{"report_id":"468e5d8c-6661-4342-b6c6-6eab087be18a","version":6,"status":"done","tags":[],"date":"2026-02-14T12:04:43Z","url":{"schema":"https","addr":"rr-inv.com/","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"104.21.50.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rr-inv.com/","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"title":"RR INV | Cryptocurrency trading and invest platform","dom":{"size":239789,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2644)","md5":"7a0b36a262e75451c61f6313e2ce4e84","sha1":"6a52a3151c6156096c7e6c2cd070ab74e6f8a311","sha256":"31838b3336f7b0b13383af2de2358ca0bd292ff5bb03cd5e9d2bec01fbb2f1d0","sha512":"655f52d59f7d40ba3d1e7ffd693ca4002d818224b7f40d7b9aa91d8aff754f11f7dcfa2b608f7a678547457992cba653bb8d9237df350b3c4144576b3f7a7471","ssdeep":"1536:Gmxg2DRDiDu/DkD2D2D/5DLDGDTfr9VR8+4Xr9VR8+49N5WFhsBg+O+N5WFhsBgs:oA6LB1F1oMW","tlshash":"8434d6f063f892e5f04193f8d63959763e6728ebaa12c14873ec1e819f9149d8c97c87","dom_hash":"domhash5c0ccc764a57ca10514d4665423209d8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rr-inv.com/","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"104.21.50.168","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T12:04:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":5,"received_data":154755,"sent_data":2625,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":28518,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rr-inv.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-02","domain_rank":0,"first_seen":"2026-02-14T12:04:44.169012Z","last_seen":"2026-02-14T12:04:44.169012Z","alert_count":47,"request_count":47,"received_data":2197749,"sent_data":20723,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rr-inv.com/assets/js/app.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d07fddad2dbb2e1b33663063df276af3","sha1":"ff05ef5d12cab598273743b8ecba860d5fe3eb19","sha256":"84c100eb29667fada78eac7c2ef3831d2dfa9d01827c00f9a8c07a8da28231ee","sha512":"497e5b7368287addb7d29b29b80a3f89ee35f8b1fb5156b0b02bf27fbc6b238fbe78d4554ec7f879b982da6ff9b1e4750f1daf058c5f921c5032eec06afd48c6","ssdeep":"","tlshash":"c57122791314b93c02a30ad7e6e6aad07a343886d5411070a8b9ccaf1fd98d39371ff6","size":3615,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.195384Z","times_seen":434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/js/app.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"632bdd284f17fcd40eb5a0f445472e00","sha1":"7fc40a9cb81f873ee8b6ba04d30161a8d48dbc60","sha256":"87dbae4c0439ab8bf5607748f3dd35b7b138cfdcab2efc94a1bbf6773ed0f131","sha512":"c81b3463d8fface28b4fdc2f198b561ccbd5099935bdfff005cbf6e2ae5df6214e1764abc32be18285747ffd5770bcc05a2a3ae1ff61e5b069d430ea4c066765","ssdeep":"","tlshash":"31f00ecca80191bc03bb40c0226fd1c87c906832e0a1d1d501f7f34804941e512b5e6c","size":488,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.196152Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/js/news.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c640d083b2dc81a6f9fbde817552e97","sha1":"ab789ac8a70af52dbeaf56b606d6914295a71eac","sha256":"3501416396bd8a484e2b3ddbec46e6cc515d68ac7a42bbc733d52bfa2a4e2329","sha512":"94c0d460ba6b4bff1419953fd2a6b828d39deb51363d774e632bd7ebe200d60efab1e8a91b5b503fc72f9f496509d90eaee206d736441e0b18f51baf1c311fc8","ssdeep":"","tlshash":"15c0805d1075718403a2cafe5474ca42c573013797d7493fcaf404f984ee5580afbb98","size":177,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.191352Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/js/header.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f1eb758c539563a116fd6205f2cbf3","sha1":"fbaf0ea4381ca7def60922205a42f6372afe0fcf","sha256":"4cf4cf24c46ef18a23275d60700a827e4106aa462659f46da1afc3807e8e33ff","sha512":"d138c6538254710cf342359349a96f1fe0669e444bc94f8bc3faede81c88c0c9240f7426c153788610d47c1ec99b98ede8956d3a163a5cb95f1aef9d9ce26cfe","ssdeep":"","tlshash":"41f0c269470c657a01a20ddbe7e1cee06e1058d7d440247215a5cd8f4be9ce2d2a03f2","size":563,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.196831Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/js/toastr.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","size":24854,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-05T15:12:51.710408Z","times_seen":914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/js/cryptocurrencies.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37257948808f476a1ff0737b2a22c9fe","sha1":"736ae1b7c5597458834c9704571b99bd45aa6231","sha256":"f6af42497aae5f14a17aa2d68c0ae2d551332e96f2efb23a428cdecff879c2b3","sha512":"3f5dcd87cf322f465879172c431b73e02eff51eec9eb4ed39ea29364fe8953577ddd8119434456b873ffa81e2d73c5376621d6b53a37e4ac0f98c9342d5cf440","ssdeep":"","tlshash":"7801b56b394e343555ce21bf42769a8c20aa013c754266e13e2a898c6071ca2f4aa9ec","size":749,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.138643Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/js/jquery-3.4.1.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88147,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-07T01:13:10.263952Z","times_seen":5115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/npm/swiper%409/swiper-bundle.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6169ccf7a9d58ed680db82c97f26746","sha1":"4ab349710f1444e3cac40a1c17def4173ebcd9eb","sha256":"81242d1bdd179ae12bcee722a29eebf2f5b7884eb050e5dc1670fb4361c61370","sha512":"f02d5d5aef52ca3787669abed1e0a1cecf41dd73d463d675329772d7dc20bcbaf2f75c25951e678a18afa8658515bfe2ed43e869e8a16d62dc8d57ad127b5210","ssdeep":"1536:DIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVua:EJCN+TXD2BkQZFU9tp8Mj0k95h5cpnk","tlshash":"fbd3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","size":140575,"data":"","first_seen":"2023-07-20T03:42:03Z","last_seen":"2026-06-04T21:04:51.579976Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b4e23f1daa5a9424efee0e6ca7fb63f","sha1":"278aea6325506a82f966dd87ed928a9075480a95","sha256":"3ff2b38a7c34d0f3f53d35fb7aff10e229c271df0fd87d29a27762195852ea5c","sha512":"67759e6f751da2b3efd4cd39b6dc3bbc141c86d5482c39db1c080ea5c19996086bdf9fc4d26649f04f4fdfc7b89c5d326c2479b1f28773d0b34aa10d75e3ad0f","ssdeep":"","tlshash":"bcf02709b8be6ae410f7755a399bce4878748ecbda184f12308e4cd50f0b15c385734b","size":467,"data":"","first_seen":"2023-10-27T07:31:00Z","last_seen":"2026-06-01T08:48:29.197626Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rr-inv.com/landings/css/footer.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/footer.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6HpfWusereBnRgFEaJ2dqMSaOAn3H2asfmfLE4vbMwCGiOIMDpH%2FUkP2TNJ%2BJkHWUlkdwQZQt7mningUFcbT7drLDtSxQ4lyVhw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72895475a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4370,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cd6ecd5ef8f29f2184ce1806b9911b6d","sha1":"d10b60760c321a0c2f9cb75974ad5f6f794e9278","sha256":"912dcb30cea7d3ba67d77ffc3d97a578f80d0cb46f477f9176f81df9c180fd72","sha512":"419a0c64bf9d75d82806fc41511c11ab958cd5d6fb247ae2e301f20557f5653d250dc333fdd0a04efd4b26a322076a1abe5461e0624c4513d737a4519f1f3c40","ssdeep":"48:wPa8q8jXRP8HCMSFXFgIcMqLzcAlMlCAbFBE9PFl3HurysQIaXPZPAPqL9oa9a:wC8vjXpwC791gpa42FBE1F1fPVwgJa","tlshash":"8991babf76b5051868576850e7972ba563bcc423410efaf1bdd1620ccfcb2c99d9228e","first_seen":"2025-06-30T12:31:55.38099Z","last_seen":"2026-05-09T07:39:24.409119Z","times_seen":38,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/news.