{"report_id":"284f3011-d4df-43a1-92dd-eac4bf3c4452","version":0,"status":"done","tags":[],"date":"2026-07-22T19:24:35Z","url":{"schema":"http","addr":"richcas.com","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"title":"Richcas | Decentralized Web3 Gambling Site with Provable Trust","dom":{"size":662529,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (53360)","md5":"92541ed588cbf19ba46e1c6676218155","sha1":"3a41ad4110883ce6bc5d1a2ffe3013ae5cccf2c9","sha256":"a327f8c5b92b687fd3252975a6d0283dfc4620f65650eb320c0e936ce4372501","sha512":"6dfc38d1da4d893d86cd79e1f7a49fe16eb6e2753911214c4a9b7b436eb19b9fd9edf5668ae73344de842c0a791c364381037d25f2cb16ee0856ba6b45928d22","ssdeep":"12288:EULCdYi6NxNTiLAvU/FvzXf3lf3Eg/Fv7AvghHkS:EULpNxNLvWrOCsvghHkS","tlshash":"02e4e173b11047d3a70b8b8cf871a9289dac34ff67d689d8f21809d59355cbed5b2882","dom_hash":"domhashfd0f9cb4048c2702eddf30eab23a1a90","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"richcas.com","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T19:24:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"richcas.com","ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-02","domain_rank":0,"first_seen":"2025-06-29T14:11:47.385331Z","last_seen":"2025-06-29T14:11:47.385331Z","alert_count":150,"request_count":75,"received_data":4095980,"sent_data":44221,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":2,"received_data":99814,"sent_data":1115,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":2,"received_data":12348,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-23T12:28:25.734561Z","times_seen":199199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21dc58c2d7b3cf7cba263ab41b357a41","sha1":"af8592e25107c0f275ff86948e3093a07c204f74","sha256":"b0a7aa2e2be98719f7c3e6ee7ee1377805424f04fbe0a23a0f5837565509cbd0","sha512":"41b1c49d7ab426fa839cc39d47b1a49004a8f6477875f85cdef701d5e5f8642786e51232d3c4db118bcc330b56d676bcc0eef8a52141e66b3121d424a14a634c","ssdeep":"","tlshash":"a651694ae84ff8112930de9f062f4f3a88d49e7b82b5916cb79cc8c94162db70388d81","size":2545,"data":"","first_seen":"2026-07-21T02:52:09.031127Z","last_seen":"2026-07-22T19:24:40.495925Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dde6c0aef7010edfa64d55909d7fe046","sha1":"4781970abc77ba7eadf47e7fc71d7845749335ae","sha256":"4b63ca58854402adf15e752773dc7792f867bddf9a885206fa811bc92b3a2ec1","sha512":"62caa34bb3ddb684646a3ee8c322d9aa1ac472b1b348f3b482839d64864c1c827faadcb2d686a77a3c63b06c52b110cf5e04a6b94bedf440a857b6cdc5c8ccba","ssdeep":"48:LZVODbWa/+aJTQhV1fhV1ZoWnnBn6V06r/XnSDnBn6V06r/og65pbX73Op9/+Cjx:LCDs131ZBmFSmFxgp/DndDmDAC","tlshash":"b7c1e41f6809de06dc3e7c6d023e9d3654ccce7b8761daf8819ece491a065b62bd9881","size":6072,"data":"","first_seen":"2026-07-21T02:52:09.032354Z","last_seen":"2026-07-22T19:24:40.496963Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d272da3a9b09210f4dcc16a89c5ad139","sha1":"af672ed622ef035da837f84c4d60dd22f6ad235c","sha256":"ad146a41054785a01620614b59e02ca6b0b8cfd0a8871d751947994107118fc9","sha512":"dfdc9b90c57dbe296e15394b5f12d96c3249d12f61fe6c3bff42dee4875cf4ff97dab3859a889bda322207959b2e82588f7fe8e51407c6469d0f0b9b76a94969","ssdeep":"","tlshash":"15b09b64f015fff555a91571653de445325f50cd595c1470151391a51709d142717ec0","size":123,"data":"","first_seen":"2025-12-17T10:01:40.746958Z","last_seen":"2026-07-22T22:45:23.625343Z","times_seen":909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cde1220258a0ac4f98ce24972b2503cb","sha1":"b1aaa250b15bfea94c39a28d82e32287252d6643","sha256":"8c86109b5ed00e9594541eec16aee2ad26e11888c01124da7d8676fea0833751","sha512":"e78b962007d08d0e1cc694bc59d202f052e6f7fff1350f65d609e653facb4f7af6f9f17e8aba6fe434a4a884c30ec43f37772c0238acc74ac648291f2787ecb9","ssdeep":"","tlshash":"b5d02ba1cc13cc0dc2560f19287e6c3521ccc9b403055107a895c97c1d86a3449e0d86","size":268,"data":"","first_seen":"2026-06-08T19:33:12.080994Z","last_seen":"2026-07-22T19:24:40.498528Z","times_seen":735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a2172bb84448ecf7c4f9efff47852f8","sha1":"0956dcc5c740e3453ac413d67f5eb819ae25297f","sha256":"82a5ec8629b50f3584fbeb470297159224f24d2e4801b5050429208ddb020477","sha512":"0a55491e28b74e39232005f6133eb017366d495b664fcd632e83665484a111bb8f35b441f12c0d45474a87d596bf55debde65f12f04dcf9f93fb4081f51ecea2","ssdeep":"","tlshash":"58f0c032ac10fb505ff6d77c2a3b8cd120dc9564050183d4ae78c81d10471348ce6fc2","size":504,"data":"","first_seen":"2026-07-22T19:24:40.499139Z","last_seen":"2026-07-22T19:24:40.499139Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/09m28z2r~.w8j.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"295cb7b39a766115859fdd340bd5d661","sha1":"4f8bc00001417248ceee285064417928d803a6b5","sha256":"ec7bce2e98540116bb9d28db10d536e7080f5ddaa0857e69c61ed1be3eb349e2","sha512":"68efe9be524b8e18376d1e860d1005349b1f4a730ff580d5234cb768e006104667501bd4df92408b23368685d37bcaee494016ed18cd363cc1a939069a6493e1","ssdeep":"192:m6QqMOx4O2NbkLEOrd6kFJwiKDcyfKm4i5LEzCQ6aspmi+fQjgEzmQ:mqKZBaj6kFMJCm7Ezsasp/vP","tlshash":"2c62e8ad7155f0a10fa36465407f400bb33929b6286dc5e0e3a2ecf5a9b456ec133f6e","size":15910,"data":"","first_seen":"2026-06-08T19:33:12.049499Z","last_seen":"2026-07-22T19:24:40.464641Z","times_seen":739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0.tq3hqv052nt.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dc8cb2a59489c1561ab34843f6ea999","sha1":"5af3abb3d1dbb398bb131d6cc4976c6df6113a9e","sha256":"07b5b0a411a49989495c74530e109e477f9342b2dbf476217bfff08e0be0af3e","sha512":"5b14c7c64ba184c60488cb10d5096482538946ccda7801ecdffbec8c2b2cc70394be8baf3924aa04b70b00963afff814b388e8429a9f2bf476ef3c381da6c289","ssdeep":"3072:pbPzjb93YLLBpqE2O4dwg1ZoIUtQJ0aqMuB:pbPzjb93YLLBpT2O4Og1Zit2qMuB","tlshash":"8be3e6f935d1f88207ab50a6c03f0006f22c4d77189e6860e3e5ddda756465de2b3faa","size":144579,"data":"","first_seen":"2026-06-08T19:33:12.034645Z","last_seen":"2026-07-22T19:24:40.485603Z","times_seen":738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0k.g_i_ucclyt.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54271f2979c4136a541c1a337e441fe3","sha1":"c752df0903c1aedb0c5b207e755820248301287c","sha256":"80e41d5100983ef55413acfda129dd012ce558cd02fa99f4a0dc6783c6acfc4c","sha512":"215148d7c2bd8743c4939c02bcf15ddace1f2397858f0b6f35fced449b610177ee00cba90b076721e3ad4ea933ab5ae35d74ca2352718f9a5fd2223a36e41c11","ssdeep":"768:e8ehunucesw7F7sKaMrxwkXRoOiRLhFHM8XzR46XOUYpJ7NzWxaH3PMbtJpy6xkM:e8ehsuuiQKa0oHMUR35IW","tlshash":"fd33f9e2f1d4e2d9e4061b80f81f9808e52e39bdde45ddb466bcaca11f204d8b985fc5","size":51973,"data":"","first_seen":"2026-07-21T02:52:09.017797Z","last_seen":"2026-07-22T19:24:40.445835Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0li9mgra_8nfx.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c1ca7911b574ce20daed1f833b108d6","sha1":"bee0a37c5dc9d23fa8e592d34529399de963967a","sha256":"eebd59a42ffd9f0a8cb12ed2797fba5025977de2ab885cfb28df20d9d2f92ef5","sha512":"628e8fcb0dc70c2b54ade8cb8b86552ba3a81882c1d3ef21162f7eadf578a7f1e1f03f0b59fccd849bb2e5e4fc4bf4df4dd9776c2ed575969f07a23c0416619f","ssdeep":"768:6jWexfqnDkUHRqSEyu+bauIS75xh+3BdOkgRt:6KetAkURzRb7xwxrit","tlshash":"c5a342476395e41e8f73dba0e91fb767c2184cb959638926d10d0ea4c94f8e1caf603e","size":103921,"data":"","first_seen":"2026-06-17T18:29:29.887806Z","last_seen":"2026-07-22T19:24:40.460193Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0gtqnwqp2jd2_.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbcb0a523d301ba7e15c269d3a124232","sha1":"fd263d422ba3e2f5182f6a75b8a96fa1d3ed4112","sha256":"96fc85ad0a723d02940ba6592f17047ebd25055c1fc7e4fe0b171ab0a8b1cb10","sha512":"f9b75df2b08996a17fd9a03d7107a02c50487bddd3fc081e685f5400206f13692a054c49917a6a720ab7e70797d72a6a4e4dea29ccf7f320431daf86a5d421c8","ssdeep":"1536:c5gCTP3oPWPyx34NhAG2CGpDWLmLFCKxgogH69pca719HnZh57+rzDgdjruQ8CpS:o//PyxoN/Lex1gH6JRRwDXwpVol","tlshash":"72b31a17d24423f217512695740f69c8b3bee9c41b62946cbd99803d23ac9e8b1b7fec","size":118151,"data":"","first_seen":"2026-06-17T18:29:29.90313Z","last_seen":"2026-07-22T19:24:40.479192Z","times_seen":615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0514pcijmsasy.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed3d466c2d251d739ca14bdd80caf061","sha1":"38eabd2cd88e7589c09720b23fe926fb69e7bf2b","sha256":"290816770359c2131dc4f5bced87b4de8567a75148300b6d38673561b0e80fa3","sha512":"b56e083f791bc181b92e28bdedb61e18924c835f4b3a50de7cbb37862ac0dc18305a4621ecf1f2ab5615551286ef133723ee259929a8db034d10c06dd5f4d370","ssdeep":"192:k21OmPkG5HtOCdVC8+BrTvk+0tDq1ZT643MN3WYtdUo2RBRmuk:J1ZAEKcDqf23Tso2RBRmuk","tlshash":"8c122a94f1a07936035746a3a1ff0702733a89595c1f84ecb1b888882b71e8d11bff9e","size":9691,"data":"","first_seen":"2026-06-08T19:33:12.061464Z","last_seen":"2026-07-22T19:24:40.452521Z","times_seen":739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0sgujaefuis1t.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4306909cf0740aa5bd2a022325ef4a5c","sha1":"4764045fc3ab5b920299be464f514235a13ae68e","sha256":"92e193c4bd72ba0a36b2376087e0d2003b3203f79478d6fa795aee5a963e6c52","sha512":"5a50340ec2535d06476448c1ffdef543b67d21ce4d65e331bf7c01971515bc1e4be39aa2db712c05c849e5f4dad6232fc564c74a56c2332cd623eb4e004377e4","ssdeep":"1536:URqtdBTaezAxecSsuoJgD/8YAwDNBuLNtYKw4CZIl:UROacR/oPYKw4CZIl","tlshash":"cc73b956f1f4e7fba04e165ce41b4418eb9e2dfdda846df4cbacacb011118e0768178a","size":74903,"data":"","first_seen":"2026-07-22T19:24:40.460713Z","last_seen":"2026-07-22T19:24:40.460713Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-23T12:25:45.483489Z","times_seen":731302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8a790b9082e3322401ea0f00805cbd8d","sha1":"f2deb7a191c0187b65516091b9ea6f2015c4cefd","sha256":"d4f88cfb3225b90e42942c0e9296aa5d16394a6ab8bb24278c55271c3288d628","sha512":"e00677ab35847e442a90f8c1f25616ba7852a62fe7e4dd21069a4b70a8e70f56f371b57f6af4e320da7e3f43327a739c33d8a6fe195f4a59167c3516ef7e6d9f","ssdeep":"3072:ll+QcznqLi2ktXYO7s6iEK56W6QorVGlbrfAPZN:l0zq22k1YO7s6RW6QorVGprfK","tlshash":"880486812ace514c82e6d2e2522733c9e8855c2d8b465dffbe0af2cde95c843b1f7594","size":185641,"data":"","first_seen":"2026-02-13T17:42:20.359964Z","last_seen":"2026-07-22T23:57:54.93222Z","times_seen":614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/06jljm--ci~tu.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aedfeefa1e80779099b9587ea3b1db29","sha1":"6a48447697ef6c01db549d36c6e38f1d20060ced","sha256":"1f315feaa50045554919b51284afb4ac2967751c6f67f84fe41687a3f01c55f8","sha512":"db2350c028befd1718dc036246f4541da89160807ba1159f058fcdf8d99e885a6b0eb8a266f3a7d35c64ce5938a06ebdf6b3a08a252b94c0b5e6ecf3710ed20b","ssdeep":"96:UXsY3Gv2/EP3DwgZA4b/WMJYBSaWHn5GdYLIa7sbc3DXTNDXTrv2P:UX33h8PDwgZNWMJYBbWo/a7sbc3DZDGP","tlshash":"0eb1c7b776c6fc70415685509837834bba182e37309eb0d497eaccda327ce4a85d1f9a","size":5218,"data":"","first_seen":"2026-05-18T06:46:56.921829Z","last_seen":"2026-07-22T19:24:40.453124Z","times_seen":742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/ttq.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9fee0345463ae9db403ccfdf7e9ae43","sha1":"a41d7e9cf88057c1e115bfa15c632eb581d56524","sha256":"00f81e0e1d50e29f9d80af0ce5defb723da6f1ab93334197feea23f4bc5bbe3b","sha512":"0e5678617c56124e7807dcd3a00a915349339cfa0e1fbbc279854159682e513c9eb390d0e4cfc2f7e6c1a9222b70a8649fd1796eb8122e0c6b0e94d5b25c489d","ssdeep":"","tlshash":"4d11985c38fc649c839991ef327fdb4c822d90270c40cc48c40dc5150435eabd451e7b","size":1006,"data":"","first_seen":"2026-06-30T22:42:59.712514Z","last_seen":"2026-07-23T03:04:17.502595Z","times_seen":743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/verifyjs","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03ddefdfa987afbb0f3344c9fc3d6c60","sha1":"9211cd488789a491193bec341ca8c3cefc578186","sha256":"1de531c948473965752aee3fd2d34a9826eacde6bf843b6583987984eb8aedb0","sha512":"7d4f73b9bce273b1833c4f4ca65cd6f572300fa57f43d810b0fad836e4a7708e23b8cb720c2ba51dcb729e582c06aa750e1c68765568b8437f18964bfadccf38","ssdeep":"3072:43iH592QSLlV1m1uIo3xMI7s6iEatghQmrVGpTZ3APxV:FZ9sVgkIoBMI7s6fhQmrVGNZ3W","tlshash":"6504978129ced10c86e2daa642373bc9e8855c2d8b461cfbbe0af2cde55c453b1f7594","size":189140,"data":"","first_seen":"2026-03-27T19:01:58.946492Z","last_seen":"2026-07-22T23:57:54.881734Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0v0ixs97.v7n5.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95ef99c841282f013e4d316bdbf10391","sha1":"f80792622b31b0dd0d1e74be890cd66f97e0d423","sha256":"7235294725f74bc429f63b3c0547001aa7e7e3f3d41af140d53b973f5e2d9368","sha512":"8a0be5bb197316d7444f9b8f3a62d528e5a286c8cddf782fb8bd0ea1fcf5c488c7d422dca571d7d0efc18eb47b3ef33e19aad8b9c097396fbbebf3d80388d481","ssdeep":"3072:yXi31G2FJlN+XTGKDXKBGchpLjdLWVwNrJqhWq15014BWiJLe:yXi31G2FrIhz15G6WiQ","tlshash":"dab37dea7342b435836b805e416f8506b23e2d64580e0c19f2b9d8dd39b4949d2fbf7a","size":108049,"data":"","first_seen":"2026-06-08T19:33:12.050394Z","last_seen":"2026-07-22T19:24:40.461931Z","times_seen":738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/07b~lfkhc7~f6.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"109cacd54b4cb00227ca58e34d8168ca","sha1":"9af3b7bed6b65acca8080874a47307e6a0d6b3a1","sha256":"4de148ca2676f0ca606715a307cd028d1cfa6f63a59f5ec45f259e0bfea61faa","sha512":"9c40e0ce244052efb8a56fcb6146993d50584716e713a4880726a2dacc446dec383d3f16b1e2f3888a414c83f0b633b3cbd87752e4d338764dcaedef96abdbf0","ssdeep":"3072:79zcwGUN94sY8YzaPnx1ll779zcwGUN94sY8YzaPnx1llX:JbBN9nQwZJbBN9nQwB","tlshash":"5ef3ef35d8d0aeda231c7be4d9051ac64bd1f0920022e9b6ef76709be8f4295f7d1836","size":172200,"data":"","first_seen":"2026-06-08T19:33:12.017045Z","last_seen":"2026-07-22T19:24:40.459599Z","times_seen":738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-23T11:48:06.73233Z","times_seen":235728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/turbopack-0ecgschtaudos.