f08746d2e83b46d851df5d6513d44013d99938da8c67c4e3a0052834484c635aed7d0b70ed2ac1a150517c19f6b0309b9e2325c848f96e19","ssdeep":"96:5Z/014+mbkfQCA6sU7gxyOtHQtrv95rNGh4MB9xH7SlQRj7CN6/h:3n+FBoypzrk/H3j+N6/h","tlshash":"f9c16d96789e46c4edb334361501f29a669a7be7a21bcb2600f0240dc6e5ac529b3b48","first_seen":"2025-08-06T06:28:32.974261Z","last_seen":"2025-08-06T06:28:32.974261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":36,"dns":8,"connect":7,"send":0,"wait":42,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.smartsuppcdn.com/files/agents/avatars/1098585-qdLZD7BydK.jpg?size=80","fqdn":"files.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:16.586Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/agents/avatars/1098585-qdLZD7BydK.jpg?size=80 HTTP/1.1\r\nHost: files.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T18:04:43.295591Z","times_seen":17905706,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-06T06:28:00.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":41629,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (397), with CRLF line terminators","md5":"2ec910b23d4cd501b5afaf48c411b2bf","sha1":"a8ee81380a8e09995038e216e24d97ab67038a94","sha256":"9bd1fe41cc87c483ec8ae30bedf94eeed478b8e02bae97f28b7cedb0248228b9","sha512":"96c09e12999ee5375917e6fdede0fc922c471bd96bfd9e9569a1778d69932b52af2c9f29b89f656eab22900bf4db2c02dfd7316d25433b144b3837835e16bda2","ssdeep":"384:KEdu3/fhLqqzgS1A2LyCGvpSt4bqe2p3FdqL37cJARqLusJARqLheJARqLyicJAv:KEdtb0IxwoKhool73x6bMGLnrwQ8rc9d","tlshash":"63136225349d947f000756d75534238ae0afdeb2c72794aaf3f923372bc2f88690b566","first_seen":"2025-08-06T06:28:32.976506Z","last_seen":"2025-08-06T06:28:32.976506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":315,"dns":87,"connect":107,"send":0,"wait":113,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/blog/blg2.2.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/blog/blg2.2.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 32301\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32301,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x231, components 3","md5":"95a9470533a0e73ae42f7acd7d365cab","sha1":"4cdc2c252e68352e7502c1d4eec82e36b669dc15","sha256":"79cef031cf198290c37092d147e5ef17815e095f1d1e2529b48e992bc6d99899","sha512":"c9619da787e0283b950617d2d3afb24a955399815a7964c41cdbba69ea5fc83d7c816e6aca99f15db9fa8440550083a8bdeb92b76962a1ddfff5712365a0677a","ssdeep":"768:7yTzFIE0FqNVuKCubxeSevtwa32v7B5qnQ:7yfFIzYNVbnbc5lXDnQ","tlshash":"27e2e11de265a719064315e825b1c3e7414f9fb0f2a0ce8dee6e789d84d58b3e107aec","first_seen":"2025-08-06T06:28:32.978419Z","last_seen":"2026-06-09T06:10:27.189738Z","times_seen":5,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":920,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/popper.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/popper.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6644\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19188,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19015)","md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-15T17:50:25.047219Z","times_seen":111288,"resource_available":true,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/rbtools.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/rbtools.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 45472\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":123959,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42889)","md5":"04f0a5790668162c9241bfd598d6400c","sha1":"dd55a501364bbd8a0b43eca3cd681748cd89a03e","sha256":"463f24ed151c0bc8775c09e92c3885fd96dc17f1e91ca64d70f3ba9600e0eb86","sha512":"2f800a0eb7c2e2f7e7ae6b5d75be2cc5b92e54d6aac3a0ee1955d43cec43f7283bec1e317f0323a5eb1872b728fa5628bccf3140407b18f729b881201a6eef9f","ssdeep":"1536:AB3xC9/I/66Q1+sxBsWGXkWRqrlv7j5E5L3M8s+Adumi8IyyJTBwvrZ9IHsUq0Kv:a66U+9UWRW7CK8s+muaydMr/IMlv","tlshash":"06c33cd87151b432029666a5453f0a0ff23b9d19750b852cf328e4c87d389a991fffba","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-08-15T17:47:13.589642Z","times_seen":4439,"resource_available":true,"data":null}},"time_used":932,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":918,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/fonts/fa-solid-900.ttf","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.ttf HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/assets/css/fontawesome-all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 06:28:02 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 183666\r\ndate: Wed, 06 Aug 2025 06:28:02 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":387440,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"792524e4223bae7c8372b91c43ef9df1","sha1":"ef40127e460850ddf6ed34a3308f453c69604f16","sha256":"8c96e5fe3f7ab8b3736f797feaae2838b10f28441ce640b41a5285fd0dcefde2","sha512":"17f1220aa5ec56ba6e4e08ecbc560c9735afa8178e55d3c86c4a68118925ccdf7c69d9941911c08acf28b17ffe9fd673f50cc7dd6df3a95157982c84bc2689c4","ssdeep":"6144:rkYJlVKMcngODpG2BD9QFY9jj6FwRDExHkgQwAjyHacGSpGu6oM6n:P8LngODHPR9jjb9EpkbY6cVpGuz","tlshash":"bf843bee769fcf67c15687bc9fd0bd3221e01f20324237e2be46991e60665c4a5f052a","first_seen":"2023-05-18T15:17:42Z","last_seen":"2026-08-09T12:02:43.552509Z","times_seen":278,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/video.min.