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/news.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6np0T9ul1MDURmfaLTJ9cpgUmuL7ewH7lEbHBUMX8fhfwZUZKZheeuYLF43f3PKaxc9ogz%2F1hqatddWD6cmZrUUuI5cF6Fudc4w%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72897175a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":700,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (700), with no line terminators","md5":"1c5de425fdd767f5563637457072800f","sha1":"fb7895735d2ece4044b494c1e127db9cd560eda5","sha256":"37996a8f2c6254a7c2f161dd1e631aa5de6a4c9a331ce2e519e90013d367eb78","sha512":"c75a66fb0a957c10aba5ca34c9dcb6eb24c8f4cd8199b6fedd1c3cb14d4826137e13c395e4fea509936f9ef0ac3819a7970411e3ea9da5b20c5f8783a345f9b9","ssdeep":"","tlshash":"2b0140584b54239fb12b86e5d3d385dc817ac1a3b7420e9fd6e96cb2830502c3432a98","first_seen":"2023-07-07T00:41:00Z","last_seen":"2026-06-01T08:48:29.159559Z","times_seen":149,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/img/cryptoicons/btc.svg","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/img/cryptoicons/btc.svg HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YqnlPKcGC2v53tApwvSmF2mHJ59gVhFibqIJwWYHZmj54cSV1%2BKv4uI50aJ%2FlmC2AFHU0pI4b0KVxVNPUi0OMT6J2OFWUM5uZvc%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72999c75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3705,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e959a957e7815d3c97ffcfa927a6ac3","sha1":"be033b9cbd925aaab0b6244f715c5d3f34d1cd5e","sha256":"af4022bb60633db1a667a52e1746eeefe6384b81825b13155a93b47f88cdc3ed","sha512":"244d59641af74b45d0b9079ccf7a3f9c241e8888a6fb15373140a730cb21f7fddcb356ccac93eb91e1c854e848f7be1ae92987176e5924ac8bd90d456014b658","ssdeep":"","tlshash":"7671b799e3fd84d6e31c8564ede1250a875c609342040d08bead5ca4efa25d2f77bb98","first_seen":"2023-10-25T05:58:22Z","last_seen":"2026-06-01T08:48:29.181828Z","times_seen":368,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/img/cryptoicons/trx.svg","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/img/cryptoicons/trx.svg HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LT6BEV8Q9UpERM393jv1yawM5eGR22akwnKzaPv9Xp23KZ8MJpiJwWDtNjK1CIolqXBHbmv83Ay9qliHn17u88RszKFK054u1zw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d7299a375a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1172,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1d0e43489bbca2afd7945d6ce212f4d","sha1":"1d386aed1d936e5c442dc34796bf6ea72eab8a15","sha256":"b9a9f2e5f95168b5b1cfeec951f2fa88779830be1c830de2a7764d254620d652","sha512":"eb3d241a3aea7878c1c2d62b1ad6d6ab0fa561c0557a11cb835961addc1a6b668143fce4ea7dc0a660fcf5423e8145a144a253d16c1bb897fdc6a4cb166b28ab","ssdeep":"","tlshash":"3d21115d4204dfbdac52866967b0adc573b2548ae530ead8acba147fe81c4835288b0d","first_seen":"2024-08-20T12:48:50.792117Z","last_seen":"2026-05-09T07:39:24.411645Z","times_seen":114,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/brands/brand2.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/brands/brand2.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 4876\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UveVfvnRBw26wibbERUCeItPf6arp%2B6fhSDPG6TeUqGchxmWJiQqno5Z6zFzjey%2FiynIBlZMu3lPwH5RCrCgmA9JOk98wJ8AF3g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72b9e675a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 148 x 46, 8-bit/color RGBA, non-interlaced","md5":"30472718e50537c3c9bf67707e0fa50a","sha1":"1c78a594073efd3b1ffff96c561a571b6fbea4fb","sha256":"2b6a5ce4e6c35ced206ef5aa4a7a32e413a01a0d9f20650b8e91d03fee6e6a48","sha512":"bf9ce8a08374c55aa1dd2b0bdeccf72a949c35a616324e58a3e5edd929375e142048a8e3dc7634d770e2583206aac6deb1daebe213549e49890d76bb6fd28ba0","ssdeep":"96:LS46ebv8d3TP4tVO4bupiiajt1vUSRl6/KIg04rizzRM3Ol:LS4ns3TPWobY7ciEOezzik","tlshash":"19a18e6ed3618e668cc3daff768aa31a70a1c743d531e9446b3348c03039d8d262935b","first_seen":"2025-06-30T12:31:55.413476Z","last_seen":"2026-05-09T07:39:24.403187Z","times_seen":38,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/js/app.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/js/app.min.js HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUnJGTv19gBPAGZvEiXy7jN5%2F6oj%2BHQSI6ChZdtyV1uBqxOFxB40gs5FlNK9ebEv%2BE7Wymn%2BOnJqeoOeCUuzvZOMcII1bxB662k%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72ca1675a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3615,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3615), with no line terminators","md5":"d07fddad2dbb2e1b33663063df276af3","sha1":"ff05ef5d12cab598273743b8ecba860d5fe3eb19","sha256":"84c100eb29667fada78eac7c2ef3831d2dfa9d01827c00f9a8c07a8da28231ee","sha512":"497e5b7368287addb7d29b29b80a3f89ee35f8b1fb5156b0b02bf27fbc6b238fbe78d4554ec7f879b982da6ff9b1e4750f1daf058c5f921c5032eec06afd48c6","ssdeep":"","tlshash":"c57122791314b93c02a30ad7e6e6aad07a343886d5411070a8b9ccaf1fd98d39371ff6","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.195384Z","times_seen":434,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/fonts.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/fonts.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jy6dy2MMcUTfgdEA5AR0IO9dfW5MeavV9HEIEVOhWaxw7dvz5yD9AprspJQVjUJ66gZS9G%2F5YqkXDczUJhTeHCRdX20%2FuZf78vQ%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72794375a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/calculator.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/calculator.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkdQzgK3WFTx01Stw04Bx%2BgxcloJSWHFvYvU104f3xz4CXoYt17xiZ01b95iFhdLI3bAQkCQrD%2BhMwV%2BDTURL3zRiMvH02i9Vb8%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72895275a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6349,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6349), with no line terminators","md5":"3fc0402fcc4fd6d1f9e6499181698b03","sha1":"61fa5f2d3f41289de810c170f5eb76226f312781","sha256":"c44c0d7deb0e4ccb7b3d68e35474a2d01a700c3b877dcdd64d46c2d3fcb4273a","sha512":"802942f16b3b4134d131314d40c041ca8ee7ffd73e8271d2140c17242af91cdc2072b5003f8999c11fed97d6649b0103b011db7368839ff943b91442963152e8","ssdeep":"96:Ze38f87W0+nRjy7Qhf2a/22hg2VlRkkDkZccM+hFbt:Q8f87WjRD2au2e2fnHJ+T5","tlshash":"3ad1443324151928b527dea227f919dd718cc263e11327f9f8a1a96ad3c33c705f2e4a","first_seen":"2023-07-07T00:41:00Z","last_seen":"2026-06-01T08:48:29.157058Z","times_seen":148,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/trading.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/trading.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxH38f3N9XXV8bajmDAYav89tP58RVEKDRDXvQgoIF9%2BoR%2B7a7vtItVF0ksN9cPhQ%2FeBM2KwMO8gD7IWAE1UQCXD26%2BKrrnLJfs%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72896575a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f0f8f0b01b977bf69c4f79390d1c174c","sha1":"cee288d27b0d006b272e3f10d9536325f3c9f35c","sha256":"2160ef6f6d859915ba3ccc27ffeacbd946e346d0d1874cd48d3894d4a5584712","sha512":"183f777660f4d36b816030d701e4366374032d17e242826e112dfd0e2db7a5fc9961ad3920426e2ae781bbc98dd823192eb4e7e1244cb0a90505c2bc4e410eb5","ssdeep":"","tlshash":"60610dd30664ba093943b868364517a1b36c5053c24ffaed6fc2248ccec69c4d9b37ad","first_seen":"2025-06-30T12:31:55.394914Z","last_seen":"2026-05-09T07:39:24.421587Z","times_seen":38,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/choose.