{"report_id":"1e17e5df-7fac-414a-ae1a-7ac6645ade57","version":0,"status":"done","tags":[],"date":"2026-10-01T20:14:30Z","url":{"schema":"http","addr":"revenuecto.com/","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"104.21.5.152","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"revenuecto.com/","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"title":"Revenue · cash out 𝕏 Money to crypto","dom":{"size":142917,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (511)","md5":"90c8691b09afa989927cc9290e3410e0","sha1":"8bc881eb0a3c769cb5b4339f2ae891935c3a8153","sha256":"29320217a6baed981e18593ebe70e7a84f7528e9089f259b52c7d7b7155defda","sha512":"141e47ec24a4ced8e3a227d44620dc69d200e80bc74945b9c63724886bcc8fdfe2aed7c455bf3883418aaba4fd0c54dc328dd7a82e3a19c651000d7e5b2054cb","ssdeep":"1536:nqRuugHDdKczLyKPzo3LeiqlAfp49T5PviFAaacTMN+FM4YuEwYkRFwJ1r7V9Cs1:qRY8q9T5iE5uffZJuh","tlshash":"62d35121b0f955b7109381c2aba67f2b3fd1e217c65a050436bd0fe64f9ae92ed1712c","dom_hash":"domhash8f68911459b55aead3bcf8f285973d2c","first_seen":"2026-10-01T20:14:38.651302Z","last_seen":"2026-10-01T20:14:38.651302Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"revenuecto.com/","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"104.21.5.152","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-05T20:14:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"revenuecto.com","ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-01","domain_rank":0,"first_seen":"2026-10-01T20:12:35.305767Z","last_seen":"2026-10-01T20:12:35.305767Z","alert_count":47,"request_count":47,"received_data":1990924,"sent_data":23648,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"revenue.family","ip":{"addr":"104.21.25.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-01T20:12:35.306129Z","last_seen":"2026-10-01T20:12:35.306129Z","alert_count":0,"request_count":1,"received_data":22020,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"revenuecto.com/","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fa39d60bbbd9f7877b9287514a5d72c","sha1":"bf03e84da17467cfa48197a72fc10174a15b9600","sha256":"3533b27506eb4a994ebeab19219304bcc448fba14bc3835c5188e5a69c6b8120","sha512":"2c7273550205761d5776148332fa4246cf1a72298a7b6a6a4f3a8497972780ddf3d956b860cadc3604bbb44f7eaeb54f47e54eaf86fe36236228055821b18c0e","ssdeep":"","tlshash":"18c0c07881bc8d61410c21db107887c43060341c0003f086c3bedcd5d08cd400784020","size":180,"data":"","first_seen":"2026-10-01T20:12:40.551081Z","last_seen":"2026-10-01T20:14:38.691507Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/secureproxy?s=%2Fipfs%2FL3hAoC2TKqv3pUW6QTl2TA179bb1cf4ce6635bd52ff401fed70c16%3Ft%3D1790885636817","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59c2a78d50b56bd70bc996761bd1b789","sha1":"5a5853bb3779c244d26e3beb73b55686a1e6394a","sha256":"15950abc37199ebc4a804bd5a0a2ffc739e343cdd092762a8ac5dba15b2e8482","sha512":"4e249a64b2630ef47ef718c362f8e8e2b4bc1a1f79069eb8589f116250947c63e83ca566250c10fb1f9989a02e42a33cdf955b07d8c1d0339dbc122002d58234","ssdeep":"6144:fh5gDR3JOviMTj7+mTaMP+I2/+jzWUf3a7lisXh06XuinBNO/ktt3nxcDoB:nsR3Yisu/ld0oB","tlshash":"63e4b2d4c709b67668ceb2af1d33423fff8ea908115b1c785fc29c91a35638a51e616c","size":660525,"data":"","first_seen":"2026-10-01T20:14:38.669612Z","last_seen":"2026-10-01T20:14:38.669612Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"revenuecto.com/css2.css","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.656Z","timestamp":1790885636656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:16 GMT\r\netag: \"6abe8b88-324b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 114\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ib0Wrf2Wli28tDJuaqrMjT4ir8%2F9Uko0m%2BMFY7uRoTs79tGrwRih1HX3BKHrEBqFK9o0%2BYn04wLTTfFCOU8CpKDEYimBpZQgQ03jLqaC6%2BqIq7xehCk6ZlmCejb%2Fjzardg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a43e217d1f87b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12875,"size_decoded":1811,"mime_type":"text/css","magic":"ASCII text","md5":"087df2c4315443ab5b3fe1fe4b4fcc03","sha1":"b3ee553d3818694daa38ae51fc4058eb0d69f787","sha256":"bdf50ccf1802d409c33f4d0b89795d260022b93e08e6c4d3cf936bbfd02953d5","sha512":"112ee06c7d7b614618edacfdf66b397bd4aeaff27048423839ad70d2793d3c7dff4870c159b7d4b660c206f4812fd82f1eb6abde12b6d9d5b880aa8223944ca0","ssdeep":"192:9TNe7m34MJD7TOdUm3/TJ8eTrUdm3iWJldTE7em3R1JGoTxSvm3kwJHu/9Mt3qgn:h/P0NNPqxDWaT","tlshash":"5e42aa90042b5100e7971cd227cf3f266edd6048a049da7c6ffe189aaceadb913a574d","first_seen":"2026-10-01T20:12:40.52234Z","last_seen":"2026-10-01T20:14:38.653093Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/sei.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.713Z","timestamp":1790885636713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /sei.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-9ec5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FpHlC4YU7SgABzHggg8ih1ujl5uMwLHr%2Bun4ohjKAnBXfCEXE4QpMe%2BfFN5987Y9lmKHu7yOEsfQq%2Fw%2F3k%2FTQkSn7M84kTXkmaGvG3lbSats9FMTQEmqrlYX54jfcnp1Qg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d7fa1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40645\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40645,"size_decoded":41585,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"c3afa4e4da060ea109402418f84019e5","sha1":"d5207fd057829c562e437825d358eba74e5f3b0f","sha256":"61c77268d32f2a217d1acd8b5429aa8ad675f8d0babb6761f4a6e9b7ed10a389","sha512":"56842892376636130f9e2f8e07575971f47bc6efdf783660ee8872f8ce5704985973b1c372d38bed2f65a841d3d2f765938f78457af5ebaf5a11df6e9530b79d","ssdeep":"768:5MNjrVsb8s8P4DXGTwt6dW2KW/iDHZeVANGLbzOXos3I4PbZ+C:AjaIseEaW2hqzZMQGLbzebVT","tlshash":"8203e028d207d8ffcb2b85b23cbb45dc9368b2966873a90c1cf45c145e83f99280b671","first_seen":"2026-10-01T20:12:40.502681Z","last_seen":"2026-10-01T20:14:38.65422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/usdt.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.715Z","timestamp":1790885636715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /usdt.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-509e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VmWQ6b4aByvN7LaY8ImkxlvvqH%2B35N47%2BobHIF%2F6p7SoIvKh0C5RNEh84jA0BnGQ8RGQu10U3%2Fwh36mhLYX9aKhWqdp3ewArPODqkW%2F3wlkVu3RIfFGxaClDZIezQXohHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d7fa2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20638,"size_decoded":21576,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"22fb9781c02badac8516d66b14375c53","sha1":"fdef2a810a2741019d8bc3d1b44a9991bb2e626c","sha256":"35736e1c69d2b4e91705a4c339cf2a4fe49e52319ea8fe57e10136e3f860a086","sha512":"255268aaef2187b252e72f03018d9ea9af62e4b1b68a66972cb9bf4569abaf7e0a84db2d3202b4d8ec738ee4e473018633ae7d51b84aabb85437caf3833539b9","ssdeep":"384:TCCYpuvoE/kQO/zzbyvJAfCqgITS/x/ZuH9td22y:WCYpGLSzzEAfCLI2NZIY","tlshash":"5c92e1b0174121faf18327331811183caf819dfba89b44d5927a548c9f3d758b5c7b6b","first_seen":"2026-10-01T20:12:40.545974Z","last_seen":"2026-10-01T20:14:38.655046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/ton.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.733Z","timestamp":1790885636733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /ton.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-5f33\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBGzXiBbFAHq6GJDuQpfpjMTnECNPS1OUpMStXVgskS1%2BeTr1eIO5Z%2BjMrPJTps4Cwo68Au3cdQmEA3sxV7VIkzPIzdPHS%2F1auvhKSSogFJoUKol8guyMR%2BKo%2BqMTgIbsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d9fb1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24371\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24371,"size_decoded":25309,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4216f1ed468cd2a6f7e03a78b369fd01","sha1":"efa9b61c25c73dd2a50d24bdb0d147e34f5725bb","sha256":"3562fec572fd964f9a7dd90b4eaeb91dac50a42a33b3a8654d7badbf19af029b","sha512":"a7cd6fd69d21411ac565ebe3ad1d2bdceb70de47bfaf7ffb805952599d9257660b12b230cfe4533cff6e63657a7f2fbc7e151944594a18e6fa2f0caf88368f42","ssdeep":"384:dz86GU/Qr2y220SnDOW+xf5BAdqjqqTgRkGpszuc1N5PqQqm0Cj4cVg7Yx1tOJ:dzQ/6yQSnyW+15BZqqTgaqW5RfjfgGtS","tlshash":"a0b2d03b5554adc4d5db60393893ea206b00335534cfa869e3b2c80c7ea7b85ed2277a","first_seen":"2026-10-01T20:12:40.490202Z","last_seen":"2026-10-01T20:14:38.656077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/pol.