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ba2cb91d34ea9e9369784ebe9af4389","sha1":"384f6cf4bd44ee8abdfd3c2b3239164fd7d59351","sha256":"54a5acf97d9eae9f3ec52b7fa09d3b076f41747ab972ea5c3a84d6ac1cc71439","sha512":"c7e178c33990e900f1d7720cea3451698680da7947b01a43114f47f2ed2c308964cd3f024a682e9937d87485ac64f3e708048a435e3bbbdaeef1641c78a0dc62","ssdeep":"192:z4gMFB683Esgdo2YE0hBG/lhjTNWn+S3sBT4fCT3cXXqroor2:z4gMFVgOQ/lHW+ssqCTMKA","tlshash":"8622c8da37a6f07343af94e7906b4004f17d84a9145d141cd3aca8eb2c394ae85e7f76","size":10581,"data":"","first_seen":"2026-06-08T19:33:12.036767Z","last_seen":"2026-07-22T19:24:40.486085Z","times_seen":739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/00txjv18y81xp.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ce6fc1ac19a91ab9b96e5e1a9f282b0","sha1":"8d33c689780551b67888eacf406466aac6275d6d","sha256":"401596fdc663801d8d4aaf96a476f9d2468c085d11f942979cd2b2f4135715d0","sha512":"3d41e06e4f96724a69f2f40c00f8966c19f3e32e9f50aff7ead5fd7bf3fdbb2f486bd228fda15f4804451a5bac96cfeb96d3df1b54f322059f03494fa536655f","ssdeep":"1536:M8udv/NqM7t3AKjSkmE5P1tISAAjJp7BmWok8EO3KqI8GYDNFR9QJn5QExF8:oBAoSkfvtHXjJCOsjI8hJtQ7nF8","tlshash":"be93a657e3241b9a1872727afe4fe181f61d8cbb0799cb50b878e51927c18b87834bc5","size":90224,"data":"","first_seen":"2026-06-08T19:33:12.041169Z","last_seen":"2026-07-22T19:24:40.474317Z","times_seen":738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0sr_xcnnnospa.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48a3ffbf0a576064a25fddea47a230d0","sha1":"5d638fad38ab159fc4f1fb7a9c320b8943437d98","sha256":"ea660e0b9945931df0ec205366410905aa9575da39a5fc10018c9556240b1ced","sha512":"3edd874af56cec81a137062e16ed8df8e969338d0f8cbdd6e8175b373f36f1212c5a55d49fc0ea9bc443c15076046641b4ed7c174cebb0bae92772321eaf40c6","ssdeep":"384:KimN/B22tHVKCjpjtsFUjjvmz13hKW0KInG/as1e3:Zm322tHAE526qJ0jG/543","tlshash":"93721a427598fdfa0b57d39cec6b8004b17e297ed88c80b98f6cdda0317594a7094f69","size":17273,"data":"","first_seen":"2026-07-22T19:24:40.453645Z","last_seen":"2026-07-22T19:24:40.453645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/fbq.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","size":408,"data":"","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-07-23T03:04:17.494992Z","times_seen":26784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/03fg85j1c363f.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05cda99838f3df07eb438b054ce7d2ae","sha1":"5d7ba1308daf2a223c780b365a7123a12d2a56af","sha256":"72a35adf797fe33e0548ce20a161ab102a616803284bfb50f3755bcf8a8ae9b3","sha512":"b5a255650f22adcc0c518c24a86d52d2ac36bc52845302fa088afff62f41fd3467d822b72ca1f20045b35c4f9e9abbb7754bffe1d4355563a6cf60984e3348ae","ssdeep":"12288:yibu0iI0QXDQnq5u0FxIijiw9LUoXQM+M0qizOVNkUoReh+YoJLPP8v0hxQ0zPV5:tbDiX+NRv8tB","tlshash":"fae45c696025213897956090c15b3446efb1682f2dc944acf7b8ecef57b4e8e332af71","size":667746,"data":"","first_seen":"2026-06-08T19:33:12.046227Z","last_seen":"2026-07-22T19:24:40.468277Z","times_seen":738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53d91fded33212fe58bd9be3f207aca7","sha1":"c826eb762a0334b2665751ad9f8dbacb8b38a9bd","sha256":"b69f93b0fbace6cbf11f7b4acf901a3b3a937d1e3ef45e2ab8fd5f969e56a161","sha512":"b335624a40c35480d2e64680d3ab117547239f6aeadfd16413e1dad0987abf09f95e9d9408150427d4a532bd7ba43b08fca4f2876dc8eac3200474831c16c754","ssdeep":"96:xichOxrAngg3lSUpRNfvoZQarjLEbXNS6kjnul4Rt2+am:xich+rAngY0UbxAZv/697kjQ4KG","tlshash":"d9a184c5b90132a49f7676635d3f500afe2b5c80348fc2a4f090e5b0ac7ca49847aea5","size":5014,"data":"","first_seen":"2026-07-08T18:21:04.349928Z","last_seen":"2026-07-22T23:57:54.933401Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/16rmwuk.q6kce.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5cbdef62f70832a02868c81bed4d0cd","sha1":"4d77c0b7342c6700e8dce963de3136d937d75b23","sha256":"1772b49f52d973040f54ddfecd3ec3c5333a06566491f44d881a06852d94ab32","sha512":"fcde5221d5f85fd6c9077fe4092dfd79e9901552845905b925e095b1be1cc2de0d1ab165ab5aa309fc9db126316de67fab111f21da93129d2c8887c87f886d9f","ssdeep":"768:7AJ81OugdCHq8di830F9Lpl/v+GMd9mML03RnyiGM:7AJ8I+xdi830Fwq3","tlshash":"aa33d6b172d5faa2429380e4d43f2017f23d0c7124ad7470a7e89cdb754898da6bafe5","size":53814,"data":"","first_seen":"2026-04-17T19:00:52.214884Z","last_seen":"2026-07-22T19:24:40.467773Z","times_seen":743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0rsb4m2yeeple.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4aebd048504daeacd9fa359517d4e46a","sha1":"595d646b6575bed175c63315896da6364f27ff1f","sha256":"3767b0faa659579681dc1985440c2783bb78337cb25fae22c391e000f9d8d7ed","sha512":"a972a887d90c0a8bc888bb8f9fad61aff48fc0ea45b9228db7a1346ce72b2ca5a0362b842bdf4b7d1551cf46f1c306ecba9e84cb36d6e482c9baa5b16d737498","ssdeep":"384:KimN/B22tHVGVj+jt3t6jbwmzM5VKW0KInG/as1D:Zm322tHcN4dEaJ0jG/5V","tlshash":"907209427498fdfa0b57d39ce86b8004a17e2a7ed8cc81bd8f6cd9a0317594a7094f69","size":17191,"data":"","first_seen":"2026-07-22T19:24:40.486582Z","last_seen":"2026-07-22T19:24:40.486582Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/12lp94j-.c_mt.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e739de1547de36405dedb135277b1f71","sha1":"a2ae6c5a9ccd2a7b0a2c3513af23ce6027350983","sha256":"516e6be72f41061589fd880467eda5e65367f672bf3965d39f04192c54064b22","sha512":"38d927879984614c350d69095ad051428407df75b772003b1a9a02349b8cb9fc11ed9e4f70e82db8494ece45b4c391f9686b521446c0a75b74d4fa7b7c8287ba","ssdeep":"768:YhBJUosw2zWLEImqD9nhKFXA3tkBOfCCDkZRQqwQV:YhNUAEI/3na13V","tlshash":"8943c8b53291faa342db91d9c0370012f2780d71309d64b4b3a4d8af799dd8e92f6f69","size":58029,"data":"","first_seen":"2026-04-09T01:35:59.256618Z","last_seen":"2026-07-22T19:24:40.482101Z","times_seen":753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/155bi7ep2xvb5.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10849f5c50fd247b8474e2fa814c102c","sha1":"29ec98a9b1d4011dc2915ee1f8e2647b5d5bf95c","sha256":"172af026257cc0c461fb8a91b872fc6a36615b13af56fe7203737bc181e0fc67","sha512":"8270248e1a353e9d5e53f5c5b698d97f75e6227b3f6c3d96b1c1647dd9d0414ebbe61ca93b2c11f3bf444fe6a1337150ed13593b1b2b46ee9ab21fe1a97d277d","ssdeep":"3072:t1wANU+dlIu9NMBzhtW+fYuJ1qci4fn4NHDShvOsN52TItb0:t1wAm+dlIunohHfUHD+FN52TItb0","tlshash":"c134fbe83955f6626ab302a710af1803b338252b280d4d60a351fd9db57845fb17bfde","size":231723,"data":"","first_seen":"2026-05-17T01:00:58.350766Z","last_seen":"2026-07-23T10:03:37.48344Z","times_seen":817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/twq.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","size":308,"data":"","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-07-23T03:04:17.522454Z","times_seen":26778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2512414f817df8312569d55032748f81","sha1":"13467df6e962aa77bb36867ff1412e1ba9f8feb1","sha256":"e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de","sha512":"db6e4298746d519b0987bfa0feb89c39315718e178418e482b1c10c76439eae343afabf2db35ffaaa26c7ee6a3855084d39e9b88d35b11f87c354ceaf38874a0","ssdeep":"","tlshash":"a590029525c25101965295d4455b5c8450658675249569809180956259550205125cbc","size":47,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-07-23T10:17:03.635491Z","times_seen":22746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/about/promo_bg.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.237Z","timestamp":1784748249237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/about/promo_bg.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0fghvi7vx5udo.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3344\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YK%2FqQhp6LuXTtlDceZf1FhQNxfNPzeQOjw8EthRNF4SOkUtr4ngCZIW451%2BRV70b2WRRgTCQ34Lhkk%2Fk2I0vokL1K3PA1%2BMcw7WB5BRdHvYnsSKuWmYppn3LIbSIg%3D%3D\"}]}\r\ncf-ray: a1f4d2edb9717131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3344,"size_decoded":4042,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 644x536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"83c101d01e491436472d8628242a86bf","sha1":"2560c27721ff67d971fb4f83ccaaf41f859dfcce","sha256":"684e62bf3c2ee72f52b284c19c85ff006d79ccba830841ee83c47e29c3165e1a","sha512":"e3f141a3e8567e645956ffc902cf86cfc38272aeaefa4dac929b18ac19e5ac6715a572071a1c4d7e59bf5f6d0e87ea1da15f12f36369a37aceb1d987d6ec5880","ssdeep":"","tlshash":"09611b1850d9039bdf681ca64cfdc5cc16b8cd6ba8367d2531b50782ce970ab66d9154","first_seen":"2026-06-11T16:29:30.508058Z","last_seen":"2026-07-22T19:24:40.444419Z","times_seen":400,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/about/assistance_bg.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.238Z","timestamp":1784748249238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/about/assistance_bg.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0fghvi7vx5udo.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3458\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ndMFAJFW4FNdwJXgOxQuCaUnrRq6yNFYmIXylQYIjtqjjJm7ajlt5GQONvE8DZx1t8XewrVAzwh9rIxPIFSCiuPNEB0beGh8jiFObPuxgbK7hdB9UiWtKphIqx6PQ%3D%3D\"}]}\r\ncf-ray: a1f4d2edb9767131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3458,"size_decoded":4148,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 636x536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"14981feb44a77f724cd54b3471a995a9","sha1":"fffeaaf9bef47afd2f968c803eeaacfe4e7969af","sha256":"b75eec4ccfcf02c1bc391a29f4685119e2737e5b4b1b2341d2d08d516d46d7aa","sha512":"7db20d684b5e098871cc154c08ce0a21fb5655f3a0f262e2e76a94a3bcb23b42a84135167e57a11ef8b56e15d3a606ad62bf209197b36887112d4fc31be95ece","ssdeep":"","tlshash":"9d613dc592d65fa1ea6a8cfb94b1d130606b5a28828f70274470bc83cb6c3571b8ddd9","first_seen":"2026-06-11T16:29:30.385678Z","last_seen":"2026-07-22T19:24:40.445144Z","times_seen":400,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0k.g_i_ucclyt.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.239Z","timestamp":1784748248239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0k.g_i_ucclyt.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Q1mqfcp4dxI72eF6MWVmgii63u85S8lhascuPfEPUWMocvAxvR%2BVT4m%2B034jLrzReUWDnQlaF%2FA4aW18Wkl01NVmEPjSbCX49NqNVRzwLsDmgy0eRF%2F1xbv3%2BZfSg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e7786f7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51973,"size_decoded":18132,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51915), with no line terminators","md5":"54271f2979c4136a541c1a337e441fe3","sha1":"c752df0903c1aedb0c5b207e755820248301287c","sha256":"80e41d5100983ef55413acfda129dd012ce558cd02fa99f4a0dc6783c6acfc4c","sha512":"215148d7c2bd8743c4939c02bcf15ddace1f2397858f0b6f35fced449b610177ee00cba90b076721e3ad4ea933ab5ae35d74ca2352718f9a5fd2223a36e41c11","ssdeep":"768:e8ehunucesw7F7sKaMrxwkXRoOiRLhFHM8XzR46XOUYpJ7NzWxaH3PMbtJpy6xkM:e8ehsuuiQKa0oHMUR35IW","tlshash":"fd33f9e2f1d4e2d9e4061b80f81f9808e52e39bdde45ddb466bcaca11f204d8b985fc5","first_seen":"2026-07-21T02:52:09.017797Z","last_seen":"2026-07-22T19:24:40.445835Z","times_seen":4,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/rewards_bg_out.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.194Z","timestamp":1784748249194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/rewards_bg_out.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52940\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLCNlV8Ua4M4iJpW9attAxAb2adpATIC2ETwTsl1TLOWDPi%2B7bl2Na%2FtThNMCpmQm264oK2ZH550VieSV8e467%2BNEPT2nqnmXbJNobMZhAJ5II6gZNiwBSXn6%2F6m9Q%3D%3D\"}]}\r\ncf-ray: a1f4d2ed68f77131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52940,"size_decoded":53639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ddc20350f34080e2d4914c6227ae7eb","sha1":"b5acc8f43a25f66efe1aed522a6161b1f5100ac9","sha256":"6471b8e1bb0be5285be8e74c0e5205c7ad8644c002e19881979894bdfdc253a6","sha512":"0f76a96c7d1c73cac004370995594fda035b1612f23ef2bb7a140154e33c23fee53c15a1a48734530ee1bc56064b26aaea3ebf59ff6e42224a7cec03a98b2e21","ssdeep":"1536:YN2P5sT2M9A3fMlQ9FDDh8dAZQJB1rUnWJ7:YNA5sJneDDKCQJ/UnE","tlshash":"a733f1cb70b2863eee4f27a14e6e2476584e5b497d91f15ec01c0b3b819f17cbb82856","first_seen":"2026-06-11T16:29:30.392779Z","last_seen":"2026-07-22T19:24:40.446524Z","times_seen":400,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/kr.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.486Z","timestamp":1784748249486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/kr.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EWi5evAn4%2Fxmb95pB79tmZBRcoj89r56qDLOT85aMrtSHcCAzsiPelgyVHQR9gxQXhOsIdqpxRZkfVQJNjGUNTg3vt%2Fm5c0gqn3tsqcj8yTNpovPzAkfU3Mq%2BUCGPg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef3b6d7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1457,"size_decoded":1320,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"b57d2718c0f2330c0e06166d4b5fb606","sha1":"80100720aae2017e911dab7726ce4eeb73851661","sha256":"f69a22143e7948606729b9195cb0fa16993642322f9e21cd84533b28e8083ee7","sha512":"f7596cf54e8902e99fbd27113e9d718a95e60b9cf174897370b2adf3ec866686d1d177b230031c5a62d120ec03963d632aa9dd5ab739f1d02d51faaf7431295c","ssdeep":"","tlshash":"ce31dff66301841c97de05905f36b2d9d608f298d8cb84a5419dff55489ebda6b40a38","first_seen":"2023-07-15T21:19:48Z","last_seen":"2026-07-23T03:04:17.497813Z","times_seen":3317,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T19:24:06.249Z","timestamp":1784748246249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 666 \r\ndate: Wed, 22 Jul 2026 19:24:07 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=3600\ncs-resp=;path=/;max-age=0\ncs-back=/;Path=/;Max-Age=15;HttpOnly\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUasdQwd4y62kDU94zWLXoPkdLfT6DBY%2FzNe1hmYo0nY9AeScz%2BelIuiOI1W4q%2FM9lQACy1rvj1o2foFlsqhYHjkw0A2OArg8PbmDzpMw1%2Flj6iGLayOpzXlhyB39w%3D%3D\"}]}\r\ncf-ray: a1f4d2db3a4d7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"666","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5103,"size_decoded":5851,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (5102)","md5":"956b643c2454a7e0f579a9286406fff2","sha1":"cc6b5d6ff7546dd603a95dc02021d502cd9bc8b3","sha256":"c396babd7f49262f18a3a2ec34542c8e314cb4d869875152bb9675a6bb6066ea","sha512":"375c33c31b50ec8e51e51007b0c56655678c017509cacf51ffced23eb5f1bb8e9dde5cf6100421ffb97257d5275f47986ec4cccdb8c65c03cadc64a196a71a31","ssdeep":"96:bichOxrAngg3lSUpRNfvoZQarjLEbXNS6kjnul4Rt2+anx:bich+rAngY0UbxAZv/697kjQ4KR","tlshash":"39b185c5b90132a49f7676635d3f900afe2f5c90348fc294f190e5b0ac7ce49447aea5","first_seen":"2026-02-13T17:42:20.295511Z","last_seen":"2026-07-22T23:57:54.887387Z","times_seen":620,"resource_available":true,"data":null}},"time_used":1138,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":1114,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/api/extra/pixel","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.800Z","timestamp":1784748248800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /api/extra/pixel HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://richcas.