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/choose.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FS78CukS4lAGYlcvj2A%2B413cDJCTOHZHpx53gAASON5wHOX%2BiXX8rf7MAOOVznYzuaAP2jZuJkSj1C%2FUfqhN5eVpWvJANr7hAaM%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72997775a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3118,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8d66d7c6c8a1c19f66c12b39561c1d6f","sha1":"14a54b80a151582b11f58f64465ac74a9e8da536","sha256":"4e8e70c5c1183348097da327696aeaf7ca84fcc0068ae553be5b69bab9e76bd2","sha512":"0a7a1d157754003990d867dbb1b387811182c92410f37930ef5c2e2c018e8997a68773a1acaefd49c8df551567742a64bde13c93ee2cbd512452229de5f4db74","ssdeep":"","tlshash":"6e51f3bb0920210cb41b645c6be52b49337c8113964df9e9bec3544cdfca9d19573a9e","first_seen":"2025-06-30T12:31:55.355669Z","last_seen":"2026-05-09T07:39:24.414127Z","times_seen":38,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/trade/tr2.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/trade/tr2.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 39321\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UMSTKypVyRFdSVsgI0V%2F8NJK3IMfB067Y2WfN5p65IEmd%2BGFVO4IKiRPbMjZMX1YJQNJhFGik62XC1Ansf12YcYt1Fz9kjeVtIs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72a9dd75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 161, 8-bit/color RGBA, non-interlaced","md5":"25befd53afd4ca582404c4e05a5949e0","sha1":"f2dc47455fb726f8ba89561e6418168471fc045e","sha256":"0727acb620b0f163071a751bdc3188726d6a1a5ea94509334109e1c3b8e5ec19","sha512":"7f71b070d8b1da435e370d7d3791290fdaf53ed7c7d0741165d93c30069c8d6871c884d1dfebf42adb93d8d556b7de8f6b0244564631612b44c2b7cc2e42b7dd","ssdeep":"768:7uTDY+kzUofaunp9St5dWBjgfu1YkGxcPNS54EVu9EB8JR6H:yTDYDzU2pw5dW2IYpxCi41uB8JRu","tlshash":"e503f15c7b831f663cd682e351865c21223f99bc9801192dcc1417bef2eef46655ee42","first_seen":"2025-06-30T12:31:55.418309Z","last_seen":"2026-05-09T07:39:24.402375Z","times_seen":38,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/brands/brand1.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/brands/brand1.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 6535\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FeIio8jNnPmqLXXsdFGLpbasImjcWPH3tSzsBQdLhp4Th%2BRsJ7%2BeVTX49gC1wfCXPmsE0bCvNxpINADeUCO7PbtqlAY%2FC4jku98%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72b9eb75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 40, 8-bit/color RGBA, non-interlaced","md5":"ba147c01b9f46cbec387832502920bd2","sha1":"6261e5db52043eec330960b9970d5b29b780f80b","sha256":"fbb0f6fa5a619ba3004258830113951e4ebe7943055db2961d92e1463b4c669b","sha512":"69d13676030c8cf8641d115cb87b511bc01e0bd99e55591f90c53c11bc92423c8e6617dfaa128c6752983ed9ee60239417bd8d7aa49e5afc5d98d01900171c73","ssdeep":"192:SS6wLr7bqsvzvAjIX5eGW9uTOuYJ/7tqT:t/LOsvzJgGlVStqT","tlshash":"52d17ce5268044bb4cacecb530a9bff7a4757b26209871bca48616fc58d27f081310bb","first_seen":"2025-06-30T12:31:55.376774Z","last_seen":"2026-05-09T07:39:24.427085Z","times_seen":38,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/brands/brand3.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/brands/brand3.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 7686\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBzhYx9klS1iyHy6lwTSguJ5kPttL6foLQB%2BmKMCv1m%2BK8IWyvRPvbn4Bhz5y2jLe4y9AW4LNiYMMWFcJTyXZTMa6MobwrG%2FDcI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72b9fe75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 273 x 38, 8-bit/color RGBA, non-interlaced","md5":"058f0ed46bb4c79b1dd8549c18731077","sha1":"442a0c0160731e8de4dcfb0605108cdf1c63c1c0","sha256":"d09d28a30e6fb3ddd7d8726bb4ff0476dd6dad96ae31b7fff8201a8b75926a43","sha512":"6064bfe447b3ccf81bd361c51ff1052fe26e386b1dc7908a6656bfa8657e6a6ccbc0c0ae54af376b7744ced614f7b444bbe1b7f512c4a1eecdcccc4f0d5f4b25","ssdeep":"192:iSzHGjYhlKc1+LX327vHvNlS87nc5psvabpyl:9zmjYPN+YvNfc5mvabIl","tlshash":"5ff1bf6fbfb386be6ea663a223931c0e1871704964505e74d90c4c0c7237c7a16687af","first_seen":"2025-06-30T12:31:55.410903Z","last_seen":"2026-05-09T07:39:24.439326Z","times_seen":38,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/js/app.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/js/app.min.js HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlP8yyXLpCD4rF4qeuLwB2rb9CANyYNhnJ5mPxA1JihpV67ru2M1Z9HItChBFtSpCJHi2Cuifdy9j0UW%2F5mx3PRC7Lz%2B6jYYsf0%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72ca2d75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":488,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (488), with no line terminators","md5":"632bdd284f17fcd40eb5a0f445472e00","sha1":"7fc40a9cb81f873ee8b6ba04d30161a8d48dbc60","sha256":"87dbae4c0439ab8bf5607748f3dd35b7b138cfdcab2efc94a1bbf6773ed0f131","sha512":"c81b3463d8fface28b4fdc2f198b561ccbd5099935bdfff005cbf6e2ae5df6214e1764abc32be18285747ffd5770bcc05a2a3ae1ff61e5b069d430ea4c066765","ssdeep":"","tlshash":"31f00ecca80191bc03bb40c0226fd1c87c906832e0a1d1d501f7f34804941e512b5e6c","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.196152Z","times_seen":182,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/normalize.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/normalize.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prgMWgaHpZFf%2BIWlAiMoNcgjs%2Bo7kOExu%2FHtBWyzhj1HAprh1iEh6A9gQjvTXe2YEFEzlx4J8X5eNfVPrvjOrRiEWfYOoGrPzRk%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72793475a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1947), with no line terminators","md5":"515193e2d064be1543fd99da0c13a25f","sha1":"101babf3b2d5cd9366d1403a527138311bb10bed","sha256":"56bf1a266b6d0ec11ff9faa9c123022ad85186c48aafdbf84a6aa4ca95579d1e","sha512":"3c686599ba983096ab2ee882d9da6411c138bf27bddca58ae884963899ee827f42626b7c4e5a7790704f822cd2fc7691178248ef9914072d390ee52c6d8862e8","ssdeep":"","tlshash":"c7410eb307402b24a773cc262ada3f5835206433c552b6ead450ecb5c7ca9666dad78e","first_seen":"2023-04-17T13:49:11Z","last_seen":"2026-06-06T09:48:00.082036Z","times_seen":218,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/cryptocurrencies.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/cryptocurrencies.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsDf9PRz01LzkBVztirAuWwrq9HqZd18Lepaj0fpse477Ru%2BLpfRHa4fmve1OktrOQxixRRYnoJ4MpZ1N34%2FY3ljBqMDZKzmafc%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72896075a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3648,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"656645c71870ac61f759b2df1050bd6d","sha1":"ff643d5dbf4dd556204b3c8fa02b2501940b8e8b","sha256":"cb9b990ddcd722d7f52d8062368d7e015e4fafc30ed60f4fc24d1ceb6a21f70d","sha512":"7cb599168b825bb2b975a4f789dd3490b1f12557f4350eb22c9ebf6d93f0d16cc02a4cb4c90ac1cadbc447b5f08ffc6b610fc11f87a9fe420085ceae41104b29","ssdeep":"","tlshash":"517121bf59505206f52b58084bfd0b26627d9423a40ed6e07ec3a44dcec9bc59fb12eb","first_seen":"2025-06-30T12:31:55.415692Z","last_seen":"2026-05-09T07:39:24.410694Z","times_seen":38,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/npm/swiper%409/swiper-bundle.