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.738Z","timestamp":1790885636738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /pol.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-7619\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mos%2BJxDB7U22%2BrvXHYPhrgoo6cZpbJquwiFfdN7ZYm%2BHIbDpHKa4GmxivWIxej1%2F4Bsmj%2F085k1xaElzSxK6liOyMG874Cqw7EYutz5KXC%2BC42xN%2FYyCNyypcyRR9ddVOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d9fb9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30233\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30233,"size_decoded":31175,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"c7347ba35a3c6a816ff56ba5d1ceca66","sha1":"67317b02ba82e7c60b7aad6292d925559ddb02f9","sha256":"ca271601468e6c13e32d4b04ddf233962689d4a2b54d4d8432e1a12ba158c7d5","sha512":"5a661c0e178213ff6aa52b9fccf2f1dfbc5ff0a8baa696336fe0dd9094e28c6eee9941a3a6fce26ba29f6ca3f544c3ad81948d41ade00d16515cdbc0289fff45","ssdeep":"768:VfojFnHY6f9GSQIfSLrymsCI6AG7WMV5io4M:NojF4Q9hQSSnymnZWq5iBM","tlshash":"ced2e120c9a79b29c724c479019bd470ab3637ceb5c2b1cc477a0148ee5a71d19db3ab","first_seen":"2026-10-01T20:12:40.475324Z","last_seen":"2026-10-01T20:14:38.65709Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/near.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.741Z","timestamp":1790885636741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /near.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-502c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vu%2FCLUeRtTNq4AbiQ2R6GvlJuBF7kQ4yO0hRR78LzJg7ku6B2mH7lzYB5sufWB4rcu5yaHPd8sC0NCz7PsC9NmcnsfR2kHWWeIHF4ac0UQzRUJOnYsXOnmufgbo16N4IIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217dafbdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20524,"size_decoded":21454,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"7b4feeeb78e902cd61c0eccff62ac264","sha1":"a06dded38e405747c53e014b6758b240e4fd0a1b","sha256":"2d0ebf1c55fb5a10f9a4187ce16eda501489d8bf3db44c834ec824db19eb4dc0","sha512":"8ab8c0998449fe30cb03e0809aaeda1311ad330cc75d439fa2554ae02792876c404a75f55abbbdb2fb34bbaf6ec57ae3eac380ab3d3c67f80ea0163ed8b7172f","ssdeep":"384:gfbHwwsK4MCtX3sTY8Rr/M+huc4UYEzCLrRNA2rCgXI:gbsK4MCJkRZuZEGLc2rxI","tlshash":"0c92d1767912168bc0e60bb9e9218d536b3eaf16f0130149fdf3688c0e4f5b45a160ef","first_seen":"2026-10-01T20:12:40.516455Z","last_seen":"2026-10-01T20:14:38.658136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/zec.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.744Z","timestamp":1790885636744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /zec.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-499b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkStEdqtuELOzg0jgIxVJlaIjmS10R64OTtUJjY0QavK2rT6wcwv2hPEnPa0ykbN6z4AK3olz8da4eWDLM8NAOuNO0fmxShka7LdeKp%2BF8zgz1VFdwWFV9VndLFE8xjGgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217dafbfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18843\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18843,"size_decoded":19773,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"e777df04d7145c414bef84f6448bc547","sha1":"4a9ff8fea43a593a149e5f2ff0aafa26e62ff86d","sha256":"3b1063658775a913a00756b516592b69e5406e96721e7687748da6fad78bef90","sha512":"7297755fdcb66aa893be4ba66301800b2e7cf51786a3470eb64e2c04eebf127942ee9be2e281fe62ef144fce043b2bc50a2768ff8559be58427d9a37dbcba7d5","ssdeep":"384:F6OZRAYgzcJLiZZmBecfGhUonU6htRWapkbknO0YYE/RW05i:rsYFxa//DdhtRFpXOY2Mii","tlshash":"e982bf7da159c1f2c8e14574ece689816734334eb89749854af601a81f13c3d3dae6fb","first_seen":"2026-10-01T20:12:40.517919Z","last_seen":"2026-10-01T20:14:38.659144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/tron.svg","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.753Z","timestamp":1790885636753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /tron.svg HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzRS3DGu7tIf9XqA5Cf2ad9TPLdAi1vMchDC79mhYvR9FomagFawDoxkaubUjUvHrHBvGhF%2B%2BsA4IiiGSCbHcq5k4IzjVVulo2btuB8b37oqW%2B8Akdb52YTyva5kvxE6og%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:16 GMT\r\npriority: u=5,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6abe8b88-2058\"\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a43e217dbfc9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8280,"size_decoded":3353,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea9691138114bda86656b82affaf39f1","sha1":"5f3381df01c828f5296d92ada8bbb2e380518102","sha256":"21ff6b9d31004324a16bd309a121ff2a76d1b42c2dac38369dda92bdc476e48c","sha512":"c4f87be6300349941122bf98c6c4dc88610ec4e5fb9c5ccba62e5eda5df648fda165f49d0c9e56e9da7d4dbfcce56c77ff03c25e66a57b9b255f098be302083a","ssdeep":"48:z9IIMpvCHAklvHcTBNkY3qFfChYCrbQXbapgoTjBtUuMZJIoMu5U0ZhbPWJ:NMpqH5NHcTFO6hzybgBquKKo9i","tlshash":"560209fb1bea3fdc4b403901b1bd27611c45b08f2bd508d7aa2a3191a25ac79e4208de","first_seen":"2026-10-01T20:12:40.541305Z","last_seen":"2026-10-01T20:14:38.660383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/site.css","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.658Z","timestamp":1790885636658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /site.css HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-12f0d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 114\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DT5TbnaiYiYMMT8oV7yMxIpOgHaatCyAd4E1wcKkgFou5fSseVev11X%2FbknyOpJvLL3CnG3m6Twt%2Fl2tMD4w47N%2F9YVbU15o2GKj3DVScBSwez2ZUqJe7YO8SnyJFg9HgA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a43e217d1f88b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77581,"size_decoded":21684,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (510)","md5":"83c2f2309c2509dc2362e422f252d0aa","sha1":"09616cbf811f2115bfdc3c3034983685ea8be1b1","sha256":"bf65d01a3387097f2ef06e4dad70eb22d70454fa51dfa7f18cd35ff484e4443f","sha512":"11d2d71762fecbdabf6c87d75f567dbf8828942691fea398e14e8d614c8b5f01d94775e183730b80d9d009337ea50d29de9d0c6b8043edc7443170b498017b70","ssdeep":"768:5m+zAriUUHnQ/Qp7KNn1RAN9GFxhyOcxVePq7cDQbXwqHbIcxEmFMadSvmjnx1:+fQ9GFxhyOcSPmcDQTTnX","tlshash":"807384a16611623df037d996adc066cfb064d403ea230bacda56f166cec65ff1b34788","first_seen":"2026-10-01T20:12:40.525416Z","last_seen":"2026-10-01T20:14:38.66114Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/mark.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.697Z","timestamp":1790885636697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /mark.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-506f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9D%2Bz0il4agrfOTHBUnMqQuOXpSFTZQlBhdaW6VGy4ZQlVOeXUSLnb1hmMHZf1fgdxuF4A1%2Fq%2FNutXlu9aDKGqqFMmxTh19ZnFqJtSKE5kv1BtmQPk6BLeOWrETpKqLsZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d5f97b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20591,"size_decoded":21525,"mime_type":"image/png","magic":"PNG image data, 246 x 256, 8-bit/color RGBA, non-interlaced","md5":"9120440e7eb46ce23ae66ac2bd190685","sha1":"71d637349387380bc039d709805c08b4eb7804bd","sha256":"404b9ec5835e81708d28653d88cf299e987a587349595878961d68411f02eb1d","sha512":"0b4e12c9537fff49aebec23b963683d1a43cb0eb4a4e49cdb9eb40544a344c7ea06a6c18d4e132d6671c80274fec5979bc23001ee96ce1fe15d3c433822f7543","ssdeep":"384:FD0qd9RfDC+DcVE8Ws2vmUjEiB5CH3frGR+3cM3s6pE2h8D:FD08XfjcSHvHjJBMH3fiRe3rj8D","tlshash":"2892d0a0f672e8e2c95d2a75b564440770a4658b04c50bd1b5f9d0a84b3bfac3ec38bf","first_seen":"2026-10-01T20:12:40.547462Z","last_seen":"2026-10-01T20:14:38.661859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/eth.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.722Z","timestamp":1790885636722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /eth.