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgkQR3wbTb6o430uIclqlSlDrgLk0EIh0aQiw06jH9LiM8jI%2FiV%2BeLujsfgZ3buXxZ1qRqRhQX8qHj7s8lRvuZG%2FhJ0KDa33aoVI07SXswM0Js0kkVMtCqhHKGtDbg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2eafdc07131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":755,"mime_type":"application/json","magic":"JSON text data","md5":"428647be4acae0d85bd0799a59237001","sha1":"25b1dbe5aaaf5fe53a11fdb05fd14bcad3e92ebb","sha256":"edad519cb99926a099d84224b6b7427bbfbaa60c6ecc1673c039a0723be93006","sha512":"8ed0b8ab8b00e7883301e4dc47e6ae3c38abe1686e6de48d43983fa8105203f86c36b86cff1a09c9bdf9406ac7c4ac2f8b6a8654a42e1b5d03d843b5085428dc","ssdeep":"","tlshash":"f4a022c30a200bc2cc00000008203b22eec823238300022bc00c0200caae0fc30c333e","first_seen":"2025-06-04T11:30:16.150294Z","last_seen":"2026-07-23T03:04:17.507022Z","times_seen":17368,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/avatars/51.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.204Z","timestamp":1784748249204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/avatars/51.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23188\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrhoJQUvXKVKbA5mpEns41PjRp7KH5WZZWkVucGpNvAghtvMxp7uSE1sfelBChvJegrToWZfnJvkdG1agJ0rF8b%2BLXn0LuPH5tI7bz7n8C8eoGUXPsibUgrCzae5QA%3D%3D\"}]}\r\ncf-ray: a1f4d2ed791d7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23188,"size_decoded":23881,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"14e3380f09f4cce12d233a676bb0e085","sha1":"bc9b5b97ffe902b52e5e6b78125e6c3709f8b248","sha256":"10b6377327e0d25d24422779cb508c4b075e95d2b98e5e8a532038aaf49ca171","sha512":"863cd9cbfbb107be8a2a60062b99e302d0b52a1fb5afdd79462729f0e381f5fcbfd3064ff8658723d7bb95506d08d384fc417fb9b1b18ec21b3324e9b06919ab","ssdeep":"384:Jcn2jiGIsbMR+FgiGEJfqQCHyuXKIgw9nNqGheM5WCt7sWxBuYJogMd0fj+VQS95:q2RIwRgiHq2uXsw9nNqGBb7XPJJzJSkE","tlshash":"cda2e1f57d68cb003bfa49ef7a91dd158bdc8e4592d5880a9ad9731430ba37c3973860","first_seen":"2026-06-11T16:29:30.351948Z","last_seen":"2026-07-22T19:24:40.449091Z","times_seen":400,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/exclusive_bg_left.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.241Z","timestamp":1784748249241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/exclusive_bg_left.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0yzacfavx3j_x.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 270064\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHoAnnjb7foucJINGMiwoVtk90Ykla7coZSdTgQIzXZql6xc2jisUfdwKGp8jl9XeTdUvsS70f94A6nP0PS9nu0d866jjBUEPt0piTLRx85%2Bqw1oa%2BNxql%2BD%2BW7Y2w%3D%3D\"}]}\r\ncf-ray: a1f4d2edb97c7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270064,"size_decoded":270764,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aead9187f9cbdfddc5ca171d47639172","sha1":"3e9014afeaefc3c74cb2ca2537a621a4678daea9","sha256":"6b9196b9638b9f0fd035f1db17bfcbf4fe56a695b1b75611b9ef589b79e0d2e8","sha512":"6fea944583124b5314053c85e1612d64aa025e3867236d097e7a67b52d877aceda91d32cb725cd24a96d5ecf7ff19b0b3149c003f353e97870c209320522c09b","ssdeep":"6144:D+O8bHNa/794UDGmGgLC41aH2sBdzQUVak2rZPVFvJza:D+FRaabmDLZ12d729PVPu","tlshash":"7a44231b46117598dcff5db540a38b071e73008ec65ae8269e182dfc5a656e0cbdc8be","first_seen":"2026-06-11T16:29:30.401181Z","last_seen":"2026-07-22T19:24:40.449677Z","times_seen":400,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fragmentmono/v6/4iCr6K5wfMRRjxp0DA6-2CLnB4NHhg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.280Z","timestamp":1784748249280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/fragmentmono/v6/4iCr6K5wfMRRjxp0DA6-2CLnB4NHhg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://richcas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25224\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 08:53:57 GMT\r\nexpires: Fri, 16 Jul 2027 08:53:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 556212\r\nlast-modified: Mon, 08 Sep 2025 18:00:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25224,"size_decoded":26037,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25224, version 1.0","md5":"989b6974406960015bf5a28c208cff42","sha1":"7fc5fa2c4774415df54117102f667505d521bdb7","sha256":"44c4e39bff5e76652a24a872cbebabccbcfb20f62c4633b27c1f2745cba86b56","sha512":"7a8e04ed1e4494fc2acf491d5a30c29d5a3848fab9c8d4fd7a6244307ffac7ab5c4fa177e58a846d50bb4ea0ac1ecc67bfabe4987d54f3a3d39c14f5a2757f44","ssdeep":"384:gLMHdCiMiFK9zbo8ewJvvw05YrqtY5B8UOb9C5v9079K0jPyc9GGE70+eY0:goHdwNRbmwBvw05YvHnOeS9PPXsdfeY0","tlshash":"a7b2f190fb5d22baceb002310645c5e11ab483be446231172fa926f69b715e7e7f12ad","first_seen":"2025-07-07T14:09:38.817243Z","last_seen":"2026-07-22T19:24:40.450248Z","times_seen":595,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":22,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/it.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.475Z","timestamp":1784748249475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/it.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mh%2B6osZXzJxVAE6klHsdAjT3zmhL2DWQoBgXK7hOo9zs32en5VbR43tZtG2NYr5dOGObakjAaxBo%2B9SirljKMa%2B72bTfCRx6Lfq%2B%2BZj%2FTiJbkZ%2Flfh7HEZ4jEDI5Qw%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef2b537131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":895,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4d4f20f2f1c88447480002bbf675404a","sha1":"e4a918db17e02d130c9733d7457211389b459535","sha256":"41b974254f3dd5b0853af7585c0417998a1ffa52e97e000fe2af3eee2c916d57","sha512":"04e180d7684ab9fefd920a74433c7fdea73380c5ec2588d6174ea6c14a20bdf1ebaf250158977863fd79051cc5012e5da4b9453f88998262b5cdc1672810ad79","ssdeep":"","tlshash":"e7d02b9dd07de0c448229bb03e9e31c142962327364500daf04b271861cc3ef7e41f04","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-07-23T03:04:17.526609Z","times_seen":13013,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/verify?r=facc4bdac20c4d7cd33955adb3402d69","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T19:24:08.069Z","timestamp":1784748248069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /verify?r=facc4bdac20c4d7cd33955adb3402d69 HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-back=/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nset-cookie: cs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=3600;HttpOnly\ncs-back=/;Path=/;Max-Age=0;HttpOnly\r\ncast-score: counted\r\nlocation: /\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FinRaGJjOycvWq0v293oN5pNWESehnj5pMSxANWdkD4o93aBAmJuxOBorzc5JelGdy%2FUuFSOf4KvvGZ6GeSjxys2R3Q8pWD0I77igDcS0unZh0sh0EHoE81BTFkqFg%3D%3D\"}]}\r\ncf-ray: a1f4d2e66f4c7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:24:28.850117Z","times_seen":17476510,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/04dt9~~_c8v5s.css","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.204Z","timestamp":1784748248204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/04dt9~~_c8v5s.css HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIlSH9JfcARPx6nNdlvtR6QHcKnZaoVdXmqxMwE7VwgVxgPU9rWgW7XxhkAGaqhNw3P25U%2BftM3bBG6aZKIO83adAnA5zEFqPzd%2Bxn%2FviVCPcFToUFEvRXKtOeFYcw%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e7382e7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1177,"size_decoded":1248,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1015)","md5":"bac1111d09f9a0f42404623dd069ddea","sha1":"f7cc20ddbdb329ebe208bd169d40661cba6b9117","sha256":"0405a6a453e6e719d9a1bc04e8010bd99ef5675b77c44ea576f0c5f44d402804","sha512":"7731b68d75610f8113242cb3b3438d767dc05e8183ff8cabc646b69e580fd6c66877e7884c9e6ee108cac21921941bafb005091c0f9f1900ad4262fac871b429","ssdeep":"","tlshash":"0721cd9ca1a4a0b3b4a39b6932dabf7c4829dd82cb460faa6550735143c19f22132735","first_seen":"2026-06-08T19:33:12.053974Z","last_seen":"2026-07-22T19:24:40.451982Z","times_seen":739,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0514pcijmsasy.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.227Z","timestamp":1784748248227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0514pcijmsasy.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDGikYtSCQljFP83j9nIIXSp9GdZ0kVhU%2B9hRU9B3LvInx%2BoJa8PAbChRmlSTFkaqhnC46kJ7VbHy9XyICPVkOlIaFcnYrwqs5D4Q0aBq8QcC8XKGyt%2BOrTOFWhzrw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e7685a7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9691,"size_decoded":4819,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9691), with no line terminators","md5":"ed3d466c2d251d739ca14bdd80caf061","sha1":"38eabd2cd88e7589c09720b23fe926fb69e7bf2b","sha256":"290816770359c2131dc4f5bced87b4de8567a75148300b6d38673561b0e80fa3","sha512":"b56e083f791bc181b92e28bdedb61e18924c835f4b3a50de7cbb37862ac0dc18305a4621ecf1f2ab5615551286ef133723ee259929a8db034d10c06dd5f4d370","ssdeep":"192:k21OmPkG5HtOCdVC8+BrTvk+0tDq1ZT643MN3WYtdUo2RBRmuk:J1ZAEKcDqf23Tso2RBRmuk","tlshash":"8c122a94f1a07936035746a3a1ff0702733a89595c1f84ecb1b888882b71e8d11bff9e","first_seen":"2026-06-08T19:33:12.061464Z","last_seen":"2026-07-22T19:24:40.452521Z","times_seen":739,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/06jljm--ci~tu.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.238Z","timestamp":1784748248238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/06jljm--ci~tu.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2Bba%2F4TsmIZJOj3KRyQ2P9XlrtczMTPOb%2BI75HjuIne6eXsrge2PYBRGYPf1z3xrHpj8D2rcMpa4oXnnIM6YRXZSo3njn1C4lJdSQ%2F%2FJACmqrKFIT5Lb33A9h%2F%2BraQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e7786b7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5218,"size_decoded":2692,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5218), with no line terminators","md5":"aedfeefa1e80779099b9587ea3b1db29","sha1":"6a48447697ef6c01db549d36c6e38f1d20060ced","sha256":"1f315feaa50045554919b51284afb4ac2967751c6f67f84fe41687a3f01c55f8","sha512":"db2350c028befd1718dc036246f4541da89160807ba1159f058fcdf8d99e885a6b0eb8a266f3a7d35c64ce5938a06ebdf6b3a08a252b94c0b5e6ecf3710ed20b","ssdeep":"96:UXsY3Gv2/EP3DwgZA4b/WMJYBSaWHn5GdYLIa7sbc3DXTNDXTrv2P:UX33h8PDwgZNWMJYBbWo/a7sbc3DZDGP","tlshash":"0eb1c7b776c6fc70415685509837834bba182e37309eb0d497eaccda327ce4a85d1f9a","first_seen":"2026-05-18T06:46:56.921829Z","last_seen":"2026-07-22T19:24:40.453124Z","times_seen":742,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0sr_xcnnnospa.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.516Z","timestamp":1784748248516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0sr_xcnnnospa.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrrMLL1WrqLv9alcznjiGGqdfL77E4UMQ3fg%2FvxaUGlxe5BLBiNJ0xLiY6yZ3xXD0d%2BZVELpOItEnqcQDdZmbdRrxrDultqGeHUwr74GYClVInaO1Ia%2F0yVniocYbg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e93ad27131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17273,"size_decoded":7548,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17273), with no line terminators","md5":"48a3ffbf0a576064a25fddea47a230d0","sha1":"5d638fad38ab159fc4f1fb7a9c320b8943437d98","sha256":"ea660e0b9945931df0ec205366410905aa9575da39a5fc10018c9556240b1ced","sha512":"3edd874af56cec81a137062e16ed8df8e969338d0f8cbdd6e8175b373f36f1212c5a55d49fc0ea9bc443c15076046641b4ed7c174cebb0bae92772321eaf40c6","ssdeep":"384:KimN/B22tHVKCjpjtsFUjjvmz13hKW0KInG/as1e3:Zm322tHAE526qJ0jG/543","tlshash":"93721a427598fdfa0b57d39cec6b8004b17e297ed88c80b98f6cdda0317594a7094f69","first_seen":"2026-07-22T19:24:40.453645Z","last_seen":"2026-07-22T19:24:40.453645Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/card_currencies.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.196Z","timestamp":1784748249196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/card_currencies.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lI2M7p2toH9YMoKobrReGtCtJHUoHwf6FDftrQxEGfIi6KBGmn1EDn%2B0xABbMTsLXIE4s%2F2T95ftWWVRWoVDekgJdN4lkRWVx0ufYOOEN35kF2HeHLjx3oro6gJU2g%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ed68fc7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6922,"size_decoded":3564,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"deb2dadfab7896d467ae2bff37ca6895","sha1":"b768a716f2a4664bf0c828363ba82f4b9ce3d304","sha256":"215ecc2e2772aedc12f56fd44f6194e631c4880ee2b9be09d6ca310462e0fa66","sha512":"01d25940ffb112da1b55faea4da368f39af328c7d298269debd9c7e4f7a41d36e41ea7e6aa9bc610090b58eee33e5a25a0e711ffffb2136bd7741e20e76810ef","ssdeep":"96:gAyGlgnFHGJZxom/088m+kw8o822OxZmJpoOePhOiYg4TvygHBgMFRt5uZp/Uzxq:fKnFmj2887kK8FOxZe0ODbKr/d5GqT","tlshash":"e3e197fe26e805e0f44297d6ee33a4793916b8fe6f908795f2888d9437514c8c85adc1","first_seen":"2026-06-11T16:29:30.397217Z","last_seen":"2026-07-22T19:24:40.454718Z","times_seen":400,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/about/stats_pp.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.231Z","timestamp":1784748249231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/about/stats_pp.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0fghvi7vx5udo.