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/video.min.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3685\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13676,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13676), with no line terminators","md5":"612c6f10370317af8602b9b43ba9c551","sha1":"9c3a9a083c4ad8214f7bcf221c9756707d101004","sha256":"87116cf6e6b4666752a9414310c659a3e1abf0677ecc7860fdbd224a2b04eb3d","sha512":"9205a99e378ac6b16ce93c170100c0ac4b1847ee45dcf1e09223b626cce1b794a4ade6b66fdfcb678e41f950d83128cd6ffbdcc92a1c8fa06adb559d24b06f04","ssdeep":"192:iQejEDICrFq4wGwZzPZ521ZGRGCHK3/jiKCO7EWPWNjJDDXZDi65DRzeqMk96Whc:rkRCMZzPkGR4L7PId7E9","tlshash":"e252a5369544223ee637c566b5c3eb8d31269173f52317fbdb6ae439c6ca44e2123708","first_seen":"2023-05-25T18:35:57Z","last_seen":"2026-05-12T09:54:59.288031Z","times_seen":23,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/knob.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/knob.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6948\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31432,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fb9ac572854ea095f4ef4290c38843dc","sha1":"b8aabf82a32f98e231d5dc3921430eb6bf9a46b9","sha256":"e6cc2c3012c81c03910615d530e84f01ccd88dfecd320210ca4d3c217f539f9a","sha512":"1653208eb5a86a1ff5ddbca0db99fb01e8ac140c4fe185c0ac4fd31154ff8c029bbbbf7f85012584a3028d153531916683303f930c1a1c8475580739176caab4","ssdeep":"384:s7Gk75aNp/1SF3eMS3aPWhMFmyHo44BDJuJ0jRCaVAfV2wcZTIiTZkAFYCXQWQT2:NSF3eMLToBWuTIiTZkAeU0cf","tlshash":"08e2f04f679e2176c932636a8f1b524deb22952f0603821e3dbd96d41fb08345366fbc","first_seen":"2023-03-11T23:21:21Z","last_seen":"2026-07-30T21:34:49.729863Z","times_seen":132,"resource_available":true,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/project/port3.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/project/port3.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 87087\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87087,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 473x500, components 3","md5":"e9a51c134c23c3fddefd8342b4bd8871","sha1":"d1c1ac6cf87e30ff63a6d8bffc6aa5ce0bd76139","sha256":"03ddf0212c9bf0554356212e9e7fc7d0d9151b461c1adb62f7d639fe033c6843","sha512":"717fd0c295ec54a87dc14287a770eca84f71304b3f44a705606190f77f8e9a5de4f0337d235d52f88756f5539e8b818addd9fc4f0aa58cfaffbde4868bcdc3ac","ssdeep":"1536:2LOWqNgoacqSGARJMkogqIMMK6m18Zdpr9ysGA4Gc/oIZKSlG+eSW/K41JHgj/9:W7qNg3FjA3MkvMMXm18Z7r9ysGac/o+d","tlshash":"d583022a1d734556cf8f3dad8e65d624bf5ea0b18ccb109109bbe4bb325c874d81c36a","first_seen":"2023-07-13T00:59:03Z","last_seen":"2026-07-14T08:31:57.957413Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1027,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/testimonial/test2.1.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/testimonial/test2.1.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3243\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3243,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 70x70, components 3","md5":"0a30d9c3c9caedf222b8ab6c2375e88b","sha1":"778bdf81aaf16ff53fb61b771aada125db5e468d","sha256":"28361ddc48018dafeaba30e819044bd4321932763646ab2c8f59ca36cb170d70","sha512":"a47d99172783a95e971aae47c870541ca533bcae48481ddf83de88aee9888f90f6523fe530c6e302c9e75419be02e47b5680e60899f3196afd7dad3b7425921b","ssdeep":"","tlshash":"64612b16cf976702f25eecb219f7e16f2b241481a2b0e0009c79d462ac610ff684a2de","first_seen":"2025-08-06T06:28:32.988924Z","last_seen":"2026-04-06T04:39:44.175167Z","times_seen":5,"resource_available":false,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/blog/blg2.1.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/blog/blg2.1.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31066\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31066,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x231, components 3","md5":"10a3c42feb94a7706606b192bce1a42d","sha1":"e22f6dff1cec9ecbb4c34327781fd03e7009f90b","sha256":"8ecfcff23cd9be254b529b11c9a8aac696b01f64a16c48c759dd40e1c2a57b6b","sha512":"16312fae75eeb42b880407f9b4aa994826f0b91c43b167bf78c001834074ace6412d51b493637cd2bbe4955062ad0fb8b945c4c2a948d08c86d6146947dbe553","ssdeep":"768:tjYcu+KY24dF+r9IzsYR0Ir83HGLyILV+QiHs/Zbx:tjYcuJuFI+zsYR0GWHGLxJKOx","tlshash":"00d2f13bbf891b01f0e2a72169bdf2240d02c9dd57debad6497c06910065bbe91bcb41","first_seen":"2025-08-06T06:28:32.990168Z","last_seen":"2026-06-09T06:10:27.155926Z","times_seen":5,"resource_available":false,"data":null}},"time_used":921,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":920,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/script.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/script.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3560\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18648,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (309), with CRLF line terminators","md5":"3a330903aea44945dc002a985dbbf6a0","sha1":"7aa686149fe153a8f2a4c9317ea90d39783162e5","sha256":"ce3edf64fc4ace6dfdb942ce824fd2f8b9969e0db1de00c57989581b8036134f","sha512":"547e94cfa2e49e39ea3551bcbe5f6eb3523bf58562f5dc1b544cde2d3dea68a29907ab2ae3758de9177a7a2c96e4a4b2d0b4978b1cccd25cfb3e3e6b18d46193","ssdeep":"192:cEh8AdK+JwWTHkd8Jra9nHAkW6+N9BxANsHPHwPmWK+ddq9hIb/clbcJLXSx25kI:Sd8Jra9HN+XINsHvwa+6YIcJLXe2q2T","tlshash":"f4820ec2bf4d70af85ee9324a13ed74bd95de531d22240b7f2ea3c2491a095b039d5b8","first_seen":"2023-05-25T18:35:57Z","last_seen":"2026-07-01T02:22:55.838436Z","times_seen":24,"resource_available":true,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/logo/ficon.png","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:03.