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-5fac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRusOUBuQq4OvBq9VnrSkSrVUJxn%2FYTcxUZcLIUQKnYYw4lq0WvDKSdgGuYyKtDm8Unug1uoO%2BejGeraODSX2yp371jhjQxPHgn21M96xXobNmJPzt7H2xSJTA%2BqMQvOWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d8fa7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24492,"size_decoded":25426,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"aa1d7cc6cd5e1b72f9389b21ed64d497","sha1":"c279d5a7714a7c2dd82ef9064804652376fc3046","sha256":"a9148908f6bc03d7923f91b3d3c6cb6cf18e9d93603d5adb00b190380b238bba","sha512":"e16d06e4ff76e71e7f5029bda3ec8a52ff6c2e5a564fb2636c9dd162efee94f93f073e7954f9009efcb8adf4beb96ef2cc57b022aef36bb6e321135fc9e3859c","ssdeep":"384:Cz/XCLzaS1AFCxfGRfT7mOYXYyezQKcFgaiR40jylHoZvfFGX1:kfWGpCZamOYXYzcpF+RrmaRtGF","tlshash":"64b2d033b3e2745fd18841f448a22713a874bb0d679a4bd04bb96c2d6b2d33c19cb43a","first_seen":"2026-10-01T20:12:40.483116Z","last_seen":"2026-10-01T20:14:38.663023Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/sol.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.723Z","timestamp":1790885636723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /sol.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-6e10\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGlKSZXoMSPnBhw3jp2w88T%2B%2FV9%2BuAqSFHlWTIyQwoy3e0PJMqg10%2FjqQ1B3dSVhudePTIP%2FhkJxoSVfOv1HOdxkfGsvIBYUPt2zSyP1LJo%2BUzGJA4QEw0srUpRPJe2X7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d8fa9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28176,"size_decoded":29116,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"62e829d44dcdb203c2004c561382d7b8","sha1":"6f0689c41dc65905a780875a5590ebff32330439","sha256":"7aec9e838e4ebd9cfb6fe033e4dc4b71b13da6e494ac8acca2e03ec6132bca1f","sha512":"ea317e59a17854243f1d153963198e1192f96a413f76b770f9961ba9f21946135cc4a1e130d567f9f80556162d29313448b876140796905f5d5bd35d7e9bdc1a","ssdeep":"768:m1kNkE7TKq8GxxcGbWZA0xXMk/UzDgIzWQ2pc:m1kVGq8GxhWWF5zEdQH","tlshash":"80c2cfea4b450a3cd0ea937350b334ba945de9254c63d8da40f6b8cc2b9da321547dba","first_seen":"2026-10-01T20:12:40.531959Z","last_seen":"2026-10-01T20:14:38.663923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/sui.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.740Z","timestamp":1790885636740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /sui.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-5f74\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rusbGFHvifBgHRT6F%2Ft1HpA5M3hbk71Cxi0wDMgjoNqU53OASKUqmSinYBlRCEXAi5vkyNUPAMPbDfI%2Bx0so8xMdEVgmKuZOX9okMzrUmpxNsZMjsP7UGjcz751csi1zQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d9fbbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24436\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24436,"size_decoded":25368,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b062d8360cb2bf36b79d615780e5a0ec","sha1":"8aca4e2334b7ea60b79d636c7a4ec72c712f64b8","sha256":"4fdf003a81d766fa7da79507e915b88e4ee003a093fbd46360741d96dd40bc2a","sha512":"db564eff8f128c8cd78c0dc950c8bb9040823e97508f4294ce655ab628d38c5c53099346a7f7388eb8ca3008914eab494de3ceac88bfe604803c937969f41e80","ssdeep":"384:qBKwNUhO2TGE2iraYdwhOJTSXxVlnPhysMrmQPm0V3awxP0lTevLDlh:qBKkGO2TGE2iTbJTSNnUsLQDVAlTYLz","tlshash":"3cb2d03b247d6b72c771487419d018fd26be517078831780b179b1af1e8d2ca2e99ae7","first_seen":"2026-10-01T20:12:40.536351Z","last_seen":"2026-10-01T20:14:38.664803Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/bitcoin.svg","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.757Z","timestamp":1790885636757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /bitcoin.svg HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vp6XmgrOGavonTEPWUno8m0j%2BXFkbRNJxXvjvz%2FrLSVFO9R7XDymGPjVdRNRNgi62FQk0gVVMzGMo1ZFuEiDWx40wiYSWVGvC2%2FCRA%2BRCdnbkKiXnf%2BVWnxo%2BIjxvfiRbg%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:16 GMT\r\npriority: u=5,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6abe8b88-2184\"\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a43e217dbfceb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8580,"size_decoded":3577,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"679ff162062b3b0ea0343cd755b50c65","sha1":"0472a7db5c3a47788d7b973fc1ad5369e5e1abad","sha256":"1309b6a20308b73c867d609184ee59ffbfb2c534495f0a2df9c6ffc032792fff","sha512":"ac8dd0a8adbec3a1ff3466bccd8b8cb121532e8328304dfeefcb76cb9f2c46d3c77a7cb0d9e3d77d9cd45f3df89fd50fa071d882a8b7fcd7a1d5f6360da4905a","ssdeep":"96:NMpTuNcPWn1NMbaPBquKKo9wksovvaImtTL:m5e0v3Ko9sovvat","tlshash":"20023cfa17d23b989bc07d09f4be6a6d0c04a1cf17f509d7695f60c0928bc49b5208dd","first_seen":"2026-10-01T20:12:40.548767Z","last_seen":"2026-10-01T20:14:38.665464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:57.302Z","timestamp":1790885637302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:57 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5eFgOC7eYc1SaOGBUB2bGKyf2Uc5L84GBUhm11xDDlQotGuUEIxRBaXX0HDH9da7X5%2BMZz0Qu2hKlrD1k18zjFBtZ6TRF8vLs4xoMIN4wTArBpnH5lyZJQfFqBcjzHDHHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a43e218128c7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":49204,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-10-02T19:02:05.316495Z","times_seen":32459,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:57.306Z","timestamp":1790885637306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:57 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e2uqiXgAyVDVzBh7N2hbygMwwjqE4P5CI5o76za4%2BjSdYJly8sMP6CHHpwbQNAedcqX15rvCZ2G3sTA1ZUH97T5Rqo25%2B6dlgb5X34guGP5t2QZ897JbvlRfnhTGh2JR1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a43e218128ccb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":49206,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-10-02T19:02:05.316495Z","times_seen":32459,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-01T20:13:56.133Z","timestamp":1790885636133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:36:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DZ2yZWFs3InVx9gP3OLR61bEEEJMOYLBZ8CxTTWCrVOIXMCJiEmiX7Ir6K7otGhywp18stCGkKszq0sXT3NbnV1YElwv69Mkqor%2FnplB3LGjrdGDSklgSfqKnm8lEnBX9A%3D%3D\"}]}\r\ncf-ray: a43e217a0e92b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142687,"size_decoded":20961,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (511)","md5":"91314e8f564d07a938613f44a15420a4","sha1":"1306f9e0eb897c740b219ed66b459556e4b4d57f","sha256":"7cc3c3dd34e2a3f2c06f15a2d4b229d065a70aa7c575e7b852b04244f45b9d95","sha512":"8733fba4509e7b7883d3c8d1ad7ea20091c66cf1d95167e9883a50fae76ca60101a4d715d6c353516a3a2784a111b3ed51996559a27da858c9ec11e1de907ae3","ssdeep":"1536:CpRuugHDdKczLyKPzo3LeiqlAfp49T5PviFAaacTMN+FM4YuEwYkRFwJ1r7V9CsZ:IRY8q9T5iE5uffZJuF","tlshash":"e4d35121b0f955b7109381c2aba67f2b3fd1e217c65a050436bd0fe64f9ae92ed1712c","first_seen":"2026-10-01T20:12:40.520298Z","last_seen":"2026-10-01T20:14:38.666798Z","times_seen":2,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":4,"connect":22,"send":0,"wait":194,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/ltc.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.737Z","timestamp":1790885636737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /ltc.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-511d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYq4bEmPGTtDKWEiF%2Fj%2F5TkvP%2Fi2n0LKdUxgXfaefAD218Gll1ll5DcmpXuFOTU0QbuvaTR8yijQTAn0PecRwOc61ZU0EDL5tw0%2B%2FNs%2FRrfw0Tge869h8bFyASrqDgirZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d9fb7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20765\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20765,"size_decoded":21705,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"532d1b6b186b077858377e9d0e9b4e7b","sha1":"3d4fa346bbbe298a207799037fbd08d87de251b7","sha256":"0a17b10cfe285a0169bea53a5fb05ee9aaa79875c2c809c11199b2f9fadcd226","sha512":"55c3e68a84f5dcb2f8e68f9b102211d2fa638591926e30c3cd41f6c993306dd348e908cc355cd25755c87b9395718a9ddb130f693a23e1c4c0a6474c36046ac4","ssdeep":"384:XBoDm/bBdhE42YjiHrGAtVTmrGle7WhIimMHT8/dP:JHeGMTmCe7Y7mMzEP","tlshash":"d492b0b9312da9f2f49efb7851135c37d2f0c1092686e68c45f2888f9915a34254f66a","first_seen":"2026-10-01T20:12:40.493609Z","last_seen":"2026-10-01T20:14:38.667758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/shib.