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11582\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eoIqnuV1fAAA4u%2FXyM8eEvj%2FLEOyou5ICGm3GPwRu6droX7oWr3Q13ETC2wkEvacmNgzoylw7Uozj6UgHKjRgBf0QZXrLKRr6iddtC%2FZyHSV7am8U7S2mFH7qxIcGg%3D%3D\"}]}\r\ncf-ray: a1f4d2eda9617131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11582,"size_decoded":12257,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1148x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c48dd0edef173e4054f47407473ce867","sha1":"381dcc8a414e38c75ffb6f89a8f205e72d9b83b2","sha256":"734212c805cf0d1ad7a310ba32e45aa2aa0736180f7ec931067c204b2fa34ebd","sha512":"99f01907ffcf0e035aca03ab996f9b45685f79122060e4478556d7e9a57acb3835b7f762dc8686fea224de6f32fe39297289703e7fdfbda7876b15581b6e08ec","ssdeep":"192:wP1Ch5P0vCAsstjTA5S100x+jJXSW5OQr4YhCOo49FesgHIm57hCHG/3KwjUWO7R:acsYsZTA5S20xML5OudCSeVPIGZUWER","tlshash":"f932d0db9c45b2ac54f7926b54f65382f6d44183e6e3ff3a0ba1142bad0cc2a8004dd3","first_seen":"2026-06-11T16:29:30.418475Z","last_seen":"2026-07-22T19:24:40.455347Z","times_seen":400,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/about/crypto_bg.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.235Z","timestamp":1784748249235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/about/crypto_bg.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0fghvi7vx5udo.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3826\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDxXCo7ropVe0ceoG4VCOi9gAhlZedo05v%2F85c3ecQAnx79ez8TH7Qwz0ldn4FOkWOYeTroM0608xrl%2BA7gd6q2yWrCK0Q%2FVqiFYhm8XjJZ9LiC0zhfKD2IamjK58g%3D%3D\"}]}\r\ncf-ray: a1f4d2eda96d7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3826,"size_decoded":4522,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 592x536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1cdc31b37aaa7ecd23f822ccc3d4686","sha1":"4cb4545fe65530070d0a13d2e599c7532597c034","sha256":"f84880011d8c6af1aec2658ce6fb0bcd86e0c38bdc98ff1ab1da5764844faae1","sha512":"e9ea731de3f9ffb27f8095e834ae5049c127b5752afd11f63a54cfa2600da25d3b6b59b44fc20d8cd3f9abfba19d793551e3935a83dc915da78afa9838242f85","ssdeep":"","tlshash":"6a816d4ac23338421c7736a188375467d045ed24d09ca1b62bdeb60fc64c377cda7472","first_seen":"2026-06-11T16:29:30.459808Z","last_seen":"2026-07-22T19:24:40.455987Z","times_seen":400,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/about/about_bg1.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.232Z","timestamp":1784748249232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/about/about_bg1.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0fghvi7vx5udo.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 144080\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dc59iZEHExqN3PTQI40cyx49bCmHQqvkgDr7109X7y9Ri6Jl0UaCcPoXf849m9uueIe685ySjj8LtTZXbew7wL7InytmmGquGQRYIw3leZkrMWXzjURIqMya%2F2Bqvw%3D%3D\"}]}\r\ncf-ray: a1f4d2eda9647131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144080,"size_decoded":144774,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14d7d8959bd2556af2cfa71fe2d03552","sha1":"b1ce9ac92b44e6ddcf2e3dc8b5dd976115af9262","sha256":"25e0e3c67a035c74cd59768485bf3fb31d6b87647e564e06d370d202ea804522","sha512":"f2487ba16b9887e294510bfda9eb6fd3716739279ebb23c517bfe01b9382db38c7b116a716792904eb00b85e46546053823613dd757e854a5625ed62cddb3b43","ssdeep":"3072:lKTdSL592GZYo0Rs13KD8F4M0qEUHtxBLGR:3LjfZH0Rs13KD8fxBSR","tlshash":"53e3013d87758733dc95e831c992f68f8e2038cb2564529ebe0ed93054be4ee5b9580e","first_seen":"2026-06-11T16:29:30.340975Z","last_seen":"2026-07-22T19:24:40.456612Z","times_seen":400,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/about/our_team_high_bg.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.239Z","timestamp":1784748249239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/about/our_team_high_bg.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0fghvi7vx5udo.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 93848\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1Sob8GmjwtgXFD06LLGPZM5noaxm7ZBPb%2Bdkol8b1CH2fasPkEL8KXiaAzJ0zhXq2oSby1H2j%2FpeAGh%2BTAb%2FwGApjI0O6H1RTiAcm3PoIpxTh6Of76Kt3c2djs55Q%3D%3D\"}]}\r\ncf-ray: a1f4d2edb9797131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93848,"size_decoded":94547,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da26e203a963ca959f04d3381967a5d9","sha1":"7facaf89035236c2bbb4a8dcfc9121f380f7e352","sha256":"72e4fda7d82f7afdc8d18945349833d625df1c81db5358c328cde9a0c60d8e0c","sha512":"8cdb3140314edf494a98350851b45a60df5862dd67ec49ae7036391a022129c131c349f0b74f89b35e989af297e439937be325c5d45731230de8ff331fbda2e3","ssdeep":"1536:x8dAKOnFOSweAPh1IdJexOU9ImJ4dUQ18Fqg+bjM6Ap1znpgW/PRytRSl6inCMK3:x8d7OnFAPhmUym48FqxbI6ALeW/PYcV2","tlshash":"53931288a925a70ea450cf24bdf81d77d21018d55336ac35d829aefb633983d3d3e10e","first_seen":"2026-06-11T16:29:30.431661Z","last_seen":"2026-07-22T19:24:40.457211Z","times_seen":400,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/es.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.470Z","timestamp":1784748249470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/es.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4jLUo%2BJp4Er6PEh5aMqXpujm23RMVDlt1wEQrn1iYOXTDb%2FMbA%2Bo5D2zf%2FBCoGIZbuyp1Bz7sD44iYuVZZ3uCHN1f86nAWDaV7ZOjad%2FDSgNPQw%2BmVbnrN%2Bo6C9GfQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef2b4d7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":1052,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"a8224968196d0dd6d84e44c98093c280","sha1":"882b8a579de32e24e13e999b411abd814071cc2a","sha256":"f8cf69e4d0d285ff8e9be18f239b65e38fe1a235086a8daae53b1baa1e7a3557","sha512":"096da45f1e9c9fd020364a51f387110fe6b08969d607a52acd6acf7f01215e15ebb88c93484b7aef1392143f744ca491f8862151d5c4850ec8f7b9d4d419e870","ssdeep":"","tlshash":"bcf049c5743db18388098b742d6e70e6408e721b554814dd70079b28a3aa3df7ac2f6c","first_seen":"2023-04-17T16:03:39Z","last_seen":"2026-07-23T07:10:50.743761Z","times_seen":13034,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/in.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.483Z","timestamp":1784748249483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/in.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zdif8RgxstlBVwFDo7uy6j%2BfxxH9uGSRVfGzS8AAdYLIN93TV73%2FicmTtk24XKq4W1Heme3vtLRztAANawDk1VwxAFbFgM0OaxRZWM3JR9PrtUGPG5zmHPIkVumHCQ%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef3b687131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2301,"size_decoded":1488,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"f0c892dde95804d59b20416b8db9fcbe","sha1":"41f09b07a8c26144aff93575ba4a07a0122bdae6","sha256":"aa82222076d0dd86dc6f37947faf10333212886549a33c4fcf6b44141b702018","sha512":"8eadf55e31f49edebffdb864eeec76900caf6f5163d2e3cf1988757271bb7c5e2c26c3986b4fe5b2f8953e733ea0c4bf4fb3cce0ec4d1010e20f5125abde3ac7","ssdeep":"","tlshash":"2e4165a9717df8cd9b01c6fda63bb9f1b00f50496b12d3a9b55b0f0a481a4fbb0056e0","first_seen":"2023-06-13T16:46:48Z","last_seen":"2026-07-23T03:04:17.533508Z","times_seen":12597,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/cn.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.487Z","timestamp":1784748249487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/cn.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHRzfMyZErLEEyvnl0pVzrqocx9m97HMTwfbKmtLjPAI4K0yrdE%2BeJEx33qkk%2Fzvzq8MtuMxdaqttTXao3J47QQBYDYN3WM7D%2B8K%2FrCjcX%2FaaScJedq0VUg2rb8JPA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef4b717131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":696,"size_decoded":1088,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d39728b84718665ada444d92579fadae","sha1":"11fb0d75502abe17cc325fc4c77fe0d3f507236d","sha256":"4db67ee7fc03992f7c0d6cc737441c67aac931442267bf896cd78d4c3e97ddcd","sha512":"3e0d290cd9f2b52709fe020527c4888c2a14d0f617de2ac2e4410526838f7b46df1e78cd9d15f6558cae357d8da73cba72efa824b1063dfa36e876d0661c0b88","ssdeep":"","tlshash":"1b01c09dc135e2c845ccc9987f4535ea141ab27a40b134c164c7ba58600bcfcf649a2c","first_seen":"2023-05-17T19:49:17Z","last_seen":"2026-07-23T03:04:17.521348Z","times_seen":3432,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/07b~lfkhc7~f6.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.233Z","timestamp":1784748248233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/07b~lfkhc7~f6.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghN5%2FjWpUdM9oFcSPDmHB6siiet1Soq3y4aMB%2F3jAZe%2FEmO%2FhcnY1KYnPHIReLvy5%2FpxlcKMWT4tuJiKA%2F2rXvgi4suvBPsXzFt7c87q3GI6aliodR%2Fr9mrxl7Ed%2BQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e768617131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172200,"size_decoded":14298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"109cacd54b4cb00227ca58e34d8168ca","sha1":"9af3b7bed6b65acca8080874a47307e6a0d6b3a1","sha256":"4de148ca2676f0ca606715a307cd028d1cfa6f63a59f5ec45f259e0bfea61faa","sha512":"9c40e0ce244052efb8a56fcb6146993d50584716e713a4880726a2dacc446dec383d3f16b1e2f3888a414c83f0b633b3cbd87752e4d338764dcaedef96abdbf0","ssdeep":"3072:79zcwGUN94sY8YzaPnx1ll779zcwGUN94sY8YzaPnx1llX:JbBN9nQwZJbBN9nQwB","tlshash":"5ef3ef35d8d0aeda231c7be4d9051ac64bd1f0920022e9b6ef76709be8f4295f7d1836","first_seen":"2026-06-08T19:33:12.017045Z","last_seen":"2026-07-22T19:24:40.459599Z","times_seen":738,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0li9mgra_8nfx.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.235Z","timestamp":1784748248235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0li9mgra_8nfx.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJy%2FZlMCSqhHZimySM5ftTzEGAE%2FNzJZcnco68%2FBEuSAQMJvjIXNA9e%2BbWhzN5PRoTnSWQhjOhFUDqTIpyBL3h8Sz7%2BObpW5uGKbGCvaPtt2H40lGSlixqjSPW4YSg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e768667131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103921,"size_decoded":20181,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0c1ca7911b574ce20daed1f833b108d6","sha1":"bee0a37c5dc9d23fa8e592d34529399de963967a","sha256":"eebd59a42ffd9f0a8cb12ed2797fba5025977de2ab885cfb28df20d9d2f92ef5","sha512":"628e8fcb0dc70c2b54ade8cb8b86552ba3a81882c1d3ef21162f7eadf578a7f1e1f03f0b59fccd849bb2e5e4fc4bf4df4dd9776c2ed575969f07a23c0416619f","ssdeep":"768:6jWexfqnDkUHRqSEyu+bauIS75xh+3BdOkgRt:6KetAkURzRb7xwxrit","tlshash":"c5a342476395e41e8f73dba0e91fb767c2184cb959638926d10d0ea4c94f8e1caf603e","first_seen":"2026-06-17T18:29:29.887806Z","last_seen":"2026-07-22T19:24:40.460193Z","times_seen":619,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0sgujaefuis1t.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.242Z","timestamp":1784748248242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0sgujaefuis1t.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvAXZNV4JBeP3RZvlYOQWGtmtxF3O2PSF37fnT%2BAtZn8GrrM80Nq0tbGRDqmsRrQZIwt3DrqROfWK3VainH3E%2FVzFaejJgMUqiOvJ%2Ba4d2vX4lGx8Lmt0WGxNoID9Q%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e778747131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74903,"size_decoded":22544,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"4306909cf0740aa5bd2a022325ef4a5c","sha1":"4764045fc3ab5b920299be464f514235a13ae68e","sha256":"92e193c4bd72ba0a36b2376087e0d2003b3203f79478d6fa795aee5a963e6c52","sha512":"5a50340ec2535d06476448c1ffdef543b67d21ce4d65e331bf7c01971515bc1e4be39aa2db712c05c849e5f4dad6232fc564c74a56c2332cd623eb4e004377e4","ssdeep":"1536:URqtdBTaezAxecSsuoJgD/8YAwDNBuLNtYKw4CZIl:UROacR/oPYKw4CZIl","tlshash":"cc73b956f1f4e7fba04e165ce41b4418eb9e2dfdda846df4cbacacb011118e0768178a","first_seen":"2026-07-22T19:24:40.460713Z","last_seen":"2026-07-22T19:24:40.460713Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0v0ixs97.v7n5.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.246Z","timestamp":1784748248246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0v0ixs97.v7n5.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aKq%2Fmq82N8mqNHP116ZUJCz1geo7msRh4qLQ%2FvBwiGpQr%2Bo92wpnCyEXkIrX77eErU1iv4guY6H9kx8QCB3rD6avQrR2PSPCF9qGCkcDxzi%2B%2BLwOnqAg84KAtW3iw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e788827131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108049,"size_decoded":42879,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33805)","md5":"95ef99c841282f013e4d316bdbf10391","sha1":"f80792622b31b0dd0d1e74be890cd66f97e0d423","sha256":"7235294725f74bc429f63b3c0547001aa7e7e3f3d41af140d53b973f5e2d9368","sha512":"8a0be5bb197316d7444f9b8f3a62d528e5a286c8cddf782fb8bd0ea1fcf5c488c7d422dca571d7d0efc18eb47b3ef33e19aad8b9c097396fbbebf3d80388d481","ssdeep":"3072:yXi31G2FJlN+XTGKDXKBGchpLjdLWVwNrJqhWq15014BWiJLe:yXi31G2FrIhz15G6WiQ","tlshash":"dab37dea7342b435836b805e416f8506b23e2d64580e0c19f2b9d8dd39b4949d2fbf7a","first_seen":"2026-06-08T19:33:12.050394Z","last_seen":"2026-07-22T19:24:40.461931Z","times_seen":738,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/rewards_bg_in.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.190Z","timestamp":1784748249190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/rewards_bg_in.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56870\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ARbaHjIJDb0Re6yG9tZUUK4dWYZg%2FxSU6eyyc8C99afy1bOrlIqcyuqEpVinDk2MQwyFgKVOBWOUA1FDch1rYQXDHkuQMxd6UAQT39y4qRAWHU8CpprslCQhTdvxDw%3D%3D\"}]}\r\ncf-ray: a1f4d2ed68f27131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56870,"size_decoded":57541,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90e385556900428710cd66ef1c139fe3","sha1":"f9bfc927638316f4aa746f325a5f2643095814b1","sha256":"0c0ec423a091264d8845667f030c390c31f2257c1cf518a7f0ab8279ed8f98c0","sha512":"377d07bca395e43b245a9b7cce760ff0156c29fb7c24b7a37cc946345241cc9724cdaeec7b38b2d679c4f3d3473e6fbdea9a6a64bff02ac748c43a9393986e1a","ssdeep":"1536:O2OcO7K1w2U8R4IY9XYSNdSfKNCIfaFAx:fjOV2D4IYj97iOx","tlshash":"f3430115fa01b231736a34403cb4bcbe6486b75897ae009e9b61afc857533b4fe60c76","first_seen":"2026-06-11T16:29:30.39174Z","last_seen":"2026-07-22T19:24:40.46267Z","times_seen":400,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/header/logo.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.222Z","timestamp":1784748249222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/header/logo.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0yzacfavx3j_x.