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/logo/ficon.png HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 07 Apr 2025 12:23:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20418\r\ndate: Wed, 06 Aug 2025 06:28:03 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"7499d010a0ec658ba29ea1b79cc10cb8","sha1":"f81f91142949759ba32b21093b5e2c4c272e24cc","sha256":"9ce30dc098765f5b07c4e4c6389bf2e397673ad2a346adbc69ba500bb10095ff","sha512":"a9706035542a929b1a9664f73d5283bf2e78cce9b5266a2e954a233287bf1b6b933714d22a13296cd2b96316b14ce572c00a075910990c3241e5a960afaff7cd","ssdeep":"384:KKnFn5z5qWwwGLIowlTRWniG7nxw4m/vNGlTBxJX3GMo5/VO:Frz9wDLklTRWniG7q/1x9Vk","tlshash":"5792c0b3818d0ba9e28f26d5534531e19e6fef942b1de3923851e5f09b103685bcc563","first_seen":"2025-08-06T06:28:32.993871Z","last_seen":"2025-08-06T06:28:32.993871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/project/port4.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/project/port4.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 85940\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":85940,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 473x500, components 3","md5":"07f7d62a240c89ee58535a05478946da","sha1":"688d4337809dddfbed698db93569aaf69eabc610","sha256":"e674ecc382c713271a0022277b028e20167b7daf4f888077f2d344107f3a12e7","sha512":"550f3382fc058a0fcb59fc17d1e23402c3340ab8d2633f83080df2adcbf5852d6833cf27933f0e476e4be91d0fab425af7aca0dd4afb95b81d728d34170b04f7","ssdeep":"1536:a/WqRM9RyTEQ7e6M2RKQby3ggWsHuegRbVtaMdLJdbsWUq:a/wMAQ69QbgggW1FlzdbrX","tlshash":"7f8312a0a077cf4b68be873071f179d0130975b95f494902a7f85532ac2a69eec6ce93","first_seen":"2023-07-13T00:59:03Z","last_seen":"2026-07-14T08:31:57.896256Z","times_seen":11,"resource_available":false,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":888,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetPopup-BpQ42P8Q.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:16.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /assets/WidgetPopup-BpQ42P8Q.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget-v3.smartsuppcdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"68873fee-16af\"\r\nexpires: Tue, 28 Jul 2026 09:26:07 GMT\r\nlast-modified: Mon, 28 Jul 2025 09:16:30 GMT\r\nx-77-nzt: EwwBuUwJCgH34LILAAwBuUwKDAH36wAAAAwBJRPCVwG3BgAAAA\r\nx-77-nzt-ray: e2f75420d781027c00f692683fc11f1c\r\nx-77-cache: HIT\r\nx-77-age: 766688\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":5807,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5757)","md5":"7a781de3697961f5d9ee2eeac651d591","sha1":"c53a8033a8baaff6d1e3d626ee98ec4a2aadd0d0","sha256":"23d7732ac0b01dec11ba60d1713f861315660165ed8bf22ad5dea9c8a55224d1","sha512":"04af1d3ca7086944143fce45abdd79927850a157ecfc0fe51aa05f5457fa9dbd89b023cd98359598a1119d977306217b836c669e3b21d010fdbc73403f139320","ssdeep":"96:2Xe5XRyV0lCQko/zbWirDJEwV+cwdrN11i73YY6Dx5iWIQ4dJrESUtyDTv:yBylCQko/zb/FEs0rJmoDDG6dsDTv","tlshash":"33c1ea4d2696213bbabae494f43cd293b60cd1c5a58bc93c8a2fde4476d4d8055e33f2","first_seen":"2025-07-31T11:21:35.984142Z","last_seen":"2025-08-06T11:26:31.679219Z","times_seen":11,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/about/ab2.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/about/ab2.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49305\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x564, components 3","md5":"2546955f09c6656e097fc6962bbe7d7c","sha1":"a9c74cabcd7d5fc50e4b07bd38ca1f5fb3a1c772","sha256":"91644f7626b86c1edb7be4763ca983bce6fa808ee0d1a972349435f308fc9549","sha512":"c1bc6063a0155ea03d348ffc210a34ec51632a222a2d88d168906e3da36f4c9249e4011e580ce1a08ab2e346a7d36089105c70fe53bb7d1763e504147461d9a5","ssdeep":"768:4X4x22fByHeL9dlxwPbJvP0d+zEICFAlAiAOA9l6yA7E7enjGNteibDNjdr8vRjI:482Q84lKPb16+/AijAXpA7IejGHeK4MN","tlshash":"722302816a7d21ea478e5cb18c73dacd8c621411eac4796c5c3a1c952d85bfe33275f4","first_seen":"2025-08-06T06:28:33.000059Z","last_seen":"2026-07-14T08:31:58.003501Z","times_seen":9,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/logo/logo-white.png","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/logo/logo-white.png HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 07 Apr 2025 12:23:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 930617\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":930617,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 11304 x 3581, 8-bit/color RGBA, non-interlaced","md5":"fc44dcdf9352955f8a01919e165c76fa","sha1":"a5948eb9cd342b766e1a454e7d4e085f60e2eed1","sha256":"9244fd310234f2611025183067f3c42f43909d61eb60bda5bfef0079cb49ffaf","sha512":"09d4b4de57d77ebe61b226877c32c778c1cfa778e430c7f0163b455cfda1ad1fa85149eee69e77395a5464ba1326aed5c510250622ad605bee004389c41a547a","ssdeep":"12288:45s59XUv/9u22nRUruDFSjKA7SAfLZeug4vrK8CZPUeIO4Lr0sMeD55tIrDhPZZR:VgH95vyKn7S2LZe6IZfIO+0sN53abL","tlshash":"831512cfca47ccd0eea69438cc492f5db73542ad9451079a23fe85f2feda21d906019a","first_seen":"2025-08-06T06:28:33.002125Z","last_seen":"2025-08-06T06:28:33.002125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":490,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/project/port1.