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /npm/swiper%409/swiper-bundle.min.js HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4PqkH6Ywux71jHNePyfvwmE75PLWYeWhTxnV2tNO8zf94gIDrIP9b69sLpoAJSZSjnzGKfyT6%2Fd85dgc8DS0gDC6n035%2FNUkUOE%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72ca2475a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140575,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271), with CRLF line terminators","md5":"e6169ccf7a9d58ed680db82c97f26746","sha1":"4ab349710f1444e3cac40a1c17def4173ebcd9eb","sha256":"81242d1bdd179ae12bcee722a29eebf2f5b7884eb050e5dc1670fb4361c61370","sha512":"f02d5d5aef52ca3787669abed1e0a1cecf41dd73d463d675329772d7dc20bcbaf2f75c25951e678a18afa8658515bfe2ed43e869e8a16d62dc8d57ad127b5210","ssdeep":"1536:DIJQfGP7LP8NEuWGKF+IlzholxU/2Bkt+9SD8jv1nTHlU9ymp8Mj0HEOS5hAsVua:EJCN+TXD2BkQZFU9tp8Mj0k95h5cpnk","tlshash":"fbd3f8896221b57646e316db93e4c221a3b50544b80ac8f470bd4c9f597ec9813feffa","first_seen":"2023-07-20T03:42:03Z","last_seen":"2026-06-04T21:04:51.579976Z","times_seen":600,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/account/accoun2.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/account/accoun2.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/landings/css/account.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 372049\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B4lRtz7OlR6%2FqKw5TwB81BHRmejECdN5iYtCAAwcvaLhcPtpu7x7A5RLkgt5cp51KxC26XiNefFLJZhhDNPhaPVmGw0jkF0aUfA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d74af1c75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372049,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 561 x 529, 8-bit/color RGBA, non-interlaced","md5":"ca4848893610f30672f5c6a05ba98ad8","sha1":"4cc51b135128701b9e6e5ae4ddb0e4a9ac839c5f","sha256":"26d1f0f031f645805533d00cd1dc1843f627f541c8a23efe37ab33918670fa7a","sha512":"0aa3423921d92e7fd45bea866ec9109f420fd8e7cdfc629602b88d70e690bcadfd0be4acb061cacfd0521e3a99f56f803c7a203675dfb56624603195c329f6d2","ssdeep":"6144:gBVtTpwdGN/vKkce6pULNMfYvRiLkspZJz1HE+Mm9SVgE7ZNjQt7SwU:gBCMAm6YbQpZh1Um9SVrQt7PU","tlshash":"478423ee76f24a381260bbe0980296d510376712ce8e5c5de735f8756a2e8d40d8a7f3","first_seen":"2025-06-30T12:31:55.400546Z","last_seen":"2026-05-09T07:39:24.4166Z","times_seen":38,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rr-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:24:12 GMT\r\nexpires: Thu, 11 Feb 2027 23:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218409\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-06-07T01:07:54.218352Z","times_seen":5070,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":96,"dns":1,"connect":20,"send":0,"wait":10,"receive":2,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rr-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:24:12 GMT\r\nexpires: Thu, 11 Feb 2027 23:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218410\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-06-07T01:07:54.218352Z","times_seen":5070,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":149,"dns":1,"connect":20,"send":0,"wait":8,"receive":2,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T12:04:21.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: SAMEORIGIN\r\ncontent-language: en-US\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5eg8y%2FIExc0XJ%2FZ7vB9xM7qxSCBEmVfpH%2BhxpTGOum4lQ8MEasoqrvwgsKEe2HM2%2BglUOED%2BRPL7wsLGkEo7W6PkIbTmQyyzfs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d6ffcaebe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":241188,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2638), with CRLF line terminators","md5":"8ad326bf1c179536651ea0954b2f1a2d","sha1":"b4064aefabcc646437ca8a48b165c71c65e60b17","sha256":"91cddc2a136e6d816fdc4fe2d3e81405275f7555a543cf1a19721d2434b1b46f","sha512":"5e8fb792fdfb654885b381a33ce5346b2332bb37bb387de5e4cf3b5e8708ab2d797aa6161a7437eda688e907efa99c492ffcf7e58a861dacb4552f312d4d597d","ssdeep":"1536:epjnIDCDnDxnD3DNDHDkfDGD7D9ZKMVR8zKEKMVR8zK/7BL+Wx7D+Oa7BL+Wx7DM:p8oy/ZRZS","tlshash":"2d34b4b0a3c8a1e5e15293f8d63959b5fd2728e7aa12c14973ec2e839f7141d8c57c83","first_seen":"2026-02-14T12:04:47.39326Z","last_seen":"2026-02-14T12:04:47.39326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":84,"dns":54,"connect":8,"send":0,"wait":113,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Heebo:wght@300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Heebo:wght@300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 12:04:21 GMT\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27832,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"84a845ffcaa69d6a99ff99a71a782517","sha1":"e8e232d0a8bc6088736bfbf3b448c83a11779b61","sha256":"31a19970c67af915788641d912ed51f8d5e483c80243054d17942c87bd810e42","sha512":"34ad58f2ad8a85ec7107c8cf9ee08c9b430983e7cbe1e1ba756fcc9d275887120397fa3e0783991fb333bb80669d33d42eb7a83742aae72d8eb10656f3a084f5","ssdeep":"192:RyCyzqOyWbqGIwVIyMLyiyjyzqnyWbqGIwV1yMqyRycyzqAyWbqGIwVWyMZy4yFN:luqYFPqYDwqYNxqY3iqY1jqYTkqYt","tlshash":"21c240a1041714009b8728e212cdbf75ff0f9390b1589075a7fe8b97ee8edd592a836d","first_seen":"2025-09-11T16:42:45.120531Z","last_seen":"2026-06-01T08:48:29.192195Z","times_seen":149,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":129,"dns":0,"connect":21,"send":0,"wait":64,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/home/Illustration.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/home/Illustration.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 279011\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PrwLwuDJzQTNpIVJDFQxgtZ3G1YMV0WsA23EmHSDOd15%2BWJUXfSarYlZNZ51ot6L22MgDY%2FKw%2BE3F8Z15n21OV8ZEmStafhWR5k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72999975a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 635 x 525, 8-bit/color RGBA, non-interlaced","md5":"2b3755eef9bd1ef29acead10fc1f9a0d","sha1":"b8528484ee20480f291f75c9a546e8e1f47f262b","sha256":"3c084cfbbb579fbc872d6166a101df16237aad9362c49ba1e9ca347d76c9b0f0","sha512":"57b573c3503e16942afc5d4ea607d99d1285b02ba2bb20c75a451be8058ba698ae6c4ff3467099106f4bcc51d626270f45bbd7a7081a0bee1919e8c405dca4fa","ssdeep":"3072:5UAoBVovGW/u0QFssabjHOvJNBgyXPt7NlJZTc10pLHh86QvYh65nnuh4zRbA8+x:5wJW/ciCzl7Ntg10pLqb75nnuKZ+Hp5x","tlshash":"3254238ec4be432d14860b18c0508d75cf4fafbfab62d41eee5b71c5717685f29a9282","first_seen":"2025-06-30T12:31:55.37177Z","last_seen":"2026-05-09T07:39:24.436761Z","times_seen":38,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/img/cryptoicons/ltc.svg","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/img/cryptoicons/ltc.svg HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2IdFo5BbG6s%2BTh0DuVhb38AklmbF%2B4bQqExA82oARx%2B6iJVkE%2BCPQHDasLuGSn3T6i3GdeYtv4wj6rkWmF8zmRCZ8pzizN8gt8%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d7299a075a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":753,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1357667ba2495b5b9b624e477f83c544","sha1":"841592b39e45a36429a8d5a054c08e5c7c934a6c","sha256":"19a2412000c4b36f27b784a6f0ae5d074945770bcb9d3433aa8e9cf26a4cb39c","sha512":"67f23837d53730f260685d63066c729ba7cc5433133643d58f5d6af5420fdf8622a5a6d77d2e57e429914848a8ec3d906c5dbd35ca78e327afb134e9f920d8f4","ssdeep":"","tlshash":"fc01d05d4780dc7d6591866443b461d16376b047c78149f4dceb267bf6058d05254bac","first_seen":"2023-11-19T01:14:24Z","last_seen":"2026-06-01T08:48:29.190458Z","times_seen":343,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/img/cryptoicons/busd.svg","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/img/cryptoicons/busd.svg HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwLSivPiZuXqro7nAcZjWNk%2BD59Hsl13exisLWf602tEow5BPUvqp7gsicaLf%2FySt%2FiqAdAo2ukzKWTfduDt3BHY1fyxjhm4yBE%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72a9be75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e18c9a55ae92ba734105e2ebdea06679","sha1":"0c5927bbf67033788a0829b817e8ba735da3b026","sha256":"23a5afc32f0a882ae287456596c37ef02183563af26c57619e91c66a90cfef21","sha512":"0aa09904c5489dd182148d429ba9497aacccb895b6c7e7f07b77e3dfcbc2af8bb3a02f7f5a3ddbaaa7eeff9b5659193fe3724b0003c20e78ab0e7b7b00529d16","ssdeep":"","tlshash":"6d119e24d204aceff50dcf4483f0aad12e626ca382544c7cdef81a79d755c570c5529d","first_seen":"2023-11-15T03:06:45Z","last_seen":"2026-06-01T08:48:29.183024Z","times_seen":347,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/js/jquery-3.4.1.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IcYTvgh5t%2BwfoEHEWsFYMBdpAJZw4PuP3jBX40PPFyZvsEMjlGocOomM9Jl2Gq%2BrGItUzrU7tHGZZKh4NJ7ivZa6fzUdJthSsPY%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72ba0f75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88147,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"a6b6350ee94a3ea74595c065cbf58af0","sha1":"b15f7cfa79519756dff1ad22553fd0ed09024343","sha256":"412b8ff9c5ab32b9019fcd84bcd4a54c0e265a14528474f4ee45b27a20abeaeb","sha512":"f5a9c6aee347c155e4dd796c51716b7447bc22ae44741fceb6bcfee02f955ad4063d38613f241108a3e1f3e1f540fcaed8d9848b9a0fb823c00955cf9a19efad","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmt:jgZm0H5HO5+gCKWZyPmHQ47GKR","tlshash":"a08319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-07T01:13:10.263952Z","times_seen":5115,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/media/logos/favicon.ico","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:22.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/media/logos/favicon.ico HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:22 GMT\r\ncontent-type: image/x-icon\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7LRH6XBYbByHsDzoOlqwoa%2FPOMrZg1%2BRWvBEZXwFXVyyKmC4MsJJG8Xd53T7Ny%2FNir0sEeUA2zv6ajHc%2BaXZiCC6rW1YZNjTnw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d76bcab75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23166,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 73x76, 32 bits/pixel","md5":"655a3d9e8b041168af5ed594bc53a045","sha1":"2a10a2b34eda84cfe1b3fb5c7976f6784c0b9c73","sha256":"3460d9a4ed4ae53b60ded9680af38db6d2d4b7c32a20fa0392bf3ebbacc984c6","sha512":"fdd0f1528cdbe5e92a0760fbc2f68a9101aabc64553c96aaadfdac16f68bb8d6d4463558feeae6339dd38caa36a5a4036757c99f6a2c1c15769e1e0e3aa34806","ssdeep":"24:MFbl+VURCShly4JX+anJMVfRC+AQCaMaJaOaWasaNaogAkFzGyGI9NqSjis7AYfe:G8VUISMC2VohQGgLzeIHiPYg39Nllkg3","tlshash":"9da26a6a3f24f255ec2986741ebaedf43d387c13798053e276807fcea2753026a13a55","first_seen":"2025-06-30T12:31:55.402347Z","last_seen":"2026-05-09T07:39:24.424563Z","times_seen":38,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/header.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/header.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyGxznZ21UPPXP3usqmp6%2BCos2ZeGI%2BdZGt4ILl3sTlWVnnnCmgEQH0UXLKskngA%2F%2BvNSu%2FDb4vyQpi4jQrCdkNgllAphfEzsFI%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72794c75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de6df89dfd36d366a98f4b3b0d59b7e4","sha1":"60a00e628bc51f848bdb1a6e363f82bc6120f5df","sha256":"0011b229841a5a96ce78e71373096c56f74a7e4db3f2fb1589cf64d68d89dfb1","sha512":"85564f3463b21ed208f521593b25f29c0e4c178c288c9f419700e460826d5d2ed2c85f38caac2ef321f7b177923b48cdd9d8d3fa7a3329a1a605798e75af2880","ssdeep":"96:P1SClCfSa/YhpKHBCyCEEqnCEXMFGUHN1A1V1sKr+PoX57+CftY48XyEi0XyY:DYNH0R1hFGUHN2LeKr+PoX579qPXy0Xt","tlshash":"22b1cc5a5b121524b817985ad7a01f1273b9e007510ff9f63bc3941ecfc768adbe22ca","first_seen":"2025-06-30T12:31:55.386634Z","last_seen":"2026-05-09T07:39:24.408234Z","times_seen":38,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/company.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/company.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRDDdK9qYBbgOkn5iIdA1V%2BNy%2B2ZGKib%2BVot8Kj2ZV7zLSlZJsjOnlDM9qgexUSn7wsXN%2FbIEZJCUxzuRkJzvlr%2BbBk4ng17uGw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72896b75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"83a1605a720901443ccfa26826b762c9","sha1":"24e9465c6027c39aeecc1bd005b24df9007987ac","sha256":"4a9681fdd8660988ed0a53c7982cc2dd9e50cfb1a890a2ff0ea433d0e5ba4a78","sha512":"305523080dec988b93723574e8e30733e463d4a9670f5b77e52dafab4eca650e86737c2445d9ed5ab76f8cad1d7eb965e91d4574da63f004a7a1139347e7ad62","ssdeep":"","tlshash":"8d21a4d70531310cb937e86447e61765a2789027d80af9ddb9c274cd4fc9acc94f3649","first_seen":"2025-06-30T12:31:55.388424Z","last_seen":"2026-05-09T07:39:24.406324Z","times_seen":38,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/home.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/home.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eHWPHzVdjgtAelI3AopJs04Sm8sSMdWZDndqvrPIfo0Y8nilzK2WxQ8XE8QVaONS%2BH3JAlBXNJueF187RlUl7UpLfLAxyabvqQg%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72998375a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0390396d19413a826f3a2953bfa85047","sha1":"677ba28044070e499b6e6d667c48921bb6f486a3","sha256":"e9ae569203cd1dca93689b27eb7acc120d17b49cd8a7743a3b162710159c5efa","sha512":"680b605f4542c70aac31fe66b7280cf922c3556093e63a6f2e3ad87821a1b3a623e863f974506691a093115e37fd7e9f6641996315c0dd7b8ae3fa60a6a8ec4f","ssdeep":"96:jCN/A5/MvtKXBTsYe92FdJVnzPE3FvX3gFvX3pX3NCzXyESawfhsrUJMlSbYllJ:+lU2sXtpFTVnwFvgFvptCzXyLawfhsrB","tlshash":"7ab121976bb2260c795b9168b7da0764773cc003511eedf9bad1194cdfc01e0b7a278a","first_seen":"2025-06-30T12:31:55.369955Z","last_seen":"2026-05-09T07:39:24.425124Z","times_seen":38,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/img/cryptoicons/doge.svg","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/img/cryptoicons/doge.svg HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsUnTeYROLK5XhkQ2Eu8D7Z3vLco6T%2F5Ly5v37tl0JSUf5nOYAcuUqOV1WAIy7brixjAltVO3I7IKZiL3MUaFkBFmFvtJbXla84%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72a9c875a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48154,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67d2dfdb52eef2b80841495b78f1018f","sha1":"e6936e824ce5c278de5f8d7b501089499dabb680","sha256":"b6cb5aced522b0baafd4f2e9f965ec537a4d6af3e6abbbde71adaa3f502cf2ad","sha512":"5b6edd3c5cebbcd506cc31e647dfc89ad60072ab02213c7ae2a64a8bfa3401c8494068bd58ab44d98c0626567c80db60be19cb8c98bb8367a689af6f7084095c","ssdeep":"768:hf0GUz54Ieqz06WiyE7ujsxZHiU4BwGB6SoBj5I2Pns2v+TihJ:+pD1WirujsxZfeMIqqiL","tlshash":"3d23cc3dc358e3399c9387bcab2aa0e6f4ce55afc1e0d3985169c4b073911d8a38d9d5","first_seen":"2023-05-24T12:00:49Z","last_seen":"2026-06-06T10:50:44.828272Z","times_seen":406,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/img/cryptoicons/bch.svg","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/img/cryptoicons/bch.svg HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2FZC23YYoOA4LKU7qFDIOukcuTrd3cOtJYnM0%2FOStggFBcZlzqp5WZjudgcGYiqWgykV75Ub9mC1tb5wS4wegWTuoZkaOjQB6uM%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72a9ca75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c09d291a67357599252f1208c0842ee9","sha1":"d1c95e8b248838d153735628c110951d18aa057b","sha256":"0af9263278022b11dd522c2ec26c5dc4e07e35f0b421fac7278951f0066795aa","sha512":"53d756eee3c4cb922a701fc0e427708d4d1b25a440bd5a2ac02e454288cd4a25ed575f42db132687b408525e155776df42b3acad643de2ef2761a64d89450ae3","ssdeep":"","tlshash":"10213f0881d5a87efc50e11953a0158633b4ac6fd430aa90f8eba85ec24c8d0128dfaf","first_seen":"2023-07-23T06:53:23Z","last_seen":"2026-06-04T20:50:37.157611Z","times_seen":815,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/home/financial_freedom.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/home/financial_freedom.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 449073\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKYFRj%2FzhGZ2q1VqsYeCCw%2Fg8sC2lFL2cJ0j%2ByRP7fxANVT9vDg%2FU8S8H38IDlD273GPOht6QF7waNR9nQ5etexPz7AqPW6fOCg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72a9cf75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":449073,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 596 x 636, 8-bit/color RGBA, non-interlaced","md5":"04451de21f648a95bf2eb1dbe2f91f89","sha1":"69478a540544a6f6cc5256c2afca6655baafaebc","sha256":"cefb2b893e63a2c2bcf04f9912050e8a6ccd0d003b6c69b73d23798ace290524","sha512":"17d08796cbaec23971c64317f896d6582bb624a38f7078dbf62524aa43bf7ec7237fa9f3d68c30a9a0abe5158c73eef66aa291bc9d81f8b4ddebb5797a2ffbcf","ssdeep":"12288:33dwLlETQIVFT5osr7WQo0U7gCa5iLEWW:3NwL+QICsWrgCMiLpW","tlshash":"5ba4233e358f7493f2aff86ba79fd3c21a8ecdab4147bd0651e5452ea65cac08401706","first_seen":"2025-06-30T12:31:55.398779Z","last_seen":"2026-05-09T07:39:24.415505Z","times_seen":38,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/trade/tr3.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/trade/tr3.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 39723\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwXeR7xQ%2Fjw7EKaA6utNdYsnult%2Fy%2BLlZPCXlk6MbXOHk0hJLyLvyepNIgOlN%2B2fF0VMlmG2%2Fhr1HJ0By%2B2egLNIc%2BacXTDUCk4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72b9df75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39723,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 161, 8-bit/color RGBA, non-interlaced","md5":"bb337519443573106a2e59b04965315f","sha1":"767248549e0567c29c549d0c8a1bf399d77529b0","sha256":"fed83eff2d1232f6be9ed8bc79b320ed8d6b98789efd0918d8f1de5c4100e895","sha512":"2b953d8767e910101817889392645ca807aec91403b30172b4a5a385e659dc0f7a8a07c7487fb20f29c0cb61e7752dbcab008f99f994d34f9dcf721171585df3","ssdeep":"768:tIDdPnjxgFfJoZ+vT6TOlbjB4qaucn81FB9qYBHs5XtIsmUxYK1:tydP9co7Olbjmq1cn8DqYp118R","tlshash":"9503e11fdaf66f99b8879837c52fae9efe0c0b878991f0456424e5016d26df001c7e0a","first_seen":"2025-06-30T12:31:55.4078Z","last_seen":"2026-05-09T07:39:24.410159Z","times_seen":38,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/account/accoun1.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/account/accoun1.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/landings/css/account.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 279776\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WN2MnWcBCui3zgRRu9o9yeo3znV1W3aslwVuS%2FUspE2V2%2FQm9kr5Uak0Wt%2FghuSPNh8vhJLqK6iEjFnV6jT8xIrLboeiGF07vlM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d74af1675a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 575 x 537, 8-bit/color RGBA, non-interlaced","md5":"b280443f9861021283e9e1bc37a8fe69","sha1":"0f227b97d3a8bb6330c40d936b45571706ae1254","sha256":"d7b3c89df16ab198223750f340bbfec57bf80a23a82e3ac0d2d492b253935737","sha512":"792ab11a4375ff16ad722af3e4b6efe03e10bc3b6a94a1df05706455a069d9ac13704ae727f9989c6de585ee0cb6ff5ce635feb89920aa7544104ab395a19245","ssdeep":"6144:bYMmB+cdQ04Qf0aNzWZb3YYrKRzrM/BivP:bYMmOBhLYp+ivP","tlshash":"ba5423a244fbcc311ae44898360099ff08a199519caf7354ebfb49c5ca411db463bafb","first_seen":"2025-06-30T12:31:55.420515Z","last_seen":"2026-05-09T07:39:24.404216Z","times_seen":38,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/trade.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/trade.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H5wT8gTD%2BdiZPnOBZFhoHr4%2F8ZMCBk048deTl8Wcm4aTwrJmWraDMJpXp1vV3npb6BE5bju%2F%2FKdJlw%2BxAKk%2B3pcrBmbe%2F%2FurvcY%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72997c75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e385c0229e0866945800a8e50b70a611","sha1":"dd11d3c2038290fc6d1e9d142dfa43c79895eb63","sha256":"812ced114ca94fdafad8cc2a604ae8390d7004b1c419a7c794ee945779482382","sha512":"56c45648f2c1715d6a2669a9fd664054b4827427db4cf7846ef9fd89a1ebb049b8fc83d72358222f0be986473a465b7963dd8eab8e9c3cce4257560928ff69a6","ssdeep":"","tlshash":"8461cca35970b7047497a44cbaa51b4073aca003e14ffaf46bc2250cdfc8ad1c67369e","first_seen":"2025-06-30T12:31:55.412121Z","last_seen":"2026-05-09T07:39:24.405076Z","times_seen":38,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/img/cryptoicons/eth.svg","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/img/cryptoicons/eth.svg HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0MMJK3%2B3PrmK2sYC8r%2FrES%2BWOoMfaasfiTxAQTXexHR5Qc74bp16ek41jU9iT0DeRzLCI3pEE%2FjUbSE067tCWfbWP1jmSDjkrQ%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72999d75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":956,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"122a686a52bc4e03895a7edac4ec209b","sha1":"6c415cb1ad3d376f03abeaff5d7dc89de7bc8bba","sha256":"68ca594162c73854fa960caf63f068a26562f6f7efb873825caaf4fafdfad1fb","sha512":"4f7136ee8e07c6dc13132a25d51a3cdc7ee6e6c3be8fc3d1318388bcb727deff12a5e61947a9ccb483e8561ad684551d0f1e13244ef29f29a3be9a73429505c3","ssdeep":"","tlshash":"0c11b129155a657b79218384237a82d333b250ebdf401af884f12d7fe206c1946cd7e8","first_seen":"2024-08-20T12:48:50.787004Z","last_seen":"2026-05-09T07:39:24.437568Z","times_seen":119,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/js/news.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/js/news.min.js HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtx8D4EHBrjtsq%2Fvk6q%2Bb5YltF2AFL5rxYz1uQMivQl%2FswJLAJm0Z92QAFLSp3%2FXImZa9XgXbSJCW1ehSYAbRhWlN62CCOmiTzQ%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72da3c75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"1c640d083b2dc81a6f9fbde817552e97","sha1":"ab789ac8a70af52dbeaf56b606d6914295a71eac","sha256":"3501416396bd8a484e2b3ddbec46e6cc515d68ac7a42bbc733d52bfa2a4e2329","sha512":"94c0d460ba6b4bff1419953fd2a6b828d39deb51363d774e632bd7ebe200d60efab1e8a91b5b503fc72f9f496509d90eaee206d736441e0b18f51baf1c311fc8","ssdeep":"","tlshash":"15c0805d1075718403a2cafe5474ca42c573013797d7493fcaf404f984ee5580afbb98","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.191352Z","times_seen":150,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/js/cryptocurrencies.