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.748Z","timestamp":1790885636748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /shib.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-78ad\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UXJTybvqM9z5m23pw8f7ps%2BtY4QXjUEJ1jR4gAcGp6uxlwcFAmH0z6K6DG4Hmr4oBaLZb6F%2FKn52sBsEp3siAizlGBe6cRnqvZmRtvksaWEk7yM41y0E%2BmdVDylPj7ILAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217dafc4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30893\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30893,"size_decoded":31827,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4f9babef1c0546c8df377cf909cde405","sha1":"255b4307e9aaf2355b32c9a6b201bb7004d86137","sha256":"29380c5624af3b4749bd60ad98b75a370d0c5198dde36cd44e456519058e1db2","sha512":"00e7fd3610c84b87e430e8459e9ad05d5aa613abb104a42c783bfe171a037caa9bf80605f2db0817e59079d32e784c0f6cae6f4199a663b295a9a222b33e6271","ssdeep":"768:LsspwDGUZFORuWFJ/M/u90ZiAn11zTlep05:wDGUZFouWFJ/M00ZN11XUi5","tlshash":"bfd2e0fa35253895c88269f932620d86e6b0534db0f8670cb733845e3e8a78436dbd17","first_seen":"2026-10-01T20:12:40.495091Z","last_seen":"2026-10-01T20:14:38.668583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/secureproxy?s=%2Fipfs%2FL3hAoC2TKqv3pUW6QTl2TA179bb1cf4ce6635bd52ff401fed70c16%3Ft%3D1790885636817","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:57.296Z","timestamp":1790885637296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FL3hAoC2TKqv3pUW6QTl2TA179bb1cf4ce6635bd52ff401fed70c16%3Ft%3D1790885636817 HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a142d-WlhTuzd5wkTSbjvrc7VWhqHmOUo\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=-j0uQWZ8SZJBstzGngEn1A.js\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/01/2026 20:13:57\r\ncdn-edgestorageid: 879\r\ncdn-requestid: eea0d459c7baefe294e757d702e45507\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lJrOhdBCcQoHmf%2Fsn8IecUYE1KY3WJezzEBOX8u991sZfXkpm0Y4pkavELK09kwNMD7jShkzrpnLtcF56rFjAJnmObCnCM8VrCVrYbZQ8FVQbHu3xSXwrERdOYiUqGl9g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a43e218118c6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":660525,"size_decoded":131057,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40094)","md5":"59c2a78d50b56bd70bc996761bd1b789","sha1":"5a5853bb3779c244d26e3beb73b55686a1e6394a","sha256":"15950abc37199ebc4a804bd5a0a2ffc739e343cdd092762a8ac5dba15b2e8482","sha512":"4e249a64b2630ef47ef718c362f8e8e2b4bc1a1f79069eb8589f116250947c63e83ca566250c10fb1f9989a02e42a33cdf955b07d8c1d0339dbc122002d58234","ssdeep":"6144:fh5gDR3JOviMTj7+mTaMP+I2/+jzWUf3a7lisXh06XuinBNO/ktt3nxcDoB:nsR3Yisu/ld0oB","tlshash":"63e4b2d4c709b67668ceb2af1d33423fff8ea908115b1c785fc29c91a35638a51e616c","first_seen":"2026-10-01T20:14:38.669612Z","last_seen":"2026-10-01T20:14:38.669612Z","times_seen":1,"resource_available":true,"data":null}},"time_used":754,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:57.303Z","timestamp":1790885637303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:57 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTx%2B6PmrZnQMBDvBESzr5kMHpSQmiUWXr56misSSiBC4jp%2BxtPPVvv4r1EOFWrwruej6zkCHnZrTEnoPa%2Bm9Azqco6jO%2BbiWW%2BUo4lqqBS5eG1mSOEfQeURXi2NilD3ZXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a43e218128c9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":49212,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-10-02T19:02:05.316495Z","times_seen":32459,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/telegram.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.700Z","timestamp":1790885636700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /telegram.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:16 GMT\r\netag: \"6abe8b88-2886\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQWGuu2csDSH%2BdXhfgRL5nrNdBRinTelg9b2ovvLb0BBnyaoZg6sZ9HBy%2ByVQsvqnUeYw60A%2BQGDGG8WjRR9gskeLD0X%2BnfgC3nRLsKZ2Z7whfWjUz1C5kvGmmc5Xd8jVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d6f99b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10374,"size_decoded":11310,"mime_type":"image/png","magic":"PNG image data, 128 x 107, 8-bit/color RGBA, non-interlaced","md5":"4ab053b7dc1839a35adeb06a80e32844","sha1":"1c494c54e24bab82b355b70f878b49f5029e6be5","sha256":"5b56d05ea4bd065307d1074bae99efb3d63263c7acdb5d8f5697235e2c83d77a","sha512":"7b95b35b93cf26a1b239764fab0487f7e4f417ac67478b9645aff261f442448d9139d0e7ba6fc6d6973952f16b03e48a2d02e1eb2246ecc48779becb11cc811a","ssdeep":"192:nkzjvUaYVcN2QsvIHhh92ZIMTxkc20xHo/5:nEvYPnshhEZIaGcNxu","tlshash":"5c228cb4d7019aa9c75157b1a9670c6ae2b1bb1839560408b0f18489bf83f383a8b17f","first_seen":"2026-10-01T20:12:40.482132Z","last_seen":"2026-10-01T20:14:38.670552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/x-logo-white.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.708Z","timestamp":1790885636708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /x-logo-white.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:16 GMT\r\netag: \"6abe8b88-23aa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXAtqv1QJYaz9plRW8nRdX2eMuT%2FiktTXMsr4jA8qtgFAnpo210CkMrZneeSYEvIB4MTRk5ENm7iSsxHLSiRfgmqbuCsmnSSJ%2BcCJ8F5fFoB8SnSRxM%2BDFHMwYc0%2FNLEHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d6f9fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9130\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9130,"size_decoded":10065,"mime_type":"image/png","magic":"PNG image data, 96 x 98, 8-bit/color RGBA, non-interlaced","md5":"6d4b9f11e9b29b1ba90ce23aa190099a","sha1":"af688633c84c4d24b20bc31c158f14ec3522c6dc","sha256":"37e132ff7e587bad34092808315705fbb0ed04e1602f80e2cac2383e926f0cee","sha512":"375084b1e2a2d8d1c51ea99d9d13a21ae4b6d716ecd3e08e0b033d6f4e239458b6e34db26e8ce6466b497edb4abf3c0dbe5392817bd0b5a9988b50093b790a3a","ssdeep":"96:0O3RbWY2uefYVcNz/gJTfl0ka0hvRnUIUjdghlLl2gNPBfm43mKKos4MPU7wckVN:0saYVcNwra0bUzRcLl2ydjHMPU8ckVN","tlshash":"24125c719f3665a1d15209309813189eab346a28b1d758c862f148cdbf2ef1837de3eb","first_seen":"2026-10-01T20:12:40.499854Z","last_seen":"2026-10-01T20:14:38.671092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/pyusd.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.717Z","timestamp":1790885636717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /pyusd.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-57da\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDdg%2BFyeiQVb0t0kFJ5QyEq173%2BpNJW9XdB2P9r4HlwSWjYlQTXgnYdeU2MndAPylQdbau1eAUtLAFl9TbLIATwErdwJ2HKH9CMgd%2FqmLrsXtGLk3qOJ11DN5mmdiC8uNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d7fa3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22490,"size_decoded":23424,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4d5be8595e3e15ae27bf858b60c64417","sha1":"5ca72e04add3adfeec8a88bbe6dae5b815d01e84","sha256":"4dfe07583e397bbd42b4f7000fabb996d4459e3e63e2340b2d97201d619e7177","sha512":"827f6f1cb1fad0a22f79031d0ea44b51f9b682bbfa1778ca267ccf7d5a32d8e59f7ccf72e68906996495080dcb8dd9455b54145dcd48aeb946bc728bf63259a6","ssdeep":"384:Xt8OQ93h5OWu2jHYYqSsFLCFcm2VeDv4kxuy1S2ysYIthW4mIw:kxu2j4F2cm2Vi4QusSdN4mIw","tlshash":"88a2d036be8d21dec10065ba9045243ace21b70d36cb9d09b3f7885cef1ab292493778","first_seen":"2026-10-01T20:12:40.481044Z","last_seen":"2026-10-01T20:14:38.671816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/dai.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.718Z","timestamp":1790885636718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /dai.