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/project/port1.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79760\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79760,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 473x500, components 3","md5":"b4b24e377e5dcf52f0f47b39966f059f","sha1":"178050e7219235e2074da79d8b8097eee6faa968","sha256":"19df1c89afd2fdf751ce4a15285998100619496a8ee2bcd2899d8c1391b7a2a4","sha512":"ac386bf75c42b636cb84dd3356a816c8823e7df2fdfc4ba47c4968f9aaec697e969fb410570f11df04e5881b6990ded9fd776b2c8be49217a16647c183219b59","ssdeep":"1536:0iMWAvDxd5V+OWz6ZFU2pIIz+0EMy2pq1HWr+HTL1b+wq4GbVSCYgKNpTmGJ:/MHvDdVszwU2iB0EMyDFWrkF9eVSCtB0","tlshash":"8f73129bbc1843f39804e6bf62368127d3a78d266de20be3067b5073b5724562d66c2d","first_seen":"2023-07-13T00:59:03Z","last_seen":"2026-07-14T08:31:57.886985Z","times_seen":10,"resource_available":false,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/testimonial/tst2.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/testimonial/tst2.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2681\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2681,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 70x70, components 3","md5":"d5a2d9448b052751199159a6089da622","sha1":"80310e5ab92295cce8234d87397cef740571a14b","sha256":"a1e8ba8c814257b60684233165ced84b79c925115a37fab58129b4c2d76ae343","sha512":"8a802896f1f2015ddd4e1cd689c8675ce100c192a32bce89e074057a229e9db711d0406dc4436fef6c94b6ecce32d0936956f8b8792744a839cee9788df2bd92","ssdeep":"","tlshash":"a7510b0efda15b02e66934a63cff903b8e109680e4c49547c9f8cb5e79344b31c09bc6","first_seen":"2025-08-06T06:28:33.006864Z","last_seen":"2026-04-06T04:39:44.18322Z","times_seen":4,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/waypoints.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/waypoints.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2461\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8044,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7808)","md5":"dfe0eedf8da578f4a4c43b05448c51d9","sha1":"812d7071b4e44b1aa5d5ea6c7ce0b79eb9d46520","sha256":"a0fded691aed767f851011cd3185b928619298a21a0fbdad4808a9e88b490833","sha512":"9084433d6201a0aa45efd1c9bf7c413d08192a3871cea3061b637af2cbef21de39c3dbe9fe14d7a11edc0c44588551212c94ee4866ff737f991e07907cb9b41e","ssdeep":"96:uLBvpnG3nnRh+1pRVKmHyjyYfAPiQc954LT4KN/WzdBUVKdBJEdfdpu531v8L7:uPG3nC19KWssPVpX4KN/eU8Ju4e/","tlshash":"3bf1f9c9b4c7b4221befa0b5d43f060bb33a9e4561098064f194e4da3db4a2da567f38","first_seen":"2023-03-07T01:07:26Z","last_seen":"2026-08-15T17:50:25.054204Z","times_seen":12691,"resource_available":true,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:100,200,300,400,600,500,700|Roboto:100,300,400,500,700\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css?family=Poppins:100,200,300,400,600,500,700|Roboto:100,300,400,500,700\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 06 Aug 2025 06:28:01 GMT\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34864,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1f83267ff78e74dad4e13b151635dd1f","sha1":"64396d12b08c0e54f4e4e68416a8a52619ad412b","sha256":"84aef9a8f306fff68b06949ab5626f19c7cc20fbc463280b9c1effbda74a34bb","sha512":"7c6d6c3ca63cb46045505a79eae9b07ac1cad468a87a42a3cdd749ba96ece0cc3155a7b49d9efa2c58112c19f12563939ae73af52662e62152cfe783b8a9bc80","ssdeep":"768:+xrEFHFYFZFNFO4F/LFYFgFGbyF5OS/vyqr2/MoOf/i/3gBknTOE/NkcKHuh9OOO:rZ2pVn","tlshash":"79f22da1082b9000a7835cd223cebe31fe0f92547141d0b5abfd9b6baddbc66527536d","first_seen":"2025-06-22T21:07:17.662709Z","last_seen":"2025-08-17T05:15:02.731272Z","times_seen":11,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":101,"dns":1,"connect":7,"send":0,"wait":24,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/loader.svg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/loader.svg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 13 Aug 2025 06:28:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7180\r\ndate: Wed, 06 Aug 2025 06:28:02 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44566,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"399015e03b9cec8aa59641b92e694eac","sha1":"ca2d4cdc94b66c5aa4a8ebb4b7157a5c4ca36b48","sha256":"3ffff9c8666267e8b8a569202b9c6adc0084bfb821fe3a5bfff6ad3363e0e8e2","sha512":"458184bfa1839fefb4e9eca6ff604aa16289fe5abab0b7fd8483d3982bd4fbe424a31e05ec54e3129538264afd7ec704aed58a677383321a48516fc74eabeba7","ssdeep":"384:cNYMOFeVblyMhUsiQ4mZwPaB0xWw8fqdybJKm2KFoKuVNcEbgqMUlPTGrE2XfY91:QVphr1w2RUmOP8Vphr1w2RUmOPh","tlshash":"6e136c2b03068bdafa9d4228e955144eb190d9cbe4e0f1c4bf5b2406e1dd8e9bd5c7ec","first_seen":"2023-05-25T18:35:57Z","last_seen":"2026-07-01T02:22:55.81538Z","times_seen":42,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/828b305aa8bc239a4ef9130c52061a53236dd2cb.