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/js/cryptocurrencies.min.js HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pzd3hmF8PH61JwhpoXErn5k603sv8OThjDxxIofoyrbIkCBfOmgLnXb03tjhWM6wFKWv7lNM50gjM2AqXIn7325IXMXf2kxwVS4%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72da4175a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":749,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (749), with no line terminators","md5":"37257948808f476a1ff0737b2a22c9fe","sha1":"736ae1b7c5597458834c9704571b99bd45aa6231","sha256":"f6af42497aae5f14a17aa2d68c0ae2d551332e96f2efb23a428cdecff879c2b3","sha512":"3f5dcd87cf322f465879172c431b73e02eff51eec9eb4ed39ea29364fe8953577ddd8119434456b873ffa81e2d73c5376621d6b53a37e4ac0f98c9342d5cf440","ssdeep":"","tlshash":"7801b56b394e343555ce21bf42769a8c20aa013c754266e13e2a898c6071ca2f4aa9ec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.138643Z","times_seen":246,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rr-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:24:12 GMT\r\nexpires: Thu, 11 Feb 2027 23:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218409\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-06-07T01:07:54.218352Z","times_seen":5070,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":62,"dns":5,"connect":7,"send":0,"wait":10,"receive":10,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/npm/swiper%409/swiper-bundle.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /npm/swiper%409/swiper-bundle.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ziiVV4TnNfF6%2B1hbVF8Uz85nWDJeqTPbJMwSK6xAogFwDQ%2FwNOWj0EXH4UiwsspF7XRy2g6BrzYA1FjM57cNPGd6J%2F9OPksrBv8%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72691b75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18077,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17812), with CRLF line terminators","md5":"8aa3f98e02499b9046bd9d4ed02c6fca","sha1":"08d56a14d5a20887413a32d360cf16b491d1a4c4","sha256":"910c8b82fbdf93e2bbf25cec82c501e8f0f7bd0403b08789db126479d3f96538","sha512":"171d50dccad4330ca115c5b78a6d1e878f0102297489169d8a4d97d94cede5bf99ac0ca4b68bdf89253b2c9b0be7a894b2af239b3601523b685a1f1250f0cf75","ssdeep":"192:rGkmUJbiKne0JlXZHZ+Sme+jexS4nxep/a2GZb0Q5nfufKlAYfg5fyeesedOJ9Aa:ryUbe0JdZHZ+W+SFnZ24tlWfF4XYz","tlshash":"a08244a86340282753274f364b71cbb9dd7444d20f9389ae91c0ee48d7f6db9136f2a9","first_seen":"2023-10-27T07:31:00Z","last_seen":"2026-06-02T08:09:34.247791Z","times_seen":508,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/account.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/account.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYD8rbat0LsncymepTzBE%2FZuVhvx1CoPANxwsmanoLr338L15lxZtdItidag1NFebaA8TXkWJOuaE%2F%2F4UUW1g7uO20nO8HKrSno%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72896e75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1851,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e87d1bc18b937963bec54e954fbbc677","sha1":"46306c939e83fb22903cd56cae5cc6f638fed61d","sha256":"6fc57e8b497af00c9248872817f97932896df90d7ddc2f5ede4d67106ae463ce","sha512":"73c4967d6d7f71f4238f46d41e71f61ff6fbda24cbddd25123bc8dc5c4a18c450c12d4c7e3443893bdfc2b5f237a059f6ac13d7e0b413dc9ec9c1983933ac015","ssdeep":"","tlshash":"aa31df9696a42d8c3927e0ecb4722759937c4002d20eed7c7af531ec7fc62e18133a95","first_seen":"2025-06-30T12:31:55.396339Z","last_seen":"2026-05-09T07:39:24.407193Z","times_seen":38,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/img/cryptoicons/bnb.svg","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/img/cryptoicons/bnb.svg HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEp9bd6NFk2eMW9SEp%2F0EuOUXSAC4SC6x1iMZMh4akxBU7JxHJ3NfTFT6DshANnb5fQwq1qEFBK2PFxl3iwZ63JsdtEANk0tqYo%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72a9a675a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"faad1f8773e47415f372e48416f460e9","sha1":"9e1e10f8554a43fe3e9e870b7409636370af597b","sha256":"1e3f4850b5e106283bab874805118c2bc246923e52ac418009c0af133f5af545","sha512":"55966d0ca64f991e97ed14bcaced6a7ee4b7667e4cb33f308c7c92794e5116ab2a86be72528f880a111e593e6c01cc56b00e40cf786768de954a1184b7647154","ssdeep":"","tlshash":"863101ac41b6cc3de23583f409b052d816e6ac77f100347cb4e59b52bd24ad72a85ede","first_seen":"2023-11-19T01:14:24Z","last_seen":"2026-06-01T08:48:29.194541Z","times_seen":342,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/trade/lo2.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/trade/lo2.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 27339\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxvgdlx%2BAbhg8pEmviG%2BcNNtyu33zpor%2F3E%2B0P6lyywXkBwe2Mxq4VhRl9vlAXs8conYc9JnQVM8s9i05%2FD6lnQDue%2BvBdnznjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72a9d675a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 161, 8-bit/color RGBA, non-interlaced","md5":"dae3d7afdfbf1cc9b45685e2aa044ebf","sha1":"fd1f259aaf4cc899f11e32849b4f74e89d6461eb","sha256":"909213988ed470bf4d1c02439c460e94cc25b44cacc2ebf2eec52b8085f2f55e","sha512":"85bb833daa4d6a919cec852a866ee3da1490b8ad530c9aa6a7ea0e2f25e7c1376f51db5d0d72f809248b8598d81bffdd468cf58b8d4e6516ffa74a1c18dddd1c","ssdeep":"768:+6jhKKmkQyVe3xQVP2OpqYet5Bx/jDMGab48qdo2R:pxmYuEfGzxsGaNgR","tlshash":"f7c2e13d29f70dab06ef9328395579cb561a390aaa548b1d1e207475cea0ef91e8840f","first_seen":"2025-06-30T12:31:55.365076Z","last_seen":"2026-05-09T07:39:24.4014Z","times_seen":38,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/js/header.min.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/js/header.min.js HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acZbhIiiiPCJiJIffcQJSAbOSyh%2FmERNm%2FSzs7lzJ7gf6KFH77njyHej3FZA44O06ZnCxOXy5B8YEMl88GG8RhNhYOBOd4dKGXk%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72da3e75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (563), with no line terminators","md5":"63f1eb758c539563a116fd6205f2cbf3","sha1":"fbaf0ea4381ca7def60922205a42f6372afe0fcf","sha256":"4cf4cf24c46ef18a23275d60700a827e4106aa462659f46da1afc3807e8e33ff","sha512":"d138c6538254710cf342359349a96f1fe0669e444bc94f8bc3faede81c88c0c9240f7426c153788610d47c1ec99b98ede8956d3a163a5cb95f1aef9d9ce26cfe","ssdeep":"","tlshash":"41f0c269470c657a01a20ddbe7e1cee06e1058d7d440247215a5cd8f4be9ce2d2a03f2","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-01T08:48:29.196831Z","times_seen":184,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rr-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:24:12 GMT\r\nexpires: Thu, 11 Feb 2027 23:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218409\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-06-07T01:07:54.218352Z","times_seen":5070,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":75,"dns":1,"connect":20,"send":0,"wait":8,"receive":4,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/brands.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/brands.