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-616b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRr%2B1Ak4npm7tWuYl8NygVxqWxt0PKzqZE8fZQdfQo%2BrtVlZl0qQAogitUNbXT4zlBrk%2F9gzSmrXjYVOcldSASlOTPtXmKFcqNnvBrsIIV5zakTNR7xvKm8o3PoZp71%2Buw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d7fa4b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24939\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24939,"size_decoded":25875,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"fd4624b4589e6f301669e194be569a8d","sha1":"70061aca4ff2c900ad4fee4d39c2ceed962fb5f3","sha256":"641b26d79798976f6a1622869a1c97386c44f185c5783cf9a268a1e645580769","sha512":"3b3d776555cae39b4f304dcd5d30e72ab246aecb83afcddad5f9c04af08c37bed0946f3d9c03643773af925ec6d4bfe7477ef0b502491adc3bb4993bebcd54b9","ssdeep":"384:egCRhbltGO0q2qHASHz9QceQ9obwQa0GBRCSqgK20eTrT21yMr:SRo8T9IFw7BMSnKhGP21b","tlshash":"15b2d0f3a7613aa7e3934475cf4417e90722921c7bf2918bb5b2d0486f69b28325407b","first_seen":"2026-10-01T20:12:40.473819Z","last_seen":"2026-10-01T20:14:38.672778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/base.svg","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.754Z","timestamp":1790885636754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /base.svg HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6mO03a6YO8Dkcqz0OrFxO0pbK6YPCVgwAo47MuqQQfRcoFwhOy72vjJrGyBHnKN3pgbY3es4cujAwodAr9aBKZo%2FEg0Hs6ooD385qyb3zqzJyt0sATAq0nLRMCZo%2FYjpQ%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:16 GMT\r\npriority: u=5,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6abe8b88-203a\"\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a43e217dbfcab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8250,"size_decoded":3296,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4c56419e6bd81dcaadd9ff40b275a17","sha1":"ac03430119c178be6dcf6ff4e032570edf188704","sha256":"23873c233b208d5a02f9e56e0a9eed4b1380979eaa566e616d387bf5274607f6","sha512":"d8eb9882eada771f62bfc59ba283d8e6da70e6d1977e50a6d31cc60421f71b511be6152cc46cbd77710cce76917d17516ce92d02f8abb6c6db0ee6bc2b6031b8","ssdeep":"48:z9IIMpv7h/lLNvc+yNkY3q7ovsf5si+z+agoTjBtUuMZJIoMukr7rhfqoIkXi:NMp1ZNvcpGksR/+zpBquKKo9kr7lqoxi","tlshash":"a4021afa57e23f889b407d04a8fa676c0c04a08f1be54cc6ba4532e0a207c92f5604df","first_seen":"2026-10-01T20:12:40.519185Z","last_seen":"2026-10-01T20:14:38.673338Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:57.305Z","timestamp":1790885637305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:57 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUWCBGVGRr%2F0DkHcAzbh4v9CYe7rB5sIBNtfWO1l0Koz25h4Jyc0TUvFKAGOPAEEbGMjRQQvEZy%2FVsehLVb%2BZciZwhfodIXBICLd5hxKz7BKu3JfzocHvyGCQqBD5tgCpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a43e218128cbb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48256,"size_decoded":49208,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-10-02T19:02:05.316495Z","times_seen":32459,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:57.308Z","timestamp":1790885637308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:57 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-bc80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbTOnwHkMvKWCX%2FzsDm68EFxWgIrfRXYXbGJUTFZBnoa7rtQ3qn0crTm47nWZb2DJc5YmmivO%2FsDkasGlp%2FJkPq1nEHhglVxRAkKv%2FMHh2DC%2BY9IKO6A43nb1eSjpdl9gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a43e218128cdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48256,"size_decoded":49214,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-10-02T19:02:05.316495Z","times_seen":32459,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/xmoney-sign.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:57.321Z","timestamp":1790885637321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /xmoney-sign.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/site.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-2ba1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 115\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVMaI%2BSc4kdhVJmPvT%2FehOWT4n4f0yRNwPF16agKXPHC%2BJD90XrC%2FQzsoevYqfGpnSTSXb7s8fcrLj4YemJHPQ7cELclV%2BXGckwernBKnDEAKe6Wcp5f9igtOvoAWWOJBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a43e218148d1b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11169\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11169,"size_decoded":12107,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"aea981b863123dc137b9dd39414ba2bb","sha1":"a32f8b28b3fe7901b0b8fc941d8539e57288963b","sha256":"a466e433af7e63ea829dc58f14a6ccacaa54e0aab2c617b50e02ce1c98e3447f","sha512":"1929b51418f9d336f954340bc87adfaaac685183dc0ddb7efcad4128ea9d69abc6f41f89f8f30fe36e614e6b548b863843bfc10fbd863ae0dede2b43c1e14ff8","ssdeep":"96:IJM+SbWgefYVcNz9GdTWbZKDduW0h+m4lXe+9kVjUoPROirbw0gMNZpk7Z92xnjn:5vaYVcNAFeh+XeK2Uocew0gYkz2xnjn","tlshash":"b2328eb5e7031745c2274235c5311099fb10235c37af494ca9f5448cafe3b2576a65fe","first_seen":"2026-10-01T20:12:40.506319Z","last_seen":"2026-10-01T20:14:38.674459Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/xmoneylogo.jpg","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.702Z","timestamp":1790885636702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /xmoneylogo.jpg HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-39e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAKE%2FNYmV8fG2dGYYayyrIJ6kU5UrSgo%2F5kv4LiLVLyTNlD4vwjloTvbzgZaXX0mta5vKJl6%2F86M2VKmt5lA0m2tspUpqffea1Vp7%2FCYihvHf1PhgfJuotjrTyfHIH7Lzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d6f9cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14820\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14820,"size_decoded":15757,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"363d5d0b2357a3a90789a575ab6e2c41","sha1":"6d25bbaa8608c2650090c657bc106cf6eef7b5d6","sha256":"ea9fe385635d49033e347a571966ece7b1b55384ae90448a12c57c0b94a59dc1","sha512":"e568dda18a8d56fa885b331530d1dc583db79a4cfdcc09bd027c7a1976a7ae6e83c37607399236cff9c673f842417451a82dea8a4c9e211bcadc13a8d5783f19","ssdeep":"384:sbeS5/mxd19Q0RlVNFqnlDg4UfxxdWyIs:sbePQ0PVNFqnIFIs","tlshash":"79625bb5b3190016e90e6734feb94732e620af0455ca559fd0f5a41c2b2efb226863e7","first_seen":"2026-10-01T20:12:40.509037Z","last_seen":"2026-10-01T20:14:38.675134Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/wbtc.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.745Z","timestamp":1790885636745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /wbtc.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-9f45\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2XGKZye%2BWdl%2BPjxXqFzrc8Zpm%2BzgbE%2FPb%2FAT%2FRNqDiCBICi6Vn4ctnY9bgOWJsK9Hb8EfTTvxOMzDqBwZge01ZFCu8K5v6nqYB3B33Nb%2FmV2JHdl9rpHe90uE4CtizMknw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217dafc0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40773\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40773,"size_decoded":41715,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"21273f537bf9ae281cbab610c7ff37fd","sha1":"69ebdf7ce659afd6d134a846291ebc25b0cae518","sha256":"15273f7e4631a3a3bfc3288049b53346937b296df1e9f86c4c1d219f31896931","sha512":"349509c796f3ad1955e7715dafa49bbf5124eeb39afbfbc0f2287cac04dcc8dcf695568cb2c5f9fe70c3cd304a4fe84844763bb54689f7d06d1c11d7daad2449","ssdeep":"768:a7vAqyV1k3Hn21Sy43UtsGcuptzh5xDsgved/pZrqpaFF:wyVLUd3AsuptzRFvAtqgT","tlshash":"cb03e0f0e304de92f55ab8f65b021e073dc4021c7cb4794569ea287e83163ad282f2ad","first_seen":"2026-10-01T20:12:40.477086Z","last_seen":"2026-10-01T20:14:38.676119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/exchange.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.751Z","timestamp":1790885636751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /exchange.