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bpa3fJQHzGVJMCs%2BFiwTDRINjqZg1xOx0VuU8JZzsJqLyxxShHqKohnvYg0kmiktWi%2B1syBbMmVCIsnivHF3U%2B5Nv9EXG%2BdGIEkKLxip2zmiwRs9xHQp6DIElc6RVg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ed994c7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5351,"size_decoded":3261,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d7cd8403556a0604d03c1bd2fc6dce23","sha1":"d3003125b31877017ea94c9d777bffa93c5272bc","sha256":"01bb2e13fbcc85f27f3150b986281479ce902a3cb8d46ccf93608eadbe726e81","sha512":"c96e75a403aa8f49ffae539cd763cefbb7c4eda1c5f361aa9e4639342e3fd27004663b55ff4d7eaf32ee329ef288344199956556780aeb88be1826b234124290","ssdeep":"96:p+IA46zCbD2QgGzITaBf9UiMzCCyNK+STEl/xVThy0W0BbUHrHVn:D7z3rBftMbyNK+Sc/3hy0b4zt","tlshash":"43b18298a3b4a2fcf84473e4d23288703e921cf525029658d3e95c95ce7655d08f68df","first_seen":"2026-06-11T16:29:30.441022Z","last_seen":"2026-07-22T19:24:40.463354Z","times_seen":400,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/de.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.472Z","timestamp":1784748249472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/de.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2BHSee5yQ2sFJaUdtHop8kE0eeAeXIIqQ9GKBbuBWtaXx0rRa5558sCp%2FmZaOEBAi1fKZPNBRWLG%2FUHcKJkPZ2G%2B2yjq2t7PL3Il6L%2B%2Bxuvt2ZYDBpRXZ923yo0Eqw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef2b507131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":894,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"939afd91bea7074f84f4a328ca095295","sha1":"1a8edb7520cb812fd35996134ae823fe8ade03d9","sha256":"8e3c8f938c6fc4fc97c81f398a71d0d789b44b6be458469d7056372a2c05837a","sha512":"a3922e78b9ac5209cabea2c0945d474d24035a4e78297b3105779cea945b931ae83a59ffbf73e2877f2da42e0ff7fb5f23c297c1d7f7d09da3644ed63d82ef6c","ssdeep":"","tlshash":"c7d02bd8506ae8c04d16c7603e6c32c1288a6259238800dff0835338a6cb7ceb745f50","first_seen":"2023-07-03T07:07:12Z","last_seen":"2026-07-23T03:04:17.524048Z","times_seen":13037,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/09m28z2r~.w8j.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.217Z","timestamp":1784748248217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/09m28z2r~.w8j.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5wIDvgBePCkWsmqr%2BZjVeUtpuR1sSumCpOxiOkeyTtege5lzSxD%2FpSgL7ddyjcKv%2BUMJzlWnXHWTIY1Nimv3tWc91WTM%2BhDbYqijHImvdk27gyspfaUGHRH1B3B3A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e758447131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15910,"size_decoded":6624,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15910), with no line terminators","md5":"295cb7b39a766115859fdd340bd5d661","sha1":"4f8bc00001417248ceee285064417928d803a6b5","sha256":"ec7bce2e98540116bb9d28db10d536e7080f5ddaa0857e69c61ed1be3eb349e2","sha512":"68efe9be524b8e18376d1e860d1005349b1f4a730ff580d5234cb768e006104667501bd4df92408b23368685d37bcaee494016ed18cd363cc1a939069a6493e1","ssdeep":"192:m6QqMOx4O2NbkLEOrd6kFJwiKDcyfKm4i5LEzCQ6aspmi+fQjgEzmQ:mqKZBaj6kFMJCm7Ezsasp/vP","tlshash":"2c62e8ad7155f0a10fa36465407f400bb33929b6286dc5e0e3a2ecf5a9b456ec133f6e","first_seen":"2026-06-08T19:33:12.049499Z","last_seen":"2026-07-22T19:24:40.464641Z","times_seen":739,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/155bi7ep2xvb5.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.222Z","timestamp":1784748248222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/155bi7ep2xvb5.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLRY96rMSqntLykGaf0%2BEf4JuabqUqmUlw%2BTq4p8MCyeQF%2F3Ifr80yg9aUoJhePD9qvfafdYeQ4S91FMAsKD1jtpCSFpp3JGw%2BJiC%2FQIici64HGj9xhcvWjsWgI8bg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e7584f7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231723,"size_decoded":75706,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"10849f5c50fd247b8474e2fa814c102c","sha1":"29ec98a9b1d4011dc2915ee1f8e2647b5d5bf95c","sha256":"172af026257cc0c461fb8a91b872fc6a36615b13af56fe7203737bc181e0fc67","sha512":"8270248e1a353e9d5e53f5c5b698d97f75e6227b3f6c3d96b1c1647dd9d0414ebbe61ca93b2c11f3bf444fe6a1337150ed13593b1b2b46ee9ab21fe1a97d277d","ssdeep":"3072:t1wANU+dlIu9NMBzhtW+fYuJ1qci4fn4NHDShvOsN52TItb0:t1wAm+dlIunohHfUHD+FN52TItb0","tlshash":"c134fbe83955f6626ab302a710af1803b338252b280d4d60a351fd9db57845fb17bfde","first_seen":"2026-05-17T01:00:58.350766Z","last_seen":"2026-07-23T10:03:37.48344Z","times_seen":817,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/api/mammoth/auth/check","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.969Z","timestamp":1784748248969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /api/mammoth/auth/check HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://richcas.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 38\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uCows1%2F5c%2B9aLeaOEFofcJbwp6v2XYjrq%2F0Rm15c9T0mMigDAztlMl009a1qKmazejBMF0PC60sNr8CgVNSfi9XFxW8sKgcxDzcc3eGMUW2Adgv9Jk%2BN7l93dgkQdw%3D%3D\"}]}\r\ncf-ray: a1f4d2ec0f277131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":719,"mime_type":"application/json","magic":"JSON text data","md5":"aced0d4c1bf7b416bd8757e86c69b12e","sha1":"242609e9dc75daa64e55af8d8254cdc02722ee92","sha256":"831690950d50aa783757553ff7dce0e549b2bf0c29fcc850ee8ef7a7f6bb54fa","sha512":"8c854561d71566fbd9d1e18c91f1bd391cbedf2b2e8b52d84205d4f773f36b14bfd5d3ca2cba9f5a300b8d96b025ab3eee5d5e3a19985e78386e04584e24d0b3","ssdeep":"","tlshash":"8d80040115000173f4001144113c1d115c54533745410014fc7cd0c4c7530d53043c17","first_seen":"2025-09-13T11:18:32.558363Z","last_seen":"2026-07-23T03:04:17.507517Z","times_seen":18685,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/gb.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.213Z","timestamp":1784748249213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/gb.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iinoCNLfThezhiliwKwICX8eELtb426vFRaV27hE79l3Gv5OFwk5MVsvPqTOq%2BYgSZvOqSXs9EMBYy0DL4jnNkr7s12E%2FO3ftbfsiaPiPIHyFTAwZn%2BqzWr1ZOqRww%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ed89397131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1183,"size_decoded":1372,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"99a9e5571c2f5acd9cb910ce6a3f39a6","sha1":"876935939a01dae371583220f75bef15b5185c68","sha256":"5ff2f32ed6905d887f7d771029c1e65b1ef059e92260b548908cabb4e886bf19","sha512":"14cfeeacd8e2f9b67bf2e1f5b2823a98fc60854fca5afd0b10be72ad647ffd38aa4058188451c98e2045628706f0b84dcad508fa901ce146705102fed962de1a","ssdeep":"","tlshash":"ea2163c84370b5c059a74fba9f28a2dc924925f9ddc96ecd10be0538445ff5ed01f009","first_seen":"2023-05-08T16:47:32Z","last_seen":"2026-07-23T03:04:17.511158Z","times_seen":13320,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.279Z","timestamp":1784748249279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://richcas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 19 Jul 2026 10:32:39 GMT\r\nexpires: Mon, 19 Jul 2027 10:32:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 291090\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-07-23T08:39:45.602242Z","times_seen":30547,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":19,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/fr.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.473Z","timestamp":1784748249473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/fr.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lLkn6qgOqP1DT2k3ijMuzP41m6U1PIZsG9giD9njo3vyQTwdqYa4otcv6SK4Snrqoukj6zuUGDBhtkW5sXX1XhFaEvgczVftgIRR0GkvqRP2kNXDNHDoxCdVCVjucw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef2b527131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":881,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"c1a36c711f0ae0ab46c7dce06f63a723","sha1":"5cff6743ac6eed2912288bacd35c363a2d586d18","sha256":"861059eae96aea4c38466209edfad68fbd84ada37bae4ccac92d03011046a524","sha512":"e8d4869bd8d77613770a36de15c23dfade7a3bf3a465c4a6c79be55d9d6660874b5cbb60e631f04964840d3b4d736ceb25f31b30779e8d5ec64023f8e855cdeb","ssdeep":"","tlshash":"f0d02b9dd07de0c448138b703fde31c1418a6326364600dab047272861cc3ef7e40f04","first_seen":"2023-04-07T23:46:38Z","last_seen":"2026-07-23T07:10:50.750136Z","times_seen":13054,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/16rmwuk.q6kce.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.219Z","timestamp":1784748248219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/16rmwuk.q6kce.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojI0ydnaxI%2F1ue1lNKfx4tYJsnvoB64VnnbwsiD93WA9xQOIXXBcuRHqsnM01vziLC%2FpJ2pO2LNcifGDDjYTxiTr%2FsMOUL%2F3y4KveDe2OJ%2F22hkGVeLXiiq3ZhTHqw%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e7584a7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53814,"size_decoded":12729,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33781)","md5":"f5cbdef62f70832a02868c81bed4d0cd","sha1":"4d77c0b7342c6700e8dce963de3136d937d75b23","sha256":"1772b49f52d973040f54ddfecd3ec3c5333a06566491f44d881a06852d94ab32","sha512":"fcde5221d5f85fd6c9077fe4092dfd79e9901552845905b925e095b1be1cc2de0d1ab165ab5aa309fc9db126316de67fab111f21da93129d2c8887c87f886d9f","ssdeep":"768:7AJ81OugdCHq8di830F9Lpl/v+GMd9mML03RnyiGM:7AJ8I+xdi830Fwq3","tlshash":"aa33d6b172d5faa2429380e4d43f2017f23d0c7124ad7470a7e89cdb754898da6bafe5","first_seen":"2026-04-17T19:00:52.214884Z","last_seen":"2026-07-22T19:24:40.467773Z","times_seen":743,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/03fg85j1c363f.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.243Z","timestamp":1784748248243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/03fg85j1c363f.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMV%2FIryvUoBam4MvVlylzZS0PVJiC%2Bni9nojUziwW%2FzjZj2Nni%2BVg9DgTPH73FoqjnowetzamCVTPcsL%2BSqpw5rZ%2Bs2C1Omsn3r2BkBWIUYLhrNij%2BnotZof9ppUlQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e7787b7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":667746,"size_decoded":267561,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"05cda99838f3df07eb438b054ce7d2ae","sha1":"5d7ba1308daf2a223c780b365a7123a12d2a56af","sha256":"72a35adf797fe33e0548ce20a161ab102a616803284bfb50f3755bcf8a8ae9b3","sha512":"b5a255650f22adcc0c518c24a86d52d2ac36bc52845302fa088afff62f41fd3467d822b72ca1f20045b35c4f9e9abbb7754bffe1d4355563a6cf60984e3348ae","ssdeep":"12288:yibu0iI0QXDQnq5u0FxIijiw9LUoXQM+M0qizOVNkUoReh+YoJLPP8v0hxQ0zPV5:tbDiX+NRv8tB","tlshash":"fae45c696025213897956090c15b3446efb1682f2dc944acf7b8ecef57b4e8e332af71","first_seen":"2026-06-08T19:33:12.046227Z","last_seen":"2026-07-22T19:24:40.468277Z","times_seen":738,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/pt.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.476Z","timestamp":1784748249476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/pt.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJAmgW17qZC4tm3TUpuu3Nn930jkKYGaJQ1aU8pKrQdwBkraqjTte%2Fi2iUs1WsQXiL1CIEmPSjnLNXuydy1jQHG1872nP67ggEhHkzdLfuK%2BgYX2Vax%2FXuU3XvgUJQ%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef3b587131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1445,"size_decoded":1448,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"6e9db125513715df3ec213f701b912d8","sha1":"f0fbb6a6e5b7a068d28792280f397a4b879deeff","sha256":"3054e3bbce0d049b0ab3d157a16b24f7a572a7a45e73d342e3b7b8d5f28f0a4b","sha512":"06c04e06e44b97fc2b4379173dcaa7003f3cc5ed58db1697e0934f96878fc16928e08eef9a0be085cafd61b545718da8e8a7d8b456b57b194a51c1e22128c775","ssdeep":"","tlshash":"4a3174c9a335b0c24a17cfa87f2ef3c2044a67f8291c9884708ba90c3955bcdbac4d00","first_seen":"2023-08-14T20:47:06Z","last_seen":"2026-07-23T03:04:17.505305Z","times_seen":12538,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/ae.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.479Z","timestamp":1784748249479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/ae.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YWCwIwFUaNBxO4oR4gmktVfhVBMS5%2FrretJ%2F%2Bxh2uQhGvD4mD4XCt0wQFx3NiEGmizNMpMOuB4w04IwGcIf%2FUA81Pk2xnsEpYUmukGFlFzzoZLNQCdW8qvqsXY9Xg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef3b5e7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":906,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"1e0f8ea8b39c7c12501b0a0deda991a6","sha1":"3aaa0708283a38e0826e96f2e479acb5aa85e9c7","sha256":"a826a33f6fd1cebceeea5d5b559cb241a94110cf9dde6ad8af447513ecb4f6b3","sha512":"840d907a3886f59a19322989eee0345f67d297d8a6700da02ca377d982f130724198119917c90e70155d66fe19a9afc4ba37316073c4d1e6b8fbe3905cb9bfba","ssdeep":"","tlshash":"cde0cddda17bf6d54c47cb607d5d72c1608a1246254500deb043562465c93df7b85f50","first_seen":"2023-08-14T20:47:06Z","last_seen":"2026-07-22T19:24:40.469589Z","times_seen":856,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/ttq.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.529Z","timestamp":1784748248529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/ttq.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ts49IQwz%2F3rPmGL%2BA9b%2B5UQ%2B19UJ96vlaE%2B%2BRVqZsPHGbLw6WMm80DeyaJ8Idsu%2BjsQ%2F1HslsTJgKLBwHhz%2FXAsvDNakq%2FVtTXlknkgPGn4ZGm6%2FM3YuMgOSA5qc3g%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e94af87131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1006,"size_decoded":1299,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (436)","md5":"b9fee0345463ae9db403ccfdf7e9ae43","sha1":"a41d7e9cf88057c1e115bfa15c632eb581d56524","sha256":"00f81e0e1d50e29f9d80af0ce5defb723da6f1ab93334197feea23f4bc5bbe3b","sha512":"0e5678617c56124e7807dcd3a00a915349339cfa0e1fbbc279854159682e513c9eb390d0e4cfc2f7e6c1a9222b70a8649fd1796eb8122e0c6b0e94d5b25c489d","ssdeep":"","tlshash":"4d11985c38fc649c839991ef327fdb4c822d90270c40cc48c40dc5150435eabd451e7b","first_seen":"2026-06-30T22:42:59.712514Z","last_seen":"2026-07-23T03:04:17.502595Z","times_seen":743,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/main_banner.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.225Z","timestamp":1784748249225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/main_banner.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/090a6r7kb8eqn.