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTCmtBtTLmhhMEOG6tbL9YiJAAkRM12dp95VmxKhP2KmfUFgTzRFlevLQXBisSleezV%2FQj4EW0cWIYxta93l8oQIlEQESeiwygw%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72999775a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"97b4490508a54f6d89ff62e36a8d62b9","sha1":"869b89773768d22da323beab32eaedfe265195d8","sha256":"54eed0534fabee0a379e97f86c7fbff1e03eb086721a02eb4d01d58b8c285f87","sha512":"a68704f4eb36241cd8504f468a270334b7f1199b00a9dbed25edeebefeb85d549f8794036fb0e82b6da5abbeb57ddc1c2caec927e54fd54b4a3f65225423fe38","ssdeep":"","tlshash":"81c09b970064296d9e56f4642ce405d1f0cd9497d34eadc921f5018c1cdd69ea1f7fe0","first_seen":"2025-06-30T12:31:55.403884Z","last_seen":"2026-05-09T07:39:24.399716Z","times_seen":38,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/img/cryptoicons/usdt.svg","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/img/cryptoicons/usdt.svg HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NvOVeiNzrgGfKOFfIggn5U5PdgqnSpjXnil5lg0mxWl4EIMu700SiLoRmMOUv5DOxqXZMIpSSJw%2F2kARgjuIcHm92hUrYOeISws%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72a9ac75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":704,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eac1f7bb15967c89034b440b095ad74c","sha1":"5da1c6617fab973a2501cf6c01e083bf45aa29fb","sha256":"e0636ccbdd55d437a62c09b1355f2f018614418dc9b28d223bb2820fcfd88765","sha512":"d1aa4e69ae573e30c08d4337a91e4602eadadc28f3ef2b08e0776c156329a0eb3dcc7abe9384c4718b5c12a9d0c32c6b3455178d724b36ece1b716f0cb3130c4","ssdeep":"","tlshash":"1d019c794145c95cf51085a9db99310425b871fad2f258b8f9da12127c41cf60834fb6","first_seen":"2023-06-29T23:08:25Z","last_seen":"2026-06-04T03:38:38.31529Z","times_seen":400,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/img/brands/brand4.png","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/img/brands/brand4.png HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 10517\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8CuIKFShDYBoCEGWvjCM3YSuoRkIZci%2BWsibifcT0v0W4x8XkiDrFRWNSNTbBEnxO%2FfZ7L67DmfQY9%2Bu3Sl5fhrnG3Qq0YCqFQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72ba0975a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 406 x 40, 8-bit/color RGBA, non-interlaced","md5":"c8fcbcac62f1a4ff8aafd52a155ac82a","sha1":"5ee10030f924e4d06e611fdc4bfd88e5cad4b061","sha256":"1ebde94e73bce4362620979b9a0ae941171d39fc7043285e18e8289f1a9fda2d","sha512":"2bf9c72a63ba972f7bbcb72f7441f6ab47d8c7f5f19d149e70ff1f8054be133098b1c4eed6198a96efad4232d030e921b2a949f010c0d1e67e1c60428734b600","ssdeep":"192:hSRp//61pin9NsLhL7ATKfarfCjMnMZmo70+txjfcWUCl8EUTDFxuHYj:IvtvsLhvUr2T7nUCUTh/","tlshash":"3222be18bc3816ea4d77e18ce031ff848c944a24726653916bd86deef63b4e2c65c1a1","first_seen":"2025-06-30T12:31:55.368106Z","last_seen":"2026-05-09T07:39:24.424025Z","times_seen":38,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/js/toastr.js","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/javascript\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tBPuonb1U1DzJDWRKrp2UcCHvvXO1vj7OJC9WT3eFCsRc5mb1Fpo%2Fzpnx%2FO8DsC%2F3970lmSYTH5BQu7kn065eViskmOQV2RkjSM%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72ca1d75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24855,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-06-05T15:12:51.710408Z","times_seen":914,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/heebo/v28/NGS6v5_NC0k9P9H2TbE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rr-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 23:24:12 GMT\r\nexpires: Thu, 11 Feb 2027 23:24:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 218409\r\nlast-modified: Tue, 09 Sep 2025 18:57:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30116, version 1.0","md5":"480b1d24f2aa69252a57d434d50a5288","sha1":"6128ad01170e7ace7e1cfa1d7c3d3dbc93242d61","sha256":"50dae2e12dae22c920388023e35aaebcd1e1d27bbe915c83d64210377e083e60","sha512":"db3d713d158f992aaab42936324d64b3edae8d5afded25bf1f2ad4e9380466a5a3d2f061f0a60293a20070b357f693ac0a3b2ee8f159cbc04aa33145db1003c7","ssdeep":"768:dtra3jdzHzeBerSkbONWaWIomeJQ9A2x9qvg2J:72j1qw58W+eOe2x9+g2J","tlshash":"b0d2f1234292dcaae76490b0d8385253409de8e4265b9b49b434cd2ebf7547103ebffb","first_seen":"2025-09-10T17:46:19.009186Z","last_seen":"2026-06-07T01:07:54.218352Z","times_seen":5070,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":77,"dns":2,"connect":22,"send":0,"wait":9,"receive":4,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/assets/img/cryptoicons/usdc.svg","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /assets/img/cryptoicons/usdc.svg HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: image/svg+xml\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PilZQOQIyi30armgdPxwMLxz0SJxgR1cRXNh%2Fc24AwrDH5whE1YPzGMD2iwOcAm7wc9wb4dfLLGP%2FkxF%2F4HSHH8txVuHzytHMkc%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72a9b675a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94ec50bf272c2ca70d2741d9794652b9","sha1":"984e715c5968afbe271b777a11cbbf1434933215","sha256":"a59ffcad23c4de45b0389620bf9bf14811e606e22bbf2f674b00baaabeed6500","sha512":"c922eef8d1002995de7e76e08adbd7245c23bf2eb411ae7df1776423503b442a9838cd471eeb00753ad79b80742eaf65d7fd8f3232682f2956a58c6846ee3b79","ssdeep":"","tlshash":"483110068204dabdfed6062cb27038c476f1a99ff271d0e8aa6f1057d08cde0759c6e9","first_seen":"2023-11-19T01:14:23Z","last_seen":"2026-06-01T08:48:29.133806Z","times_seen":318,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rr-inv.com/landings/css/global.min.css","fqdn":"rr-inv.com","domain":"rr-inv.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rr-inv.com/","date":"2026-02-14T12:04:21.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rr-inv.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:31:49 GMT","end":"Wed, 01 Apr 2026 00:30:30 GMT"},"fingerprint":{"sha1":"3B:87:46:B8:95:3F:FA:BE:43:95:92:1C:59:72:14:DB:79:88:52:04","sha256":"A9:AE:F5:49:9C:B1:67:D8:FF:74:3B:D9:BC:AB:9C:F3:4C:F8:99:D0:2E:4E:40:45:40:AC:A2:E7:01:38:64:70"}}},"request":{"raw":"GET /landings/css/global.min.css HTTP/1.1\r\nHost: rr-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rr-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:04:21 GMT\r\ncontent-type: text/css\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Sat, 19 Jul 2025 09:43:12 GMT\r\ncache-control: max-age=14400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G3ff9uaNTcR802jtuIWNkQHu5Uliy2y1ZEctE4G7hdJ8R7MZXdCbw2Ufq%2BD%2BqZFQu2B44HCnIebMx2kJS5V9ywDNTQnNYrwPr%2Bc%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc6d72793a75a1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1403,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"50533e1a0401a2a2921900752c2190fa","sha1":"9baaf23f887068b3558a49f998f1fc2a03bab16e","sha256":"3e6ef13bcb06dce69ad13735ef58fef9609c4e91b988eef1e06b6dabc5b9f684","sha512":"71360bbf973ffc1b09f796ae56a2ed6bf9dca117411c86558e5e10a00926a541d7f94fc3f9c48bf1b2f753573b3d91731602017b70bec56688d58b7790c4fb21","ssdeep":"","tlshash":"3121b9b7aaf00a55616b8918a389c79833990533460ccefcfef469b8db8178501e03ad","first_seen":"2025-06-30T12:31:55.384853Z","last_seen":"2026-05-09T07:39:24.426553Z","times_seen":38,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rr-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}