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.124.230.70","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 01 Jan 2025 00:00:00 GMT","end":"Fri, 30 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:C6:B6:6C:12:F6:01:2B:C5:12:CD:14:1F:5F:98:93:35:23:E6:72","sha256":"62:89:5E:08:77:16:42:58:9D:77:1F:38:8C:73:AA:58:D5:ED:1F:1A:79:6A:FB:C6:2A:FF:C5:C1:C9:87:AE:AE"}}},"request":{"raw":"GET /widget/828b305aa8bc239a4ef9130c52061a53236dd2cb.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 144a363f30d9c9165f08f3a591e8e2bf34692360\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ac-CWnAMq1d4nuIH8IeeJmtgmA8mzY\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1196,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"409834810734856847dcc7f5bd6e14bb","sha1":"0969c032ad5de27b881fc21e7899ad82603c9b36","sha256":"dbcfb4b384c1f3bc3b8825063385b124ef428841efaab349c7b761785e2e810b","sha512":"8cf1bdd918a7a85a4ae1a58a3dfb97a71e4f8f4efe3b7f8155f9ff72cfd8f9e6ac6f26ddc5312fb70ec8359e0027c22bac2616c2bc41ace0b645bf26b23dd341","ssdeep":"","tlshash":"1c21687d4a6822fd5285c7d6c5047a036bacdcb371043e7de60d0a4e70db2e522364ab","first_seen":"2025-07-21T22:17:07.424705Z","last_seen":"2026-06-05T04:06:11.795356Z","times_seen":242,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":121,"dns":1,"connect":26,"send":0,"wait":23,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/flaticon.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/flaticon.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 586\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2710,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1d7db07189d4b6c989d90aab0f88168e","sha1":"91fc8c728abf5892309a610223665a69a55ce684","sha256":"21640d232dc3249fa997939448c13822cff5773a6a432521e08df33690359f3e","sha512":"6fbca5a52746364799a0780103c2137bbf7c57268ca3d8b1cf9525604ede8f21c0201d29008a64103acdc19c3a41a057082e73814f327ebba0f8db3d758421c3","ssdeep":"","tlshash":"405121a881be58804341d9c526af6204ef48712e5cc5ac5ce286bf5dffe0a14d3923dd","first_seen":"2025-05-10T18:10:25.823146Z","last_seen":"2026-07-30T21:34:49.774341Z","times_seen":18,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/rs6.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/rs6.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11876\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59121,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators","md5":"a4643d62f3dabb7834c0dc6f76c2643f","sha1":"a5727baeb023c8e2cceda1786a847ec62d624ac5","sha256":"0d50bf3d22e7aa71ccf79176cd89bae6208d026188c5ba2d2b30b01bb9060b87","sha512":"f8e0b54c1a8ed73d54db9827fb6b9bb60318f16551dab57f9d77a8f13b8b4dd834d102d3ed9f1d39e05a9d434326ffd6156d0ab29763e4190df7778d80e71baf","ssdeep":"1536:EGzVQn0kubdk0SwhpmUBzMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dHvQr58:Rw0kubHn8","tlshash":"c043c67194921da82317ca81e3ec0be46d29cd329e030cadf697321dc39e5d9567a7ce","first_seen":"2025-05-10T18:10:25.861986Z","last_seen":"2026-07-30T21:34:49.76304Z","times_seen":13,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/slick-theme.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/slick-theme.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 770\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3166,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"92ee821e5213574cab01c3b58074f74a","sha1":"3d4bd340075c8c39361f4fc86e8779d49dcab584","sha256":"0fe6b6a9b1b214d116de339e02a7cbcb3f355b9e41103a410929457c31a360b0","sha512":"9cea2ce2cefe542239df12a688e59fc29bdc615ce52ef84b72cae37aecc271faee59dbcd6bcc5aea59b8bc76a6732f65249a81f6b41ea781b63815542de7ecba","ssdeep":"","tlshash":"8951ef9856b7b742101690903be7476477cb70131229d8acfb95238d8fcd0d8aac934e","first_seen":"2023-05-03T22:55:26Z","last_seen":"2026-08-05T03:42:52.653905Z","times_seen":168,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/testimonial/tst1.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/testimonial/tst1.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3097\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3097,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 70x70, components 3","md5":"6b9bcc4885e62c7f81c587a5583781c8","sha1":"48bc7c4ddb2698a0e66717af05e10904a754faee","sha256":"66f8ee926ec86467b0084436cfa4174b56afe93dbb05156af7bcca9e3a0ce88b","sha512":"194fcd255c19ac80fbaf2db8c3c4b10de0d3a0f402e6c9c7746bc98771f2017438140bac47878cd5f717886886b8438131fc310113daf493211a31379bfa38fb","ssdeep":"","tlshash":"3751290ddb602f43e4a4283134fef0bb5f701841a485a5e398bb8215883a0b4d97becf","first_seen":"2025-08-06T06:28:33.015704Z","last_seen":"2026-04-06T04:39:44.19908Z","times_seen":4,"resource_available":false,"data":null}},"time_used":920,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":920,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/sounds/blackberry2.mp3","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:16.