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-21d9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4jpq1tCzFuLGw%2F6pxYQ3pMlPL%2FjisfwfehvhgV%2FYd%2BIyJQO1jpGyL95sT14xf98K5i8XJwWJG6auz4lQPfDHselLw18R5iZx2mCvGH1SDjku9LxCk7S1oDMayzVq8fkTpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217dbfc6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8665\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8665,"size_decoded":9600,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f9372778b6643d831f6ef3c3b8873442","sha1":"59d6ae41deb130d89c5dec84c06deb6395a89be2","sha256":"e8c16418c07a5c6c063e51ab187df7b9a1e8d9ea68eac97e5ebd608d5e01a561","sha512":"839d8e8c9198c1dac76490f54bb96be79182706bdb683479951faf479d54a58685d1b561ed76391c648597647af063dd3d5e0bb4d4ed16759217a39e5601be05","ssdeep":"96:pvB0RDqbWZc0efYVcNzv/2DH+KgDx3WGw4eiF:J2R7aYVcNMEBWiF","tlshash":"b9020e1803006793c139cd78db130ca4ddf29bc61bbf86986aac235c1699f20ba5afd5","first_seen":"2026-10-01T20:12:40.504108Z","last_seen":"2026-10-01T20:14:38.67704Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenue.family/assets/apple-touch-icon.png?v=7","fqdn":"revenue.family","domain":"revenue.family","tld":"family"},"ip":{"addr":"104.21.25.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:57.309Z","timestamp":1790885637309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenue.family","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 16:53:51 GMT","end":"Fri, 25 Dec 2026 17:53:50 GMT"},"fingerprint":{"sha1":"A3:5F:DA:4A:04:29:C2:95:4E:C6:B0:EB:F8:95:6F:8E:1A:0E:73:F9","sha256":"BA:8B:7C:0A:33:B7:86:F4:38:4D:BC:85:A4:48:03:3B:7E:8B:E1:5F:E8:C4:6D:71:C2:88:F4:2F:68:F2:79:2D"}}},"request":{"raw":"GET /assets/apple-touch-icon.png?v=7 HTTP/1.1\r\nHost: revenue.family\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86qptIIaLwAR%2BT8jCmyfOg0PAuOyZUfELTYgXOt4SCJqWxu33MTB%2FYZaZs%2FNpFdckAyy852xInvkfNbfyUv6MZyUVGz0e3xMU3RLz5LGUa5Xw9YkRABOXyW77jovl45CV3vZOBIa6QLEFYf1Dg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: \"018fabbe1a06d81ffd6fcdec54c9b0f9\"\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ndate: Thu, 01 Oct 2026 20:13:57 GMT\r\nage: 4874\r\naccept-ranges: bytes\r\ncf-ray: a43e218249b85685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21119,"size_decoded":22020,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"01f790a70f2a48ca80c2458a755fe826","sha1":"a0229eaa8d7c7e39e7bf39f6827d6f8b97a4b66e","sha256":"09783079fa9eaeba613df1d0f69f2dfc345a0ad58797ccc6022cdfd492315397","sha512":"8c7619d2b831481f04340a7f828b25ba12e15ba10b777558eb2820d7b0f3b57f6bb3c4c92ace128175e50709cc8e13a1927caedc63a2a4554f597c49d3fa7203","ssdeep":"384:Zg5x74fvAPd7pYt83OgRe48hTPc+gslU9GS+d:qgv+FPpWTPPXG9od","tlshash":"fc92beb5a558f650c769e871a1223ddc3aa093a437d3f50042fe8ccde01ef4a35657ca","first_seen":"2026-10-01T20:12:40.542436Z","last_seen":"2026-10-01T20:14:38.677781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":6,"connect":14,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/solana.svg","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.706Z","timestamp":1790885636706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /solana.svg HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fk%2FzVVkwys13TIppFHTUsx5Rh%2BMfjGsclsSaZTVE7eHChWV3qq26Us1oHCPsVoGrSLFjhFou%2BAMrC2hUiXhl3jeIFRma7HRanzBXG0VJg%2BZtbiYja8LFD%2BrDzwIGmb0DWw%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:16 GMT\r\npriority: u=5,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6abe8b88-23ab\"\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a43e217d6f9eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9131,"size_decoded":3538,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59565f61714fee7befb48f81cf87cdb9","sha1":"753b6cff39014678cb93506cc40d7ba6759d0509","sha256":"729196bf8222bf2b03b33f631f94c1b949e85fdf60bfa5c5df709c8e3ef724fb","sha512":"3ba635e352df3fb3a6401bbfea032e25b6e4ba2d593688fed1fef0f509f4e4b7d0aab6e559c4b06bdc554f286b1d32b570a0533803b1846f132e4d4da9aa735e","ssdeep":"48:z9IIMpvYDl0chc/NkY3qYgftSccKNOUgoTjBtUuMZJIoMuYQ12iREsf+hcHdOElC:NMpSFhcLFg6KNOgBquKKo9XjWR","tlshash":"8712f8bfb7f93a4ac704b701ddbc82244c08a0df5782cad6750c5bc5970acc6a5254ed","first_seen":"2026-10-01T20:12:40.52721Z","last_seen":"2026-10-01T20:14:38.678985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/doge.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.734Z","timestamp":1790885636734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /doge.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-c4e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=foNJyFeDxXYqYjEoIPCy0GVa73tzppYRvRu1jnInc9TqG04AHGPq%2FeGahrRZGstZ1de%2BmhZVEddKThfqbwkmvAN06ephq1qTEINjfx8Mc4FdLP9voE29Vhi0ogzZNVWL4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d9fb3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50405\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50405,"size_decoded":51337,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b96ce0de9c5c06400fe191d405d2d9b8","sha1":"4b25c3bd2b42d19571a8cbf6c058a45d6eb31230","sha256":"0fea203e9d0062ffca04dbc5784d839434ef3e58e284d32afd57454cf24ec41f","sha512":"20cad60c90607b40d1ef9820cf94162319c302aa0c646e3253f75763c3c2f80e6736a5432474a10a3f4086cd01497227e3da19c60244f2a20dab04b83d1c3a6e","ssdeep":"768:e8eVx3u5n/BVcOT0tgc0s0IdUzAl5gZvQ0ra8OVFF/kzSBogV9JvXSh:iVxEM9p0steMlOZvpuBF/9tLvCh","tlshash":"5133f2b14b6a7440cf8787f485a4d84be2bb9ab57ec8140003f188ef7d226c5b467fa5","first_seen":"2026-10-01T20:12:40.512594Z","last_seen":"2026-10-01T20:14:38.679902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/avax.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.736Z","timestamp":1790885636736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /avax.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-4fb7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1tER898%2FPi6ZaOVRAag3lN61Ux4yTGWKBzsIC82rGssplm5PL%2BoS1Q8LjKOrkqzo4IyPXu9b15OfQ5RlEzgn3L8NvF0pnKqTOh8B1Aqdt%2Buhrpgv%2FL1a4S7O9mY7j%2Fhgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d9fb6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20407\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20407,"size_decoded":21345,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b33d1b3ebe1c0182b85f18e3f527a4d0","sha1":"885a76b60c9e0d4c3c300d0e34471e189c67db69","sha256":"e7db1d2e4d3e3335bda6af85bf8187697fb237414f0356a2d7587bdd10abfa5b","sha512":"2383328b9f4ac33d862a4b8c02d74334e3be510c2657d4943912a63357fc07cdcdbafb818bda8462e387906c8ad61bb143a14e74e7f94fd98332ed7f9d15b7cd","ssdeep":"384:nysuE80QbdOy5PotDj5cpfeywU3cd0kdPy:nyjELQbd2DjqBzHp","tlshash":"0c92b0fa03081e33e72e9cb51c994db49155f2e72cc5284c50b10515973abaabbc7b7b","first_seen":"2026-10-01T20:12:40.491613Z","last_seen":"2026-10-01T20:14:38.680658Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/arbitrum-one.svg","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.756Z","timestamp":1790885636756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /arbitrum-one.svg HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJ9wmfqJ0m%2FM%2FRsLAW0tHg3yPZ5hqmBpqv%2Bk4Oqo9vZAGqqPZwxntHlbl%2BP7341dzkjSw3HHHq19neuc57TzfEZPQCHYmvqDDvBTQ8zPE9uWGS1fWnsGjGbXo3eDlPtI6Q%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\npriority: u=5,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6abe8b8a-23dd\"\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a43e217dbfcdb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9181,"size_decoded":3735,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8721479e77d3e7b0b44aa45ef19cdd6d","sha1":"393d69286ed96fe2b8bc51fe53b361c2f1941414","sha256":"15d39afddb99a2811ce285e18f0f415958845c48dc5d2d37d97469ff79deae6d","sha512":"512a608277f35eaaf0eb1c8d1e0494a60dbb42861521787b46b9d393a960a344de67e0636bf59b08f1dd29e481edb998b35d07e0b6e157473555147fed300cb9","ssdeep":"48:z9IIMpvyd2walVfJLcRNkY3qDfomtFZ0PfsgoTjBtUuMZJIoMu9Bc5aj7vV6hRQE:NMpTzRLc1cttF4QBquKKo9+sve9mEVxt","tlshash":"2012e9fa2bad7b9c53812501abbd76618e1ca0eb3ad544c6ee1e61f0d542d94f0224c9","first_seen":"2026-10-01T20:12:40.505175Z","last_seen":"2026-10-01T20:14:38.681339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/favicon-32.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:57.310Z","timestamp":1790885637310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /favicon-32.