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 247446\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lcm5qlIaMrxJwO3eXBG0AEF5vTZPYdEVug7B5RwEVmkfWccm5IVrB7pSiYxzPVtXZB%2BqDAZ6%2FGhniiVwxxssoWX2uAQJan%2BeFYl5r4Af%2BLSfvpVDakQjC6OlbTFM8g%3D%3D\"}]}\r\ncf-ray: a1f4d2ed994f7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247446,"size_decoded":248146,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2328x1120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42021d65c9c0715b21a1d32e6ccac73e","sha1":"2c708a7315dc9cb1b4de1dcc07ad2a204584ce7a","sha256":"b66c82fbab4dbb067cfd9b5c2d1bcb75a7967b22101bd3c3b185affc1ddcb70a","sha512":"ee91dcdde5201f1c0477bf2f943a9ff1030219694da8fc68098b0d12e29f3f537f689ef02efce952f9a278c18e36c9d319b7d6cdd29888805e714653411f7ca0","ssdeep":"6144:FOD6Mem/6xo4Ys8DqzrSaB3C2C4JEOL9MxwEALaN6Gm:Vo/6Sy8DqzrSaJC/47aA2N","tlshash":"b63423bf3258491ffcd0f8f5e31bab2d57a508e4a5819c35bbe8574297e0a3ae10811d","first_seen":"2026-06-11T16:29:30.424317Z","last_seen":"2026-07-22T19:24:40.472635Z","times_seen":400,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0fghvi7vx5udo.css","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.208Z","timestamp":1784748248208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0fghvi7vx5udo.css HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfXxmtTFZYRF4ZDaGYij4kNgkPuCMqQiRE3Ek5ApMRJ%2FTFagF%2FJB44Dji7JviqyUP3KQj8Y8Zsw3sxhDJML1BijZ%2Bp2Pall4UCludcW5yb%2BfD3FtEOI4uZJOwXYEzw%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e748337131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108944,"size_decoded":13822,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (33943)","md5":"b0cf461ee26fe850006c123804aa96ef","sha1":"6bb82aa210c7bf738694af85c5dd589e46433c8d","sha256":"626e44ccc49602ee3124c152ed8a7eb2278910e950b851a5bd7ca2821d103983","sha512":"cc7666823fd04d13de0c74e498f3a8d4cde3139e227d165179f93cce5355448fa52a475ca604b522fb5d9f61e78aa6a2e840b9fefb25a48117ceaed5c5469a3f","ssdeep":"768:KQwDsiU3o3ecUS8ZVzvUvyEeNIL4nCR7f3ljrjE4QUllx4:E+ec","tlshash":"55b3f67d91f0577fe41df041f2893c6c8962e9dad8960bd6881d28a783c2df215b2b36","first_seen":"2026-06-11T16:29:30.386725Z","last_seen":"2026-07-22T19:24:40.473806Z","times_seen":737,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/00txjv18y81xp.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.248Z","timestamp":1784748248248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/00txjv18y81xp.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DiYtSl%2BkPG6Syd%2BdVbzvr%2BK4FaMnQ2wA2MF0k%2FN%2FLS5e7vm8c7lDoGhzoFxcHEogR%2F29Xor68bfNqq%2F%2Fsup3ou4WGudGTViSXeuhXM5mHKLTZ%2F8oI9qCHcjw075sVw%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e788867131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90224,"size_decoded":28877,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65367), with no line terminators","md5":"9ce6fc1ac19a91ab9b96e5e1a9f282b0","sha1":"8d33c689780551b67888eacf406466aac6275d6d","sha256":"401596fdc663801d8d4aaf96a476f9d2468c085d11f942979cd2b2f4135715d0","sha512":"3d41e06e4f96724a69f2f40c00f8966c19f3e32e9f50aff7ead5fd7bf3fdbb2f486bd228fda15f4804451a5bac96cfeb96d3df1b54f322059f03494fa536655f","ssdeep":"1536:M8udv/NqM7t3AKjSkmE5P1tISAAjJp7BmWok8EO3KqI8GYDNFR9QJn5QExF8:oBAoSkfvtHXjJCOsjI8hJtQ7nF8","tlshash":"be93a657e3241b9a1872727afe4fe181f61d8cbb0799cb50b878e51927c18b87834bc5","first_seen":"2026-06-08T19:33:12.041169Z","last_seen":"2026-07-22T19:24:40.474317Z","times_seen":738,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/avatars/14.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.200Z","timestamp":1784748249200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/avatars/14.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17240\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KXB3G27pfc2IMvUF%2FG0HgSnekynu1oSxXOsPGS69WNukCpO6ItmOojCEWk4WRTqPs9w5Vy4%2FZK%2FIfMfBEuJBlVW334GnzyYnKBnZJatwRcnuwn%2FkHMCEvuTeYXGPQ%3D%3D\"}]}\r\ncf-ray: a1f4d2ed790c7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17240,"size_decoded":17917,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9247d3c672f654dac24b345879ac9495","sha1":"da265cf72c1f4ca85353b29384403b7247eedc6a","sha256":"1e8b1df4869e1058e4165d6354c6920463b7e2e77ca1d54193dea9262e2a4937","sha512":"d7e49769e3b267883659334ec12f74cb6fd24f15c3fb4c3a94005b330f066329453f645aab55ef460401c18e4c23672c597b0d287affd844f58f99089f7eb749","ssdeep":"384:odpxH+3G9sC7tqft6K6aOamvb/qSBMG6o9RWgOl8jsY62PkKM8j:od7aG9t7tY6bdhvLZ1XkgO4s72sKM8j","tlshash":"9a72e1f852ceb0a1830eee53c33b17c9ef661c4d2365d652a7c8d3a93c3150b1b95980","first_seen":"2026-06-11T16:29:30.477099Z","last_seen":"2026-07-22T19:24:40.47482Z","times_seen":400,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/feedback/13924686.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.203Z","timestamp":1784748249203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/feedback/13924686.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 119786\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1hbYcUj2nh17YrpiDmttrkBodGzHAysU%2Ft4otXDXaSPQWNtKWRo7g72SodnvYvi1hX48pRI1scFc6WBzvZhWA23G0499mq83WDwiqXIzFpUjdhW2uG%2B8oh2t3gbNA%3D%3D\"}]}\r\ncf-ray: a1f4d2ed79147131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119786,"size_decoded":120482,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1600, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0537dfd0b1e5a586aa9aa7292f36e4a1","sha1":"aa216bd36f5b0b10e550a3ad4cb98a90c43acfa2","sha256":"305593a4b0fb7e87f23a8a259ffe6c464ac7f052b8a05622092f3835f61ab98c","sha512":"4a74f6ac7450300176660e8a6ec83e75717f793ed0ebf4044626a4bc193eb744d12c1a646c8022ddc78663d974fbd777c460a224a5a86b22e6dd494e5fe39def","ssdeep":"3072:6yaFjJQN9aj9o0gW9pApzjlU5BUXm3R2DpXaMK1ENUr7:6PFjumjOVW41oe8RiKzCNy","tlshash":"60c3124d38609fa0376b9e275f3b4d119c5358fa7cf18cb02f1699e236a5b9c850d6c2","first_seen":"2026-06-11T16:29:30.384557Z","last_seen":"2026-07-22T19:24:40.475234Z","times_seen":400,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/question_circle.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.211Z","timestamp":1784748249211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/question_circle.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frLpC0pSoz%2FfqDbIRo%2FVlJzfaPNyl4F1DWgAK26NuaylswFOZppalGe9DocIWMael6TQqRItZ4sn65eilEaNza6Mzgg59YhpfUdpYwVWOqoGn1pjAzS7gnhB2viw%2Bg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ed89367131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7281,"size_decoded":2525,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"b9b5108ecebdb639d3b0399d10703077","sha1":"e860492e644a7cdd6333e5e1db97c620593202e7","sha256":"eaecbcc09b021f2276fe5dda544ca474316bf14ed8bcbdf72551c25dd6f7e3a6","sha512":"4fb064887402f7d3919a78fd9d76749e78184d93be017df629b57a4f6eaab2aa3a20f35b79318b7c11c01d026f54f97fb99af27e57ce8204471d9fae4998e0d9","ssdeep":"96:0yfkJRlQF/ykJrI2QwrmMQA/qFk/WklrmMQA/qFk/Wkdu+wOe5r4y5uS+wOe5r47:Tpik/Dpik/eq8r4y5uSq8r4y5u84","tlshash":"10e184f867bced96e684c28eea8255883e0d40c75a89c645f36c1f3b1f21cb91d272d4","first_seen":"2026-06-11T16:29:30.480685Z","last_seen":"2026-07-22T19:24:40.475711Z","times_seen":400,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/tr.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.477Z","timestamp":1784748249477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/tr.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1Ucid6YwbCurFwNc8WDulznLmuc4178eg6TmQMGsMk7gSJKqXLBmTn1v5QmG9t280g%2BygRg04%2BQtUWyEU3x0FwrKdktwGAbtY1LBx5Om62zKYIqjaW7lg%2FeIZ7Z6Q%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef3b5a7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":1034,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"5c1ddcf25e62845a09ddaedb534eb028","sha1":"38d813431621d223dbd2bee482a0beca2eb6f087","sha256":"f750c5329bd8315e6575d5f357ca9955468a15321bcb3c7f74065b2ca6abc6ed","sha512":"67270541fccf6a0b81169c4bdeffb48a593939f42ccb8fdbe8d0fa3953f3b4bf80fd66aed8d086990d62b8684d1e15fde720137450622d8e701ad002ed9925b2","ssdeep":"","tlshash":"8ff08b848bf4a4c018955ef8ee6ff4d2674ca6baa7001095f242ab04e0cd8dd664ac14","first_seen":"2023-05-08T01:55:44Z","last_seen":"2026-07-22T19:24:40.476227Z","times_seen":974,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/countries/jp.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.484Z","timestamp":1784748249484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/countries/jp.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jtUaVxE1LPlU6%2FGtrDzCeSFW5%2BHAklgk6FSrRBnmnRJuZAHqlViOEom2FrdBS7nWzB7m5sfSbGRwoGjYO%2FWikeEaHmYYcGfClB%2BxzttV0wIjcrvsmvxMRcTbh%2F3cQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ef3b697131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234,"size_decoded":882,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"3a58d8e5d92ed893921b644bebb7cc3e","sha1":"66489712a0cfaa93876ebc7168a32c729fcec066","sha256":"b964f3dd88f2596555a34c7ca3dc575aa061fa455256f0bcbfffaa62ee771c7b","sha512":"b88069e21cfaf5612503a845e79d159b57a71dabf3ce4b25e917dd3348f6371dbcd18469f426b8f9e4c19adcfe5f1b3c33547f8df1144f397fe0b325283ae406","ssdeep":"","tlshash":"a4d0a7a4d169d9c64810cda83eaa32c1554e53373645226bf0477b18e4cd6ef3245b78","first_seen":"2023-04-13T03:03:27Z","last_seen":"2026-07-23T03:04:17.511669Z","times_seen":3497,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0yzacfavx3j_x.css","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.210Z","timestamp":1784748248210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0yzacfavx3j_x.css HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMvH%2FUpl04CKGmJpM1VD%2BBSC2BpAyHFrDfqLc4svwPGV3qASxBDtD0ygr1abjKVH%2F2Eb2XneDjII1HOuuegpbkZoem5ZIFrlPfsG7hSV2SX417BvXAq%2BTdefoYeGqw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e748367131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118320,"size_decoded":15253,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14378)","md5":"020326e19fb3e7d6c84eda5cee706b40","sha1":"9dd47b0cbc6cf45f2f596caadd7366b8499b5b6e","sha256":"72f7d70e70941d8ed1a346cca43064d606349852c0cfb71357a50c9057bf2131","sha512":"6c2a74caa4c7975e621eb01ebb7d12575358721340d1a586f50eb607c1b9bd8a14d3553ec5633c4f87e6aeef1dba931fa67634986155b453afec366b6d8653b2","ssdeep":"768:QVbrAx2I1l4B/mkzbBy8ZeVpCLHlbcwTDQ5lojKekw3T8IDN2Q93+scCvmV2ff9S:T4PzbBy2pbcw3Q5lojKek20","tlshash":"87c3e17d50b057bfe81db442f6887c58caa2e6c5e8964ee6480c29a743c2df115b3b37","first_seen":"2026-07-07T03:24:17.584444Z","last_seen":"2026-07-22T19:24:40.477244Z","times_seen":234,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.519Z","timestamp":1784748248519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 19:24:08 GMT\r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-07-23T12:12:44.534898Z","times_seen":19977,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/feedback/1877471.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.206Z","timestamp":1784748249206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/feedback/1877471.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 117186\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MNSM%2FnrDZBktp6kMUgJM5DPRM8UalOOwRJR2LCbM5KRBf68FhdyZXEIRsiM1R1jRT0dpTBl2A1nKzJpHxTKe6hczRg8NvAgXN1YeVZl%2BliOHgS5MXkRaXHggT%2FE2fA%3D%3D\"}]}\r\ncf-ray: a1f4d2ed79237131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117186,"size_decoded":117862,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1017x1516, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"988ce044a2c9927c7345499bb65c9e27","sha1":"e28866f85257817a29bb9c5aa06bb93e0bfa3fdd","sha256":"105fa93f108b376a24ae7acbd2690553d348b6fa45c4773d90483306275c561c","sha512":"781f9c20b6d543e35fa46dc7440792fc40fea11687eac5d5ba886a23ecee9f2fee0e9fe2386773477e144b8626e97d39beb841e9129e1cd691c6c1f07a872b7c","ssdeep":"3072:zrdF0OImj0txWLUSqIwVeLNr9252M3/ID2:zTc8LSIhcxn","tlshash":"f0b302abf63935c0b4071a77489e216e1d74c2ea8cd277096c2cf97b98a09ec1d13b1d","first_seen":"2026-06-11T16:29:30.344843Z","last_seen":"2026-07-22T19:24:40.478175Z","times_seen":400,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/about/stats_p.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.227Z","timestamp":1784748249227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/about/stats_p.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0fghvi7vx5udo.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12952\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rh8RRcR%2BeWR736JFLQr8QHpZbD3RcZihOiNQMJjXUlGaVF50T6CgPZ9Q1IfKnkjlY3DxSthKvuKv%2F84sALNZ2drbm6pwSAZV1253ooATxkn7r4hEBln9Z8mWys5Ngg%3D%3D\"}]}\r\ncf-ray: a1f4d2eda9597131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12952,"size_decoded":13625,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9f4f9a14052b63203bb9dea22f6e911e","sha1":"e3c7e59aaa3ed2be349cb57623314c53ddb0aa25","sha256":"3eb4fcc599a3702a75eee108ddba0eae8ef6145ac97508be01754777a6d3c610","sha512":"0a792f1fd969658ecae25adaa877d738eb306c65034fdc8d66ff0c1c6726cfe470f566c45f1bb1a63e35fa6bc38bef15a5044aaa0f1285b1015dcc6d649d0d11","ssdeep":"384:ivIeJMVQLTwGzHZfGmag8wxuYQONSJLN9OYKp:SIeJnwUZfog8mZlNQLTfKp","tlshash":"7f42bea0a77af281e54c9754d30945b803d3d8af1a3b09c4af8b456629cbb41d3e9bc5","first_seen":"2026-06-11T16:29:30.366353Z","last_seen":"2026-07-22T19:24:40.478698Z","times_seen":400,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0gtqnwqp2jd2_.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.798Z","timestamp":1784748248798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0gtqnwqp2jd2_.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4%2F8bL4AG8wiH5ii67XFhZduqoYJ9LzQwfAFz7wHV30SKtTMECu2H%2B9qCLUoveua5DI4zQR3XWbxmgeotlVCYVtqBo0JbdMoUNh6OLYjQ7w4KEXB%2BB14ib3UdkPRVg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2eafdbf7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118151,"size_decoded":35365,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65510), with no line terminators","md5":"fbcb0a523d301ba7e15c269d3a124232","sha1":"fd263d422ba3e2f5182f6a75b8a96fa1d3ed4112","sha256":"96fc85ad0a723d02940ba6592f17047ebd25055c1fc7e4fe0b171ab0a8b1cb10","sha512":"f9b75df2b08996a17fd9a03d7107a02c50487bddd3fc081e685f5400206f13692a054c49917a6a720ab7e70797d72a6a4e4dea29ccf7f320431daf86a5d421c8","ssdeep":"1536:c5gCTP3oPWPyx34NhAG2CGpDWLmLFCKxgogH69pca719HnZh57+rzDgdjruQ8CpS:o//PyxoN/Lex1gH6JRRwDXwpVol","tlshash":"72b31a17d24423f217512695740f69c8b3bee9c41b62946cbd99803d23ac9e8b1b7fec","first_seen":"2026-06-17T18:29:29.90313Z","last_seen":"2026-07-22T19:24:40.479192Z","times_seen":615,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T19:24:08.131Z","timestamp":1784748248131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://richcas.