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /assets/sounds/blackberry2.mp3 HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 06 Aug 2025 06:28:16 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 9135\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: \"6756a2b1-23af\"\r\nexpires: Mon, 05 Jan 2026 06:50:41 GMT\r\nlast-modified: Mon, 09 Dec 2024 07:56:33 GMT\r\nx-77-nzt: EwwBuUwJCgH3NcoYAQgBuUwKAQFBDAGckiEfAbcKAAAA\r\nx-77-nzt-ray: e2f75420d781027c00f69268c6ef2d1a\r\nx-77-cache: HIT\r\nx-77-age: 18401845\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-9134/9135\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":9135,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"50af11b446ad42a4c3501aa519e44455","sha1":"0cf0cb1c4ed614fe8969fb6cbaa0d630e8fd6574","sha256":"713a1269cbe341333f360d6767939d33c6dc04754fe9028b34deb6ac59e0fc1a","sha512":"d6c1e1acaf6f1af5d3c61e1ce7143cdcd387ee9f407d67ec5ffa4bce37cd7c4abd77f720a615bd9f1face7c9ddedf41e6bca53e483bf5a26bb52cb64451e6c74","ssdeep":"192:xrTX1A8Vcw60SNVGNVhxPI+BGCSt6RfrIJC0Yf0vJxoV9Ik7DrxTP+FlZxU:lcgSNVkpBGp8frIJC2joLN7BOU","tlshash":"20123986d324918dfca68fff22afea35c556562fceb0cc15415a5788847f1027bba12c","first_seen":"2023-04-09T23:40:20Z","last_seen":"2026-08-15T10:31:41.427342Z","times_seen":819,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/nice-select.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/nice-select.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 931\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4007,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a7ace323b9fc8a831a6e64feb23fa0b9","sha1":"9317ad29306bc72eb3fa92981be8141fcd394e7c","sha256":"c13280e79f74109c5e3854822c0f0c972d0a57245c95b0b3762f9788bd918f8d","sha512":"b87b828a0726bf70724ea050404c278175a4ec4fcd68f60ff821609699173e74506d2b9b26610436087e8ad44361b595d1f519994cfb7c3ffe24375e4050f9f8","ssdeep":"","tlshash":"2781e2779b530141642a876fafd62b582339c003b826cdacbbdd960b8f0d5dc94e6747","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-08-15T17:59:39.727998Z","times_seen":4242,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/jquery.mCustomScrollbar.min.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/jquery.mCustomScrollbar.min.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5367\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54856,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f78274ad3954e0c23297db4fede8e5cf","sha1":"d5d6441588e6f3796fdef7d947becb698b05b6b8","sha256":"aa90a4b20ac6f6c553ceb82544de61e61e4e70251997e69e349923dbce754266","sha512":"9210ed5834284c28a72267734c5832b87a28c91a1c063410dc711a189813aff7ecda54c675c7403e0ab0d09fe8d1941dc121b399012d5de3d71b96735ab5b014","ssdeep":"1536:ZrjDQ3fDRHBk9aPPPAjh6y/xRwsM3ldxz7hgTXZ3wkevNdr3/wCjI6h8MWbAG0h/:ZrjDQ3flHBk9aPPPAjh6y/xRwsM3ldxd","tlshash":"ac334b4a6e0335cffb8fc569ebb13b96c5f873434111915cf0d218a8ab487b2a6bd542","first_seen":"2023-05-25T18:35:57Z","last_seen":"2026-07-30T21:34:49.756676Z","times_seen":52,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/slick.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/slick.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 473\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1729,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"13b1b6672b8cfb0d9ae7f899f1c42875","sha1":"6e9d13342a11a8cfd9e42ee243eaeae01cda4e25","sha256":"d917660c3d6f7aad32ebc4b0012c6d0bb84a13e201a012e334bcca4b9f4686c9","sha512":"58859d7505bb6c77ecd60c080982285ee89f2dbf2008f904ed9fe0abb407937a4abb18cdb3413af119f973b220e1c5a0b995b9088bd1ae84e3d86ad2c6cbd465","ssdeep":"","tlshash":"a831f64845b389464416818d5fd7ca6d2bfff0131c29a199bacd53068fceae8e9c16b2","first_seen":"2023-04-05T05:38:02Z","last_seen":"2026-08-15T15:39:41.080473Z","times_seen":14806,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/bg/ser-bg.png","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/bg/ser-bg.png HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 98783\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":98783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 914, 8-bit/color RGBA, non-interlaced","md5":"6aabcf8e9c00e0e0e168fb2bbb103303","sha1":"04187aed6fd11fc20fff6fc5a548ac9c6f65ae6c","sha256":"ae5c2b3fa5d874a25380e701ca2d7e73fa74e54a4171b092456bcce1aa6dafac","sha512":"50cf7ee1969bbe379824eb67faf8a40a10fbc76bfe33c5ab1b8601bd0fc801242861543d37ac2adc8ca38f600acfe6bb75689339f64cee5dd8b3ad277fc9d30c","ssdeep":"1536:OCKKqgL7R5kkLHrWS/Q6O9UV/LVdStGe6miATNJAlD98+KJYOT1xXh0WuVe:OGq87QkLHrWM69U3yGxATNJoDon6WuVe","tlshash":"9ca3f104749b1b7fe89f8df8fd6bcd38b7706195615433d909e46b88de6e3b28800a09","first_seen":"2024-08-19T13:21:25.226964Z","last_seen":"2026-07-14T08:31:57.87009Z","times_seen":12,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Jul 2025 00:43:38 GMT","end":"Sat, 04 Oct 2025 01:43:32 GMT"},"fingerprint":{"sha1":"22:68:E8:B5:F9:E4:CF:80:A9:38:68:74:E2:0E:38:8C:C7:F9:CD:39","sha256":"70:F5:91:15:CB:2A:27:6C:64:F4:98:58:9E:AC:E2:89:49:53:80:C3:41:74:71:13:8A:57:E3:C3:63:B9:7E:ED"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 18 Dec 2024 23:02:20 GMT\r\nvary: accept-encoding\r\nexpires: Sun, 02 Aug 2026 08:42:09 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 337552\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ta81O0EHLgB7UXbQLZoZ62RdX0cQ8Eg1GgXp2yacR9PZKaEteR3X1GoS3ytHzP8cDb3R%2BG0k4yvSWCIX5rucmfx666d4ZIOtDKp%2FDM%3D\"}]}\r\netag: W/\"6763547c-59f9\"\r\ncontent-encoding: br\r\ncf-ray: 96ac78c5fb68569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-08-15T03:47:05.0844Z","times_seen":2972,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.mCustomScrollbar.concat.