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:16 GMT\r\netag: \"6abe8b88-1da4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VimrFyF02ejCNqS8fBkzu54ogmNrTfkEJC0BembhLz3eTkNGFRPEHeWQgOiGnR%2B9jgoUNSowZKe7J19oIiZAt9xqxgtqSaz53fz%2FmgLz9zk6QUGEkecQVVvQcQjtcpQUUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a43e21822920b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7588\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7588,"size_decoded":8522,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"1f1e5cd44b9a3a27521ddaca94073afb","sha1":"2249ef7fd7519383a15b4f16c784f6f32d94f14c","sha256":"c94676759571fd9d872598517e66e06665a3913175f51a581eeeda5c9446e83f","sha512":"7f14d1513f7c69b9be86dc62642a39cb93a0b166b5c6657b1c807ac88b83796fcdc6d03b5264990bde08390b8925576270de83cd262176fe2508e44cb0251a94","ssdeep":"96:9lC87l2bW9lNtHefYVcNzWCZXazv240Turn9AR6x:xvaYVcNSCZKj2HK56+","tlshash":"27f1f931561566b1c02b59f899132c96b231b30871fa1a8591fb588dbf07b2639633bf","first_seen":"2026-10-01T20:12:40.543646Z","last_seen":"2026-10-01T20:14:38.68212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/usdc.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.704Z","timestamp":1790885636704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /usdc.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-7aa4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNZbqfLIV6QcTLkvpjTz6LRYUuBmTCx45xqgZuuo9r%2F7t3%2B8eCHdMaT7YkNvf73lx%2FlU6mlMu8NL%2FOlKVGfaQdSrvRa4F6i6MWLWxp5G5IeALYaF%2FDBcOVACh7FTLAVX5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d6f9db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31396,"size_decoded":32334,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"5d5b89ee0e7e85959987d9044a9e08c4","sha1":"ac4a1c5bcbf07aa9ab9b00c397309d6adb03ffc9","sha256":"7234e61d19811fc5484daf60721fa28757103ee92541fa421079179d4fe2ee6d","sha512":"fbc26eb468f682c5055ae219cf2b9e263f999672ef3f8c3e8fe70faf35470d20097f4acac31b39ff7d6bde3af5c37bde14965415320ecc4f43f8da898977a289","ssdeep":"384:piueDo3EdEwf9jyLm7d+pWMQqGAFl1Vuy10vqiKi4n2ALmPCSkEercgi8uhxfG/m:UueuEdptHZ+cMJG+1tWOxn2/CS9h8uDd","tlshash":"24e2e131a53627c6d50349b2b10399bba6d1b3097ffa145997b40d0d0a3be4c381b67f","first_seen":"2026-10-01T20:12:40.510241Z","last_seen":"2026-10-01T20:14:38.682879Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/revenuepay.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.711Z","timestamp":1790885636711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /revenuepay.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-45f9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRXbtVjSNcccR%2FbAzomp318kyL9hc4AqU4YjTfk0coyiGoTe9aFcgWPQXQwcOSj8tiFXtynmHHat05%2BSJYROauqpcRCtkCzHV9ScjJqaG4DHMJLgqbBjMBCxqJ8fp86NVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d7fa0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17913\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17913,"size_decoded":18845,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGB, non-interlaced","md5":"2d04e9469360f4f39c8a992e86a3ed03","sha1":"ed902ec94e50ab4b9cfc237f0d545cab0c43ac21","sha256":"d0e1ebf4506d818ce5f82728b57f4b2dca8d50a7179789842fb4310333340b0a","sha512":"146d0df506a5ce7fe79106e3f7d6c565eca1a6daeaade709db2378cb42327e3d6889b13e1fdab8cbdaf5e7e98c37cb2b15ec19449b061acf8ab508e5762aeb87","ssdeep":"384:Mp4JPbt0pM3uZCkz3Y61td93dH6Y+ttB3Up4MikEXNw:MWTupiRk7xdaYgtBQ4MjEXG","tlshash":"bd82cfb2222e6759c23addb8a9b3c9caf7552c5538cb14194372b1ccdf16b0b300a5e7","first_seen":"2026-10-01T20:12:40.507857Z","last_seen":"2026-10-01T20:14:38.683803Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/bnb.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.725Z","timestamp":1790885636725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /bnb.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-930f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=56CILvKm86TYMz93QCKZFCjNWjKxKdY3vrIg3%2Fzu6sR80IxX3e5ThmsRmTyVtZQczFsblbovOqvqwoxdDoCy45p2UoubWezBibHz%2FabxENipUWNckCASSO%2BArSM7CC9lHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d8faab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37647\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37647,"size_decoded":38581,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"278f25c54a97b69181372d3a9211666b","sha1":"e703d849a50fae96ac4420ba04d28dd5248ce21f","sha256":"1b42dccc5aa0d304c63bee66cb4eaee145c8caef7d49a0a3c5c2b492c66c00d1","sha512":"f2c632e19d6d6c7399d79e0798c33bac0188e317cff309cd6c2982b03dafe936e17214723ccfdcf84c0a9c630b7a1ed206aaf6a4ff645d8c4a28b5efdbe38c13","ssdeep":"768:l6ZkhGLwMnbDgXML7PwFAttTr0k35zFeX6eZIQh91t9:U5LwMQXM3PRtp/eX6i3F","tlshash":"c3f2f1a1dbe5167ed606c2311a23171b17a4b33e2941dd5812ea704f87e3fb65d324f2","first_seen":"2026-10-01T20:12:40.511322Z","last_seen":"2026-10-01T20:14:38.684653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/xrp.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.729Z","timestamp":1790885636729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /xrp.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-3edf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vm0QAGYxdBVg8TeNKBKncElXIxlfdc6Z6w54yZHwqpLiSae5rOIZAmx8DgiUMoscmAJk29la0qx85w1WV1tE7%2FL62ssjOJrPXjV4F6YaZhYVjZO3z1%2B4Hxi0R6A1eLjU7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d9fafb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16095\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16095,"size_decoded":17027,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"37d849aaee99b618a8438e4126184462","sha1":"9fd6cd2157661466e3c6447d9c4f8ca29f6e639a","sha256":"5666b3d5b2753de332e6a44462ef3b76fec407cf5a4d0ddac6f708cceee25243","sha512":"fec75f4487ed7c298fb76f3c424ee325fced8c8244267900d0fdbd7bb9c667948a67af7427dd63c6ad526188bd7094150a9e152d8a146fddce28c680eb18bdae","ssdeep":"384:5NFHcvk//OaFkZxpxBaGrxRaMaj7mcmAKxev45q:5PcvkmoUFxl5q","tlshash":"8472bf7f45e52320d312a2b08692203ab616f75550f64d8133f68c4dcf6b7b573603b6","first_seen":"2026-10-01T20:12:40.514966Z","last_seen":"2026-10-01T20:14:38.685891Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/trx.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.731Z","timestamp":1790885636731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /trx.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-5edd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6t%2BVG0WnnjrKG3OKte5h61EuSv18XW%2BcGCrIkMKHdlvCEJXmNzPVDkT1VbCKgQWvTrCSgdWvBchhBKnouaGDoTMgxbbTA0oWozjV1Q7x3qryOl4dEBw7dhEx5xqy8m%2F9bQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d9fb0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24285\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24285,"size_decoded":25219,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"427b2de0d2a52ca7255cc0ae334c1376","sha1":"9352f68e8b54ed3c93053f2ce1c0dda6b39dceec","sha256":"e64020fcfae3be648c4feef4bbcb2c0222cefbab08e3be88c9f032fbc1813cb6","sha512":"fbdbcba94a02cf7e4cd5bd2884b3f366c11988ec4033e7158b63e704c97efd23e64197dd50c9c8e19d84155d642b23449ae43d05516612641aef96e3c57e1486","ssdeep":"384:CzDCgAFI7fz7V1/miLHTp/I2UnzGDAAGKzKYYrZx5NgiVmsVBD:6O9FI/7V19HTp/wKmVPEsDD","tlshash":"37b2df3c870a2d25e6536436f2402ca7ab21704cb0ce1d1c26f16a571950fe8eaace7f","first_seen":"2026-10-01T20:12:40.488882Z","last_seen":"2026-10-01T20:14:38.68674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/xlm.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.742Z","timestamp":1790885636742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /xlm.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-4c49\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Ba0L5krCxXlw1dz3amsx%2FHbkZs5VymOKoar9P%2BUD0IS%2FGeiXQN3JqBf287F9AIpmAhRj06WnyByEyF6lTM9hHUvqufxbI%2BHfvPvkEFS9LeagO59ua7wr5J8McdQjEYuCww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217dafbeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19529,"size_decoded":20467,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"fd93cdbe0f614eab1fe48ad9279ba37c","sha1":"4833394825aabe8bf66cb43ab4b7b1e87baee7a5","sha256":"9423aaa83389a368795404b2172885d993df4fed7114cb960df5b4c5726178f4","sha512":"e1c6bd740b46826d7bbbaaa0ec3af1fa48e400aed68ee4fcfaabfe2f478f939b5e699d0b3730ee73f746de77ba09c04b077119f3802baae8314d0b91a9c6703d","ssdeep":"384:fgpZVBQkn7xBQ41IDGSvGIPSgMh+jloOKL77csw:SVBQyp1IVvvFMh+eOCo","tlshash":"cf92cfb47538bfddf11a0272be6a35d1e160930a28c369d991b62084174ef6506cc3ef","first_seen":"2026-10-01T20:12:40.538676Z","last_seen":"2026-10-01T20:14:38.687646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/btc.