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuglN6Y7j6intKzUCpKcwJhnl%2BiYWVeDMvXAK9GZIO%2Bnbh9Nu7pjingOHK1WbexYQIm1YuKgfYrz7vc9DRhTlt1c7rEVrOKZ8Gr1DpwTFmsOPfUpr9d0fA2hKhj4cQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e6cfc07131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14404,"size_decoded":3630,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (14404), with no line terminators","md5":"b56181330ff922841f9c490ea8107dc7","sha1":"4f484bcb96d2b7ff59491cc38dc4c9776a01d60b","sha256":"516fe315959637332b8d8b4376e22691a0319ad0aa6c2e12cbc616d61576c069","sha512":"faeac87c7df68b5c888214aa5567ef785f42cdca5601661af8eb33b1754aa1252ad4bff302b1419a20a933b5b4827b300ed31de1aad100e27298ab530001d8c4","ssdeep":"192:a5RBOBeB0UOj/oa1g1QJFs1z1PnvTfSpGB913M2qA21f10g131Zo5TgVUyDGugs4:a5G2FOjgUJSvDCVTGuO","tlshash":"9052d01fac09ee069c35ad6d117e9e3b44cccd3b8774c5a8d69ccd8d06126b617d8d81","first_seen":"2026-07-22T19:24:40.47975Z","last_seen":"2026-07-22T19:24:40.47975Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/about/about_bg2.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.199Z","timestamp":1784748249199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/about/about_bg2.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29594\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRoctd7OUP1XaFwUcWXXUT0SCLJvnPMBCKHMQZGPW%2B2pcwIC5H0gHb%2BbKVPz2Yo756vwdN%2FdCnZ%2FF1i7VGS%2FMUVmM33MFkp%2FF8L7uczUJwtH%2B%2Bp9Jj2D6q%2B8iLWONg%3D%3D\"}]}\r\ncf-ray: a1f4d2ed79047131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29594,"size_decoded":30303,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86ff8b43854e7729ad418df70be40c4c","sha1":"a7b4ac23121c2d11db75b2b2c12d09987b8acc33","sha256":"b54b3eaca701f498bd6f338f80c9e09ed381d47a6cc919ac66a8dd8196c8a6a0","sha512":"b9fa28fdeee963587b9690e70f2aa77aee7b72565a4c6d13126d7e6309db6e4c6d1b9bcbfe061abca8743ec52b69bae5e11632c05e9b744305554fe32cdb6fdc","ssdeep":"384:yfPTXiezMR38bcaqLn7G1OIZOUtNitDj9yNVEWuWq5AH71czg7JG4G:YXVMR1XeE3tDUVEz61XG","tlshash":"f4d204c6e0abea72c67bcc78e5465c465357f51ce2d38dcd1f4ab02489dae3613a8072","first_seen":"2026-06-11T16:29:30.394669Z","last_seen":"2026-07-22T19:24:40.480567Z","times_seen":400,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/top_block.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.224Z","timestamp":1784748249224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/top_block.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/090a6r7kb8eqn.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWdBpTOzLZkT5F5UMoKOXXTeosS6%2BhH8Fxb5rvakoUrNgRcKQxkfsR01sB1uD3Xb9DznnjTlr5XwMzkqyVSx63xSm92A2CCi4X90EVujvDr6XTSnJ1sqO6jStLzePg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2ed994d7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5406,"size_decoded":3324,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"5806656ac69db0674fed322e975835ab","sha1":"d662a90777d72b28bfcb23bbfd6211c64128abdf","sha256":"bbbaccc12198e60bd52727d4635127433c88e2466fbd170c281d4277f5f6b613","sha512":"2a72da3182b770f262b69589f72aea8d8453aceba724c6b251a68041ee9899c031258cd668c92ac176068536a8fcbe288306b934a5d5a19b722c7a8cf4fd13c5","ssdeep":"96:YinLIhYkH3kj17+4C3R2VVdQW6QfcyofBykXeJ1ra8AINeTuDVOEj9VoZB6c:YinLIGkkjljWRsd96qqMdaINeTu5LXoX","tlshash":"90b1d6dc63b483f8db86b3e9da3394447e4520eae6818638c34c1c80ba669bded15dd1","first_seen":"2026-06-11T16:29:30.4571Z","last_seen":"2026-07-22T19:24:40.481069Z","times_seen":400,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/card_bg.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.226Z","timestamp":1784748249226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/card_bg.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/090a6r7kb8eqn.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 111180\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BOj6Omstdfmvl4GAYZulVABlg9q%2F%2FtF6psG08quMyPyNwZXkUUQUt5JlLHQEqvT%2BC7210BVaAyptVFsS7cu5LQs3MSVt9QKh514NyBOmHIqkC4XZdH2vdH6S%2BC17yQ%3D%3D\"}]}\r\ncf-ray: a1f4d2eda9547131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111180,"size_decoded":111880,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db2e3af305e77f6720659c1d01a16e85","sha1":"e30f7b5ec2d586e9c4d5b4b594051a47b390a5fa","sha256":"9cda8ca81683c230eebf0deafc4876f44a6c72cbbcbdb1c32ff7171d55c5a24a","sha512":"f4798d12c1fd354ad515123aa0b25f69c0abba4d5e6a3196bac3320f75c1537844b750163a0267f22862a7b618c91e7f8727bdebfe2b572409c702c881f12b35","ssdeep":"3072:pY+41CSOfT1eLc+GQCxPdMt4VOCzBWVHj0vfgo:K1HCTeViswzBcDEoo","tlshash":"62b312403c437e4789cf05aa7799c5cfc41a039f21567298b0639e2440a9b92aefdb7f","first_seen":"2026-06-11T16:29:30.377673Z","last_seen":"2026-07-22T19:24:40.481606Z","times_seen":400,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/verifyjs","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:07.646Z","timestamp":1784748247646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /verifyjs HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-back=/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BAjpkjsBNNmhJzQ0iolhCZ64QXE4xMc2tmPwNAPV87A9U71EUzd%2Fz1Nkier0mlo5nJUfkMwv62ztxy%2FncbmrQh4wNN7qwnZBA16gnBdjakxBZTBWQjgGIjL2bmhTjQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e3cc8b7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T12:24:28.850117Z","times_seen":17476510,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/12lp94j-.c_mt.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.230Z","timestamp":1784748248230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/12lp94j-.c_mt.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5O4dSDjtD2ul%2Fdsj90GFwvhUhdzz1My4yPiPspO%2B47oAUwORilyVXG5%2FEpvQ1m81G87VIuaI%2BRpGCVB0qhmI4vkkDaGcGROBxPj%2FQV0NcxI6h02j1X4TPnLtK3ckw%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e7685b7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58029,"size_decoded":15585,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58027), with no line terminators","md5":"e739de1547de36405dedb135277b1f71","sha1":"a2ae6c5a9ccd2a7b0a2c3513af23ce6027350983","sha256":"516e6be72f41061589fd880467eda5e65367f672bf3965d39f04192c54064b22","sha512":"38d927879984614c350d69095ad051428407df75b772003b1a9a02349b8cb9fc11ed9e4f70e82db8494ece45b4c391f9686b521446c0a75b74d4fa7b7c8287ba","ssdeep":"768:YhBJUosw2zWLEImqD9nhKFXA3tkBOfCCDkZRQqwQV:YhNUAEI/3na13V","tlshash":"8943c8b53291faa342db91d9c0370012f2780d71309d64b4b3a4d8af799dd8e92f6f69","first_seen":"2026-04-09T01:35:59.256618Z","last_seen":"2026-07-22T19:24:40.482101Z","times_seen":753,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/fbq.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.525Z","timestamp":1784748248525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/fbq.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B9viRXdJPwQ5mV25zxaskrgrOQObdP1x4ugT5ysdKlpUFHruYwTbnu4rpJJ6GXdEhxFDZXzv8Dnrmad3pTTcYPjPuiLMwSwCgdyu9io9o%2FAKQXMSEfpSBCEN93WAqQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e93ae97131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":981,"mime_type":"application/javascript","magic":"ASCII text","md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-07-23T03:04:17.494992Z","times_seen":26784,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/twq.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.527Z","timestamp":1784748248527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/twq.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTv20t%2F3ABxsbukepaZnrQE6DYFdbrsD9WJwQaVUYm2vD%2BUjke3aMoyEFlfbfHeFcsel9XTnhsPqvISiM%2FPHajKXrx3e3XVaeUd%2FJrB4EhBaPxFWZ%2FsuTPb2hLfX5A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e94af27131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":932,"mime_type":"application/javascript","magic":"CSV ASCII text","md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-07-23T03:04:17.522454Z","times_seen":26778,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/about/get_bg.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.234Z","timestamp":1784748249234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/about/get_bg.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0fghvi7vx5udo.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2726\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKyCk9VFEhruvLTSwLh3egEZpYF9UgiWDVJV2%2F0VBVsDnrdXAqf%2Fzwe2zoq32pqivbu3VSprVzoVtxgOpAROlcNsYiZuPcy7XJy8lKlzf9J2OZ3QJbhnVffS07klag%3D%3D\"}]}\r\ncf-ray: a1f4d2eda96a7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2726,"size_decoded":3420,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x536, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2fd0dde002fc5f4487d628c3b990d349","sha1":"a702d4aa2f28b5031eeed12eff39e38bdaecd9e1","sha256":"2fdee3248360d78fc8bacf24ab3a972d4bc82d4d4178459b97a8baaa9691dd60","sha512":"1ecf982c315e42c561420d89ccadb440aaa2c846f0247c8936cf720705f31ce34b19b0da28c4966ba4de3ecd3e30a8923a6fd79ce82d8f2b9e150376c30ad4aa","ssdeep":"","tlshash":"00512ba15b0c191cf894853ea91d4c06bbc8e0d139e1313a74f5185b76954e93cfa16b","first_seen":"2026-06-11T16:29:30.458726Z","last_seen":"2026-07-22T19:24:40.483599Z","times_seen":400,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fragment+Mono\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.522Z","timestamp":1784748248522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Fragment+Mono\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 19:24:08 GMT\r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6093,"size_decoded":1472,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ce2aa8e898f250b7c0242ab9077f31dd","sha1":"d002f148d6d3f9736e9014bc0d6555b0fe0d3613","sha256":"8aed4ac843c06ce642e2cad43271e538c73868098e3b5d20f8f339ded465332f","sha512":"4104bae1e0ea8a5db1b0cd1699f68cbcf332c291476e81506501e9b04c97a573d3042b0339f07226ed5bb1d5f4a15967f917dd5592f57d766b6dd587825fb44b","ssdeep":"96:lOEabOEapJc+uEOEa7ONDYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGX:68J05ywfydyGy63gy/yFVyR73xpmj3UQ","tlshash":"89c10c92046f9004ea431cd627cf3e32ad8e51556082e57daffe2ccaacdbd221324b4d","first_seen":"2026-06-08T19:33:12.052545Z","last_seen":"2026-07-22T19:24:40.484129Z","times_seen":735,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":47,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0a21ve5v9f8f~.css","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.523Z","timestamp":1784748248523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0a21ve5v9f8f~.css HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2L5UHiSbzvDLEBGi%2FRlvUojHJhygIFUQtmxJGnjgI6UPa552In3KOIRbpWKL%2BZHQ13roJ9SUQ0ab5Kz2LMlSI4KHyxlGCNbQMCNxGBrdvM8z71JjxM04RtcA69e3HA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e93ae27131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2687,"size_decoded":1402,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2686)","md5":"73412fe569e1f16f6b670c83c1b7fec6","sha1":"fad9338a1b36ee3fecd68653cee6c826390b1df4","sha256":"de4bc1ac4c5c1364679bb70a6f6e16426987f6f3d0ccdb18e32dc374212fbd93","sha512":"c77bf771f7bd0383ff28e3382a3819428c13a42a5f7b1651b4c01caeee04808b4250f9924cd247b70a11476689c6dbb9573e317c6172695e4ee8a72873be0caf","ssdeep":"","tlshash":"78518b199cb483ffc8496012f5582c588642edd4dde29bd14c0b2ce38386af32ab1739","first_seen":"2026-06-11T16:29:30.383583Z","last_seen":"2026-07-22T19:24:40.484623Z","times_seen":737,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/avatars/88.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.207Z","timestamp":1784748249207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/avatars/88.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15284\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJ8v10X1TtVIIf3Gr3zUTvnzXlNfPwgVgWl6%2BKu8%2FzyKqYZVFavAX%2FKUun2V2JecjlfscwP1wMfqkaJ9Pi0gU2tXstXUAiZYx3hufnpHEoxrz9rTfTib%2F0Kp48yW0w%3D%3D\"}]}\r\ncf-ray: a1f4d2ed89267131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15284,"size_decoded":15983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 256x256, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b64c959dd0e62a386cd317e1de0aa07","sha1":"125a4cb5f83d47e02ec7515f7780c18b58da125d","sha256":"f34e000f338e7dca94e9ee5dfa5a3f860f1224d45f58fc40671e768db13872e4","sha512":"105b627319b17c697e45b7749f34caf00b7cbf35e06af3eae16cbebe453c9d534a49c99d2c2cff91cf3366e317fe1add41d6258ca976d1684b39b10110c51640","ssdeep":"384:JDLeB5Jmfg9ooE6RA3Tx99fxiTKq7eCJ4gNNdHd9U2rIfd0:FLebJURKYFDfxiGZCJ4gNN2Wg0","tlshash":"af62d080e89838845eba530ef7199d721c685178fa09d4fa35bf048423cf9c19d7fa61","first_seen":"2026-06-11T16:29:30.345951Z","last_seen":"2026-07-22T19:24:40.485108Z","times_seen":400,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0.tq3hqv052nt.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.224Z","timestamp":1784748248224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0.tq3hqv052nt.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LotFKDOF19pHlvgFD1vznjPMwSPSyEx6fN3ZvG%2B2KlEeJWUuz9npRXXkB4AKVbee5RU4JIgNL6ty0Xx16r8fynHpLPYv%2BqN2QM5VH4qwopoR%2BIk2As25HJmJg4LuoQ%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e758517131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144579,"size_decoded":41486,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3dc8cb2a59489c1561ab34843f6ea999","sha1":"5af3abb3d1dbb398bb131d6cc4976c6df6113a9e","sha256":"07b5b0a411a49989495c74530e109e477f9342b2dbf476217bfff08e0be0af3e","sha512":"5b14c7c64ba184c60488cb10d5096482538946ccda7801ecdffbec8c2b2cc70394be8baf3924aa04b70b00963afff814b388e8429a9f2bf476ef3c381da6c289","ssdeep":"3072:pbPzjb93YLLBpqE2O4dwg1ZoIUtQJ0aqMuB:pbPzjb93YLLBpT2O4Og1Zit2qMuB","tlshash":"8be3e6f935d1f88207ab50a6c03f0006f22c4d77189e6860e3e5ddda756465de2b3faa","first_seen":"2026-06-08T19:33:12.034645Z","last_seen":"2026-07-22T19:24:40.485603Z","times_seen":738,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/turbopack-0ecgschtaudos.