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11725\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40547,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32009)","md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-08-15T10:36:17.530396Z","times_seen":4326,"resource_available":true,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":916,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.cssslider.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/jquery.cssslider.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1208\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5044,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (543)","md5":"8572850c209f47f3b9cc114b479e8251","sha1":"9098e72414043fdbedb3707bd2bebead78f2b315","sha256":"77f3d4e863c9f4e9e9b02a57a24bda2ad5939696cc08394b3fe756d22ed9da32","sha512":"1fdfdad3fd34f739d4a1a9894a34abff316cbf63947db2217fb0e3ae0a1fc1c1b8ce888ad406b25a4dc1893f473ae897a416bfe13dc439c063740ad0a0a0a8d1","ssdeep":"96:Bb7WZobkzLGS6Y98RO+IdbBQ7+1d5LhNN3LhWKH8C75pmJLhwBp5pmJLhs29AtkT:BvWibk7lFV69AtkT","tlshash":"b9a17307b3ac5b5586ffe2c108d9880cb07dab68dd40d00db1bca7c958da8465577fba","first_seen":"2023-03-11T23:21:20Z","last_seen":"2026-07-30T21:34:49.754404Z","times_seen":145,"resource_available":true,"data":null}},"time_used":932,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":932,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-lGOJV2Cd.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:03.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /assets/main-lGOJV2Cd.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:03 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"68873fee-41fca\"\r\nexpires: Tue, 28 Jul 2026 09:26:07 GMT\r\nlast-modified: Mon, 28 Jul 2025 09:16:30 GMT\r\nx-77-nzt: EwwBuUwJCgH3rLMLAAwBuUwKDAH3GAAAAAwBw7WvBgG3AAAAAA\r\nx-77-nzt-ray: e2f75420d781027cf3f5926845d91510\r\nx-77-cache: HIT\r\nx-77-age: 766892\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":270282,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28849)","md5":"c080929ee5b9b8b7dc5d95e9b9eec0f7","sha1":"7bfee99cea3e7e33066a81046664fd48069f7f69","sha256":"bdfe5b581aff3b7b9bcda50a9c6e6a2f35666fe27513aa76b1c7a8b37cf0173b","sha512":"148559bd64d128376c21689658c6d9a0dc38518f5e52c8632d3551f03d480d9bae66958712c631a0fb1f0eeab46520d9e9ac79721ecc79fc576c77f67cb3a26d","ssdeep":"3072:CQfUXVejVfkdxSwVBVmMdgwYVPVF/z2ih1gPn4vFSC/0niYYu2g3QuO+jf/oNg9/:XsPn4vFSu0nLT3QuXD/oNgoPLwvwFe","tlshash":"fe445ad471a5703543a700e5607f1006b23e5c29a849c068f6aeddf67db99c8a2b7fbc","first_seen":"2025-07-28T09:46:38.948067Z","last_seen":"2025-08-07T03:39:22.606026Z","times_seen":285,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/css/fontawesome-all.css","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/css/fontawesome-all.css HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 32605\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":211752,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"390c778244f509e677c48f65ff039042","sha1":"8faa8a045a0277705d3b5cd6f5b6f5c29c075eb0","sha256":"34e2b362b8cd7091670c2484dd2bd09972d071dd502eee7ccce4349c35a6fac8","sha512":"70fc2255a3b5dcd3addce4185a431ba641d4a3d03fc8b3d24302231588676ad6b49473227cbc7653be44074b7a08e34bd157db9a641fd4b0e635e40a00918e9c","ssdeep":"3072:niiUXRdtprrAsUa3JQDPFNnk13Y/xx0kSc2QexA:2XRrprI0k32QN","tlshash":"9e24edfa91fe00684306f4851203e2b0b375f66cdc4a4d5992e6bc9df5e5b4ca18abcd","first_seen":"2023-05-18T15:17:42Z","last_seen":"2026-08-05T03:42:52.736508Z","times_seen":173,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"18.159.79.183","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:03.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://riverexpressdelivery.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: XYGCGMx0NPOX9GRdwmK5uw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 06 Aug 2025 06:28:03 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 60ThPh5S2LcpFh4kxrDkZQcYmuU=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T18:04:43.295591Z","times_seen":17905706,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":88,"connect":108,"send":0,"wait":23,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:03.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Sun, 16 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"F8:69:46:5B:91:2C:2E:CA:94:48:1B:4B:A4:21:4D:B9:48:55:E2:FF","sha256":"6F:B2:38:92:36:6B:54:7A:DB:D1:6C:60:C8:1E:67:C8:67:64:D9:14:BE:4E:72:47:9B:32:12:16:2A:47:4A:09"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://riverexpressdelivery.com/\r\nOrigin: https://riverexpressdelivery.