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.720Z","timestamp":1790885636720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /btc.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-5cb2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rk62PtsilGRq%2F8f1kSZ8bLj2jnta%2FMMIH3YUha5Ara0J6CBycVEaRZhWZI66uhjolFlpHrAUyuWA9WSp0kJ%2BrvOajCA3SxC6eEsnwP6XV2Dg4cIbf6nGTs9%2BxBIe8XN%2BJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217d8fa5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23730,"size_decoded":24668,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"add19fd57fb91c17f52f5ceb20a93668","sha1":"31ba04552df4bdd22d551f28081738d19ea778c6","sha256":"1f00404c656e6310866f71eae41b6cfdefecea16f92e2b485b7ce75fb69c013c","sha512":"e5b6378d27acdd0ea97ccafc1a068eec8d08e606daa1b1beaefa169fbeb40227c4f96ec1a10b52d9484aa861b08d94bcabf22af3dacb60696ff7c49b542b8e5a","ssdeep":"384:5RwJ5IYtPkbnY8GaPp3a+bcMTHwWBnXmjLf4/UG9Fm6syKuLcu4/K6:MPIYtPqY3n+brrBnXmjLfOr95ay4/V","tlshash":"b4b2d0f6213548a3d370c67c13610ac0e810bb18b6676408de71c4687f77bb62eb62b7","first_seen":"2026-10-01T20:12:40.513767Z","last_seen":"2026-10-01T20:14:38.688378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/uni.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.747Z","timestamp":1790885636747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /uni.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-79cb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lJ32vQeq1qnab1ZEWLL9SNYKnadV2GKVClm62HzBo1Smj0JxgMjJS78l5VXNla06U6pHCeOOpgVgHVwfisgZAKvQdonNnVXP5%2BUMuoAUxI7hIxSdDSpXELUDlud9IO8cEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217dafc2b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31179\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31179,"size_decoded":32109,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"ab972a474c0ff25045d78b1fa2f1a253","sha1":"9e9a7d4be4856cd8a00a7ab55182091ea119d082","sha256":"0a62217c9a2fc7a2897d1c9ed3d1ed1e15b16d23915cf662fd22328f6e8d95d1","sha512":"d6f3bebaf3f92a67626ffd5e36d66ac4e3383c3041c259236a9c2d8579e0ac38e76639e6b6811ca8935a1e63a93b9555384867e4d0244c51103f684bc0469e6b","ssdeep":"768:BYYufZY4KbGFE9tQR1X/A+MI91uH5j55+tCbZTec:uYuubGFe+AZj5Qe","tlshash":"a4e2f03c61152519ecb7f0781b63812a8ff0824d1431bd8f2ef5c4ffbf259aa9141a6a","first_seen":"2026-10-01T20:12:40.540058Z","last_seen":"2026-10-01T20:14:38.689126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/jup.png","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:56.750Z","timestamp":1790885636750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"GET /jup.png HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenuecto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:56 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 01 Oct 2026 16:34:18 GMT\r\netag: \"6abe8b8a-9d78\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 114\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ca2B2In6TsGTj%2FXhlJKp55vBeKQlS9BDpJY8aAjCwVHaGk5NGZGeje485YNDXOUB0FdR%2FBjyXs9gPYC6YSeDqnPXhPA1oYrZSiLLhOuSaOTXl59mHE4gTJPIETZvYS%2Bkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a43e217dbfc5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40312\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40312,"size_decoded":41246,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"6e2bc799f670c39a7914e11c799bda70","sha1":"bbe647840a4207f75de3da1db3514c1582784e34","sha256":"eabb339439d11bfb3f9f4c427778ddf8eea8539d8a69fba61df8b9e09c7e5bf5","sha512":"ffbd0d1b8240b0cf1d475c6b0fc7a49a9a624f8220bfe7c43532026b2816622dbd9f41123becc5a0d082c470658cc05b7835a42d0b9cc3da94dab238510aabbe","ssdeep":"768:6+jyamMYgqBUFBs5lwWKaTnxI4zdmQcgDT:NjyamSq8O5azKxIMT","tlshash":"2d03f1ea1db6d063c0fb5af2b8b30d99a4f5512571af4a1805f440580bc5f65161f2e7","first_seen":"2026-10-01T20:12:40.478463Z","last_seen":"2026-10-01T20:14:38.689923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenuecto.com/secureproxy?s=%2Fjmpd%2F","fqdn":"revenuecto.com","domain":"revenuecto.com","tld":"com"},"ip":{"addr":"172.67.154.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://revenuecto.com/","date":"2026-10-01T20:13:58.606Z","timestamp":1790885638606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenuecto.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 05:59:49 GMT","end":"Wed, 30 Dec 2026 05:59:48 GMT"},"fingerprint":{"sha1":"33:BE:2B:B7:75:5A:41:6E:2D:02:64:57:FD:EC:C7:1C:64:9C:A2:80","sha256":"A5:5E:FB:2C:2E:3B:A8:CB:8D:9B:09:5C:04:61:1E:B4:E9:D6:5F:33:E6:15:EC:07:A7:D5:67:A4:EE:3D:3F:68"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: revenuecto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://revenuecto.com/\r\ncontent-type: application/json\r\nContent-Length: 1294\r\nOrigin: https://revenuecto.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1294,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBDwPRAh4ACADZAjYDJwDxAhgAAQIARgMAAO8nhn2XtsKCAevcwdkpMAJLUkze8YgCAACBz9TLfeI-JOrc2zJ7ffiXQFyIY4hP4UsWOAWHIL4nY3dUQWNXlOu-NzMQJU4mTtgVb0XI61iN_8vuF9ixSKJwBxTPhFQ95NScTWZ1GIg5KdeMW7HlIU3HDgtx1ritwplE3tKaU1SCX_BdfKG1TGe-c-8c1AkeuJ0rqcbv6Zb6RtX_KSIoA-NBCzjxbzmQ3nnz3qjEXar3yHsIwvZpYobpm34cr-PqhyfV-kh4EJBNIKrKuIUGdxP9RFzEKa5WfTQgzJYowLAw2WLxmf7beXNkCi4ljwWtYg_6acLywtXrYx4i7o00VfeBCeHy8s_sn734aTmsxKN5zno52RFLXw0llZBgY3kAbluwpyHveKyuAzYyt0n_tTkhTCJSKlbq9fgNwGOxSCD0oYTZlqql8lP6txA-v4QTuM6irxXpEFc8QAaMolb81lBk73YgnyitabKx6CDYWtt1_qHjhCBrMkLE6qvPqABWBJ_PTl47pOZ9uX5rsQJQckdF9oR-OsWVJ52l3gCF-A76XX8jnzuxEvSw3dso4fQpgOecHsIkavx5WZMcoZEYJZp9V1KsQdGEgFjs8DRva0Ol9AB2ReooYZK2cxqckI-r9NSwiiDKpAKxw7m64Se9_Xv-XqFU9CepJU9fZeLCyjcu3feI5xPXei1Y9ULFw_mPSbirih5JcH8cu7sVrBAo6opzuZU-dtbJ9buVAW9xQ2EiwXeGIBL7s1SSxxTFqbx-7xgMcTp3q9U7uFF8VacSm9mL-uoe-7vS0i_UEYW3GY1GIYkkPTSt2Z7ChYnG4PrmEKeikdX83RwEVWU-n1i5r08eStW89Xta0TqMxA9H3MiwCMUFEa3cSeinhnJXtRpsEc7DIMAnOJ2UAk9Y2ouIbn_4E5bK-vJdwzYr9kTuR9XLpmBY3_6OEU1kMFkLFeJPIygVO-n4sQ1Wxd8Bbbx-yxI22PoqNIOJTi4XFJi6tCkkZcKyaUBeDF0WKJYYnQ3Bz8z1mYr9QDmYBbEUCoZI9OE1uFpcOs8BdKSRAmLXxow10ZNK88HpkbRAm5HkdyKpychhSDw3aEqvhlndjqGfqXKprAfNAV2O5Lo8-p9kzWK2DZQK_wxdaAoyfl7vC9ObFRRaGRXm9SU9-vSfjle_Y2ipsBSDGAUQ\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 400 \r\nserver: cloudflare\r\ndate: Thu, 01 Oct 2026 20:13:59 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"b-EFiDB1U+dmqzx9Mo2UjcZ1SJPO8\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1790885698770\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 400\r\ncdn-cachedat: 10/01/2026 20:13:59\r\ncdn-edgestorageid: 1444\r\ncdn-requestid: 58915cf137958a497a82a4dd27aaba93\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhrBLjYHOfMSpAaFh6gOCMolRxDdkaRAc7COia0jwy3nOkErJVFXK%2Fg6Aux0I1Y3jlQw24USxMdjF5Aciqth8B5fBILDkRy7W%2B5OM6pSHnpb1MD8eKvIjTkduRoq0Z%2BIiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a43e21894ae9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11,"size_decoded":1496,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"825644f747baab2c00e420dbbc39e4b3","sha1":"10588307553e766ab3c7d328d948dc6754893cef","sha256":"7c41b898c5da0cfa4aa049b65ef50248bce9a72d24bef4c723786431921b75aa","sha512":"bfe6e8df36c78cbfd17ba9270c86860ee9b051b82594fb8f34a0adf6a14e1596d2a9dcdc7eb6857101e1502aff6ff515a36e8ba6c80da327bc11831624a5daea","ssdeep":"","tlshash":"6550003300c0300cc0000000cc00cf00003000003000003300000cc300000030000c00","first_seen":"2023-04-05T23:04:48Z","last_seen":"2026-10-02T18:53:18.682781Z","times_seen":10709,"resource_available":true,"data":null}},"time_used":864,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":864,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"revenuecto.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}