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.226Z","timestamp":1784748248226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0ecgschtaudos.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDVUaa2YOZAmW0z00gVkyc5rEPWHnmG8IFXNl7uzmwW0p5It%2F4lI2XoNj18TnzF0BaxWHGMS8ZhfreKdkH6TiY5ZBWw779ZBk34%2BxZAN6Z7KTgI8p17%2BytRisqYnkA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e758547131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10581,"size_decoded":5054,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10581), with no line terminators","md5":"6ba2cb91d34ea9e9369784ebe9af4389","sha1":"384f6cf4bd44ee8abdfd3c2b3239164fd7d59351","sha256":"54a5acf97d9eae9f3ec52b7fa09d3b076f41747ab972ea5c3a84d6ac1cc71439","sha512":"c7e178c33990e900f1d7720cea3451698680da7947b01a43114f47f2ed2c308964cd3f024a682e9937d87485ac64f3e708048a435e3bbbdaeef1641c78a0dc62","ssdeep":"192:z4gMFB683Esgdo2YE0hBG/lhjTNWn+S3sBT4fCT3cXXqroor2:z4gMFVgOQ/lHW+ssqCTMKA","tlshash":"8622c8da37a6f07343af94e7906b4004f17d84a9145d141cd3aca8eb2c394ae85e7f76","first_seen":"2026-06-08T19:33:12.036767Z","last_seen":"2026-07-22T19:24:40.486085Z","times_seen":739,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/0rsb4m2yeeple.js","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.231Z","timestamp":1784748248231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/0rsb4m2yeeple.js HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jxq18n3j%2F%2BHZxr2wfKJO9VCYXPFVX1PNPxntNgi9VUTnKVbza5gWQRc1MY0svpDgJOP7jXLTTjcmAPjZSFRUJ0LkgwwD%2FWr4JmxXiX8avFEcHfN2G36KFQJngLzQQw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e7685e7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17191,"size_decoded":7516,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17191), with no line terminators","md5":"4aebd048504daeacd9fa359517d4e46a","sha1":"595d646b6575bed175c63315896da6364f27ff1f","sha256":"3767b0faa659579681dc1985440c2783bb78337cb25fae22c391e000f9d8d7ed","sha512":"a972a887d90c0a8bc888bb8f9fad61aff48fc0ea45b9228db7a1346ce72b2ca5a0362b842bdf4b7d1551cf46f1c306ecba9e84cb36d6e482c9baa5b16d737498","ssdeep":"384:KimN/B22tHVGVj+jt3t6jbwmzM5VKW0KInG/as1D:Zm322tHcN4dEaJ0jG/5V","tlshash":"907209427498fdfa0b57d39ce86b8004a17e2a7ed8cc81bd8f6cd9a0317594a7094f69","first_seen":"2026-07-22T19:24:40.486582Z","last_seen":"2026-07-22T19:24:40.486582Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/question_avatars.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.212Z","timestamp":1784748249212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/question_avatars.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24984\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6PN%2Bynt2%2BFs8BhN6C9JIA3dTZCZ%2FuegWY9AU0nzTXEMWuCa0tAH1nU2QdxeHxsUL8rdnAmYtWPTh427oCb8tIRJtVJak33JsIZvUzsyJNMCfWs16l%2F77qLWADaxMjQ%3D%3D\"}]}\r\ncf-ray: a1f4d2ed89387131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24984,"size_decoded":25683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7bd85693bd4c6da5f612f785afb8de73","sha1":"0ce6ecc58dff55e1b61af0b6168cda3bd392fc00","sha256":"92497222e97d4f34bdb036bef4d8e2b24f01f49f0c9ec7c417bb4438bba717a7","sha512":"c4f385a9efbe52c7bc6eeb7fb78680d1319e69fa1265db8bf730ce0ca1edd5e477508e11f971084130c9ef52fb9bf3332ec882c862b2183cfe0b94faa9561dcf","ssdeep":"384:iGkEqyzckbAPMLvFiiQiz6ZZSlmsZhWJJyJwKCOj91x7EdojuDnbI:+NkMPUvHQizoSlNZhWJU1COj91xQOuY","tlshash":"60b2e1717dfda71a0c0d68ec1bc41a2e4dad184dcac9b460e43cf3e589711220ba722f","first_seen":"2026-06-11T16:29:30.481618Z","last_seen":"2026-07-22T19:24:40.487421Z","times_seen":400,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/exclusive_bg_right.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.242Z","timestamp":1784748249242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/exclusive_bg_right.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0yzacfavx3j_x.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 276112\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkEQeA4M2QB%2FY2FJGViiXr%2FJnyKFr9NHLwm4QL6pKLPXhGE4uC%2BQVZZBhYWbDxkeq%2FqHeaMOkbX0cVZhbEXOZhOZsr0lQ7YspHP2t4j7%2FLaEvHlYrZuIFnjBloCCjw%3D%3D\"}]}\r\ncf-ray: a1f4d2edb9817131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276112,"size_decoded":276792,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c531d7f8cb8daf31fc8bbd374f809203","sha1":"844f0b6fe50511cf3a9fd21d3f0fc302f4c0784a","sha256":"e3268194c37dd9bcdb7cd323832d208e727401f2889a00a6a9420ef732c5e447","sha512":"15585b839620691b74cc1ef7a43fa045e120cd3c1a897ced71c76141c551dfc6b2c5c9f6fac6b4e5f875ceaefb92264aeab3eb62e35e4e26d618a414c9c160e5","ssdeep":"6144:tO+H/+2d9iwCyfoT9kliXc+P6OJGN9AmVNS0HnVuPOPIZ:tO+f+QtiM+P6OJGnnnjHnM9","tlshash":"1f442317fcc3d141ee4d29766c9e6bdaf77a9befd4c56c4d8140a4858b6038306b8a34","first_seen":"2026-06-11T16:29:30.419562Z","last_seen":"2026-07-22T19:24:40.487912Z","times_seen":400,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/home/exclusive_bg.svg","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.243Z","timestamp":1784748249243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/home/exclusive_bg.svg HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0yzacfavx3j_x.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FEEMu37AFhb4GAArcFEZjjTU225MRdLa8ItAfH1%2FvkF6Xv360Vs8%2BOiq7dgzgkyyq%2B1kx3S7VnRB%2FWyLcXhniXQNS%2BXxbIESCMKZ%2F2SA273cbN57N5xONQwuMw1SA%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2edb9867131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7637,"size_decoded":2822,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"7afe46a3bb87300150b61c1bd8f8bcf3","sha1":"0cfdc61c6eed5d8ab3b925c5e832c524971caa05","sha256":"272f7cd03fc21cb9f4c351b9e2ee368ab0eefe2279eec02ec61c368f2c70cfef","sha512":"3a3e873e5d78055597f3dc2d242675765e0902de6c0b6f5933355bf7fc211124f30efb0d3df19ffebdaedd07d3789adc96ca3ccb8ad38c5a986a66d422c26286","ssdeep":"192:4irBD5HjDxKTCLxT6irBD5HjDxKTCLxTT:9ldjD0qlldjD0qV","tlshash":"acf1a3ee5bb86ef08ec8c3dbff15449c380984bb4a948918d79c5e492f61d58dc19a83","first_seen":"2026-06-11T16:29:30.367498Z","last_seen":"2026-07-22T19:24:40.48844Z","times_seen":400,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/global/fonts/klarheit/ESKlarheitGrotesk-Smbd-TRIAL.otf","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.283Z","timestamp":1784748249283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /global/fonts/klarheit/ESKlarheitGrotesk-Smbd-TRIAL.otf HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/04dt9~~_c8v5s.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: font/otf\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XgpPowfxmQGVk4oyX061QtttcfZ5FM9Jrig%2Fe418h%2FK1nz4pQRyE1lbNdpANCKsv8kZ3iUvGMhFjxlT1Mp8%2BIAgiUF4Rk4I2IBlfQpcNvA4kkzLI5sGpTeIy8GitAg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2edf9c17131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8636,"size_decoded":7352,"mime_type":"font/otf","magic":"OpenType font data","md5":"5cfa653c156c665d569a48b53c56ceae","sha1":"16dacfab55dd75db79453fce084375ab084e152e","sha256":"f5ff34dc6823a5bdf0841549d371241ce06d53c0cc3ffa70e8d5df337d069041","sha512":"4349c60782a7d25ffecc1a09acf4150600ae324636213c5006f40972f62a278e12092a956dd0e6dec4b6c827c1be5f9ee75d29a9203217f139cb8bbbfeb815fe","ssdeep":"192:vM2wihiu51LGN561ciPHy3DnI0sr5LSoi2EadPy6Y:vKAzqN5MRS8jrY32Eadg","tlshash":"80022b50c3e49700f2e7af3245fb178a6726bd00a035d7aec6c417450fe67480e257ab","first_seen":"2026-06-11T16:29:30.428343Z","last_seen":"2026-07-22T19:24:40.488962Z","times_seen":581,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/_next/static/chunks/090a6r7kb8eqn.css","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.206Z","timestamp":1784748248206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /_next/static/chunks/090a6r7kb8eqn.css HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YI5n%2BSa%2BXBh%2B9Q1A7IkJUH5h5mvGuR2liVVhMZ15lpnAmpdM0wg9IH%2FvUR9LfrF2%2F5zqLqyXWT1UGsm6OgnQeqKU%2BI4TfEasGk3FEsL1aq1JOncc33enbiM1lExtAw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1f4d2e738307131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79308,"size_decoded":11902,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (30091)","md5":"6325d92868fb3bc97f29a3668b4bf291","sha1":"0178ef58fe1afd80afa9790ebafd61b806530f59","sha256":"6d36d452b2dec5e9c5df5c4578806b470fa08b07970510de0cceb6fdfd3835b0","sha512":"546de16adb202ffe9f329d8edbd89ed4d66274c2670cd024f8015bd4a1b77ec98f0d4c0b710ae8a7344cfba8d3da165a46f798eab483296638027c3f61ea79e0","ssdeep":"768:FC46pj5uEvGLesaFORUDAKqS+ESoDUp5LlwF14IrjHXZ:z1yZukDU5JGp","tlshash":"b573dd6d51b447bfe41db011f2c468188fa7eac6e9a24be5480c69a742c2ef115f3b37","first_seen":"2026-06-08T19:33:12.056103Z","last_seen":"2026-07-22T19:24:40.489463Z","times_seen":739,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/favicon.ico","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.684Z","timestamp":1784748248684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 37\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin\r\nx-cast-cache: STALE\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LaryOjaJNfDPcr4c5hUQJBWapeGZGWc3dm0SD4dfv60tOTMf2HYtIIJHhjLYaSyK%2FYrzq19FBvVCtQBAHi9kUE7TbiTUsHL%2F3suwc9HEsoUJT4FYohUkah%2BUM0w1bw%3D%3D\"}]}\r\ncf-ray: a1f4d2ea3c7c7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37,"size_decoded":627,"mime_type":"application/json","magic":"JSON text data","md5":"79af9efd9c0115a1d73a720c67f885e4","sha1":"d217cb35307108d1062eabf2dcd3dade4777e468","sha256":"60eac3fa3390e47e58a8640ebbd7a968cd286a0fde78c6b85054d49b27318190","sha512":"fd68e246e6f932d82c13bcb35045496a77a1e61cf1bf6ef2315ef32fbb05c91a35586db32e66794ecd3ca7112b1ef3ae244c5db7b0912b16ab93947abaf0f142","ssdeep":"","tlshash":"7480040d114501cf0401f1d0445c1c3011c445c054305c14c104c01dd5410cf545104d","first_seen":"2026-02-17T00:27:37.560756Z","last_seen":"2026-07-22T19:24:40.490973Z","times_seen":252,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/api/extra/promoIp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:08.801Z","timestamp":1784748248801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://richcas.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QT2fMGxtXR65bnvJz%2FVMaXheF7WC4Nyli0yrpjEm1VnMYUNAh1cuP%2FazKbVYKQooOFO%2BJ9fR8h7XFjoC%2BTDux8wl3BBmPsBjso6mLj0JZRFpNG0gxzIpaShv2rrCyQ%3D%3D\"}]}\r\ncf-ray: a1f4d2eafdc37131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":697,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-23T12:35:21.39572Z","times_seen":177493,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/feedback/3815216.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.208Z","timestamp":1784748249208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/feedback/3815216.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62260\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TnZ8AejrHc4t4fAdQhKn01pzJNAibIJkQhUZ3SSm1NmED3JUiGml9KfUvJGT4Q0oha2a1X7KQjjObCKH36C4SpWDyWy7BZcE70t6PquHy4RhsOpW5Dwam0KnvqDlug%3D%3D\"}]}\r\ncf-ray: a1f4d2ed892a7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62260,"size_decoded":62929,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4f40f8ff6e1ae4780072180beab03343","sha1":"c8effeadb49c361db3952781b86686e850bbd39b","sha256":"e8bcdff3606247a9fc22b66d876b5ce10d4310e6164416398c90f449ffb18b56","sha512":"5db33ad9c20600b01d8da6b34bf8fde1669e64e1e5a8e7c2aa597ef891b0f0f027abe8d73ab320477e282bf5f181f8f259d5f6ccb2f737890afbee0757049a35","ssdeep":"1536:afQMyMcmcKXDmzUrGZgOVUWMzUGISpS1SHEoJz:afQMynfKXqzUPBRS1K","tlshash":"5c5302b394466a74c29732735d8fecb3ea79ad8968bcd124761b9763b0c2337781c046","first_seen":"2026-06-11T16:29:30.4516Z","last_seen":"2026-07-22T19:24:40.492204Z","times_seen":400,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richcas.com/mainDSGN/mix/about/stats_r.webp","fqdn":"richcas.com","domain":"richcas.com","tld":"com"},"ip":{"addr":"172.67.172.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://richcas.com/","date":"2026-07-22T19:24:09.229Z","timestamp":1784748249229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richcas.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 00:21:59 GMT","end":"Thu, 15 Oct 2026 01:17:06 GMT"},"fingerprint":{"sha1":"75:81:17:86:52:B5:BF:7D:D4:38:28:0E:B1:C6:07:55:6D:06:F2:E5","sha256":"DD:A1:AE:FB:D1:67:98:88:B9:09:C4:32:52:68:2A:B0:DD:03:A6:CA:07:15:FD:2A:5B:E5:CB:61:FB:AD:02:B3"}}},"request":{"raw":"GET /mainDSGN/mix/about/stats_r.webp HTTP/1.1\r\nHost: richcas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://richcas.com/_next/static/chunks/0fghvi7vx5udo.css\r\nCookie: cs-uuid=933377c299d2100b1c20df10081e800; cs-resp=facc4bdac20c4d7cd33955adb3402d69\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 19:24:09 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10416\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: cs-uuid=933377c299d2100b1c20df10081e800;path=/;max-age=7200\ncs-resp=facc4bdac20c4d7cd33955adb3402d69;path=/;max-age=7200; HttpOnly\r\nvary: Origin\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26maqV0YK9j6Wxfz2HfLuwN4IRDXRX2K%2Fdah5vvS2I4wE1LR5VAuvE3x3hIh9KrOkv1Xiwq0OmWyDwWkaHm3IJOIfjh4HeSEwMHebL6INyZwIMGYu%2BXmru48Ev%2BWBQ%3D%3D\"}]}\r\ncf-ray: a1f4d2eda95e7131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10416,"size_decoded":11091,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1148x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1aee5ce794458ed72894690fec0092c1","sha1":"3aaee33264692d25a25d94df20713990c9be70b2","sha256":"a5f6bd4de41805765c9b57607e459e944c92b584f23267623e1060bf5c076cb4","sha512":"f89f112021d3756829843f43d569fcbda0446634c1be804f7337ae9f32da23030cb65b3b41922becae3731617a85408b19b6a85ed7939c33d9d97f095e430414","ssdeep":"192:mb4n39dybzXdJEsnFevnpss4MI6bc8eTXaUBzLtqTmzHzftd7su1CrdBp:2Id233nop7HbmqGntG0sp","tlshash":"fe22b08efd75e007cb0e765ea6b023c27c612c65521e6ef8059815ee5274901cf87da9","first_seen":"2026-06-11T16:29:30.333176Z","last_seen":"2026-07-22T19:24:40.49279Z","times_seen":400,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"richcas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}