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 4faad7cbc61f201e7592bd2193a44fcebb277e5e\r\nx-77-nzt: EwwBuUwJCgH3MAIAAAwBuUwKEwH3AAAAAAwBnJIhJwG2WQIAAA\r\nx-77-nzt-ray: e2f75420d781027cf3f59268259f191c\r\nx-77-cache: HIT\r\nx-77-age: 560\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7011,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f71cbd41c0cbff277d0920c46c1300a","sha1":"6165ffc1d5ddd6b132180f05f5ecf915475d4477","sha256":"7395a5d00e656c9d8401c7a117f179033b5db6d90ed820913cd058384c9f84e5","sha512":"78c4830b0740df37fb17f4cf6497b03134863ca7844a8b137a87739301bb1d1cac920459979b176b23fc7df1fd0c0ee57318214b05ab746b8af993e5317a75a8","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/L:Al3GKYKZrJA2Yg48fXPdeD/L","tlshash":"7ae1b74f9a144da987c6438276cfb84675bc80734250997afd8cc8b852797cd63e3b98","first_seen":"2025-06-17T03:42:07.109827Z","last_seen":"2025-10-06T18:30:30.166524Z","times_seen":2514,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/js/jquery.counterup.min.js","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/js/jquery.counterup.min.js HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 05 Sep 2025 06:28:01 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 496\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-15T17:50:25.062311Z","times_seen":13110,"resource_available":true,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":923,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 04 Dec 2024 00:00:00 GMT","end":"Sun, 28 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"5E:7A:A9:36:B1:77:7D:E9:4A:88:DF:57:72:66:9B:49:8C:C2:1B:7B","sha256":"5B:82:B2:0D:AE:78:68:58:AD:62:AD:72:F0:D2:53:96:BC:77:BA:01:A6:44:FE:40:68:2B:94:C4:F0:C0:C0:C3"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 06 Aug 2025 06:28:02 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"68631292-46dd\"\r\nexpires: Wed, 06 Aug 2025 06:32:57 GMT\r\nlast-modified: Mon, 30 Jun 2025 22:41:22 GMT\r\nx-77-nzt: EwwBuUwJGwH3BQAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb54123f251440cf2f592687af8dd07\r\nx-77-cache: HIT\r\nx-77-age: 5\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18141,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18068)","md5":"b67300767490ee626178325c8efa3b14","sha1":"4378b772ab209e5280e60af15dd03414f2578f3d","sha256":"e3ccd7d38ffd01f14809ed081950d4a8c964d31fd6abb90a4433fb3574b9c8e0","sha512":"3c8acd1d71e685e71b69de130506fe13326f0908310caf3ac0bdf205cae4824c0dd0ef54eed3a7041cb37bd623308877df76973a28c8e691904e055e46fa706f","ssdeep":"384:fUx/y2k3g7xT7dWbEelfE4YYdWbE0rIcvCSI/a4GUpG:fUx/y2k3gli84YY8JeabB","tlshash":"4482a5ccb791a16543eb61b4843f710ff237692970098821ba65dae13c7898ee037f78","first_seen":"2025-05-05T10:50:11.676089Z","last_seen":"2026-07-27T14:00:09.825615Z","times_seen":9281,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":48,"dns":0,"connect":13,"send":0,"wait":13,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/bg/slider-bg.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:02.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/bg/slider-bg.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 525747\r\ndate: Wed, 06 Aug 2025 06:28:02 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":525747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1907x981, components 3","md5":"9504f6f806429aaa8514f6d2645b1e04","sha1":"b94ab0c657a8fcdeaf744e7eb82bdceae553a69d","sha256":"1d4a7afdd3a8a8603208c6a22e22fbc6db545c03bcbd36bb276b0b498d61db7f","sha512":"fdfd5c45c1342ee2f61d0d715a5f141fba087bbf4a21d6f2aca8e10cd8a358a23151f9052b5baa2aa3691592e321bc283bc3a2c8d6ed338a9af4c5fda2167d60","ssdeep":"12288:P7EAgP+TTd2Gt6C/1quD4u/khs/O/62tsVRZiY6LJqaNuNlQ:w/2TTd2Q6CIucz86CdDA4aANlQ","tlshash":"fbb4237c35502faef98142260a7d2ee90d22b8ba2518f77da84d5e153df4fd31acd281","first_seen":"2024-08-19T13:21:25.239734Z","last_seen":"2026-07-14T08:31:57.982417Z","times_seen":9,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"riverexpressdelivery.com/assets/img/service/ser4.jpg","fqdn":"riverexpressdelivery.com","domain":"riverexpressdelivery.com","tld":"com"},"ip":{"addr":"198.23.190.194","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://riverexpressdelivery.com/","date":"2025-08-06T06:28:01.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"riverexpressdelivery.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Jul 2025 12:10:56 GMT","end":"Mon, 27 Oct 2025 12:10:55 GMT"},"fingerprint":{"sha1":"89:03:91:75:1A:E4:D8:A4:6D:11:AE:EB:BF:19:99:61:0A:FF:86:C7","sha256":"99:7B:81:B9:06:FA:F2:51:0D:77:86:62:56:6A:91:EE:74:08:CF:22:EE:8B:85:F8:B0:A7:38:65:24:EF:C8:A4"}}},"request":{"raw":"GET /assets/img/service/ser4.jpg HTTP/1.1\r\nHost: riverexpressdelivery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://riverexpressdelivery.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 06 Aug 2026 06:28:01 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 14 Oct 2021 15:23:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28874\r\ndate: Wed, 06 Aug 2025 06:28:01 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28874,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x290, components 3","md5":"c504e99ef2e08d5c0c141ce58ec1e4c8","sha1":"3a6dffd89b06009cbb59f711d0b5cd776d3c542d","sha256":"d98425a6615a45f5bc9ba919b37471ce265d39746d0941cc3bbd7b9760e9ccd5","sha512":"7a32f4ee0a02dc679d03a429f0e0297fb4c1d844e1ed490b1558ae73273b1f83576dc9e554518c56c5824d8bb96cb76b76c49c6d23830a96f27da6d010e1d4d0","ssdeep":"768:Iq6sUfSovTRNKdU9mkVtk9puVnhxCpoDd:5lejikcpuVnvGoZ","tlshash":"64d2f095769423fed2a470b12176432f5bfe76b0c7ea5176a3b2cc43252213b0e966cc","first_seen":"2023-09-16T17:32:18Z","last_seen":"2026-07-18T23:36:54.635457Z","times_seen":42,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":878,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-06","alert":"Sinkholed","trigger":"riverexpressdelivery.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}