{"report_id":"68a049ae-604f-4e04-8749-158cf9936a44","version":6,"status":"done","tags":[],"date":"2026-03-23T14:50:16Z","url":{"schema":"http","addr":"river-s4.icu","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"104.21.30.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"river-s4.icu/","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"title":"River","dom":{"size":66396,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34894)","md5":"189bf358723f49a33dca3ad96f5cb5a7","sha1":"774d338feb8206cd21a84e96d4ec0f4f52f2695c","sha256":"2550250a2b932cd88b9af90c2f18319c3ec6c60f97d8138cbe686a6e7cd1fc5d","sha512":"96bbfa54fd201bd47327e951bedd02e49348080a1b3e7b66793ddd89c4d7d11e9f3499790d5ba3e72b0e1b2cda1e0d21ef2736312c544c33c4098ce0257225fe","ssdeep":"1536:8/k7LKwJoS8U5RX5u26mzDdnYOkLKwM3YTb:boSLu26mzRnYO8","tlshash":"8d53f8f2e6d4557640074fe4f23ab77971a790becf07cd8846f85ba09b42dca8c65888","dom_hash":"domhash0fa726c11dcdea07567ee4865c8d3ed8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"river-s4.icu","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"104.21.30.134","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T14:50:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-23T14:49:53Z","timestamp":1774277393,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":48870,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-23T14:49:53.455922+0000\",\"flow_id\":1148172853419923,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":48870,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"river-s4.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-03-23T14:49:53.434067+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-23T14:49:54Z","timestamp":1774277394,"ip_dst":{"addr":"8.8.4.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":33896,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)","source":"{\"timestamp\":\"2026-03-23T14:49:54.057066+0000\",\"flow_id\":1705041133159494,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":33896,\"dest_ip\":\"8.8.4.4\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047866,\"rev\":4,\"signature\":\"ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"8.8.4.4\",\"port\":443},\"target\":{\"ip\":\"172.18.0.24\",\"port\":33896},\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_07\"],\"deployment\":[\"Perimeter\"],\"former_sid\":[\"2851058\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_10_05\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"DoH\"],\"updated_at\":[\"2023_10_05\"]}},\"tls\":{\"sni\":\"dns.google\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":4654,\"start\":\"2026-03-23T14:49:53.967750+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"api-v2.satoshiprotocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"river-s4.icu","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-20","domain_rank":0,"first_seen":"2026-03-23T14:50:21.032766Z","last_seen":"2026-03-23T14:50:21.032766Z","alert_count":0,"request_count":26,"received_data":7579523,"sent_data":11968,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"link-verify-7033.vercel.app","ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":6,"received_data":2157559,"sent_data":3152,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dns.google","ip":{"addr":"8.8.4.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2018-04-16","domain_rank":158,"first_seen":"2018-10-26T18:11:46Z","last_seen":"2026-03-19T11:31:28.581043Z","alert_count":0,"request_count":1,"received_data":804,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api-v2.satoshiprotocol.org","ip":{"addr":"216.24.57.7","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"domain_registered":"2024-02-21","domain_rank":0,"first_seen":"2025-09-08T14:11:18.877837Z","last_seen":"2026-01-02T15:45:24.204084Z","alert_count":1,"request_count":1,"received_data":2664,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Render","description":"Render is a cloud computing platform that provides a wide range of services, including web hosting, cloud computing, and application development. Render offers several hosting options, including static site hosting, web application hosting, and managed databases.","website":"https://render.com","common_platform_enumeration":"","icon":"Render.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/js/webflow.0571e525.bbbe942d7acad6e7.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5f8ae6e4fca6e0b7c71a350ec401b11","sha1":"37fddae160e949f6203ab1bacaac65e6f1eea9e8","sha256":"42eebe5060715311cf576b0297a272fc341d9ac2586d29db7d81b4ec3db60590","sha512":"055b91d7fdcafbd59ddd4bd448d0a46b9e07902adc84e176414d273e3913c846931dfceb7008ef9b5a36a858093f20141a6d295c2c957a093be94c6491030380","ssdeep":"1536:QpNkcNMzUY8Q/7x92WJ/veWUyKQy5fQXlj84zxAffr1TetnF6RhbyJxS4iIEUYRj:vL19RUwYyq","tlshash":"98e32b493af37030421bf07d862fd805b238868b0a5dbd187e5c96a46f1846e97f6bdd","size":151862,"data":"","first_seen":"2026-03-23T14:50:27.310334Z","last_seen":"2026-03-23T15:24:17.581708Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"855c9c216e0d546ff91c2cc95ccd0d26","sha1":"81a826d1f1769300094717799811d8e7ba85f063","sha256":"023178c1f9a08b3559d50ab4f37c18925319741f7d33d93349112ac64820c3af","sha512":"a0a0ac4be7b424a690150d97113af52ded0c351d2f0be71e396d13b7312e491160e563ac5d70a4abd58cd03c80158efe7b03d7dbfba471a51fcf0936e0b49bb0","ssdeep":"3072:FBjrbW9qW2aT4bln/U7ilm+5yOYEOnXfU:FBfOqW2aT4bln/U7iY+5y/nXc","tlshash":"5ac3508976e721319227f0be8e6fcc09b174544f168dde057d4c82a59f148389bbafac","size":126280,"data":"","first_seen":"2025-11-21T23:26:19.639598Z","last_seen":"2026-05-16T21:36:28.448534Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gsap/3.14.2/InertiaPlugin.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"24bca80a4541b3d3036ab9390d323db6","sha1":"c8f2d9752e0ac149d4e88e68e66d1582e535ee7c","sha256":"c79246409c43f2248ab46b2b77f43afddd7f453bf109a53d1525d04fe16c12f4","sha512":"894614ab05dceb3e17560007a1716c86e105ff6663f284e307db8c5b55d2709159f9196fe9bf99c6940486f3d870b0a58535de19d6c1d3f1003ac59c66111864","ssdeep":"192:k9/rUkL83pUKlklyDpLXtyJNMJhg22+xjozaRZwhRm31bSWbWXF0FUrNdS/wXRGa:KBLEeCbNp7CLR","tlshash":"6322325837e2b236a113f0398e1fdc1573a9a88f03d9c98b798c51f04f1447a47b9e99","size":9982,"data":"","first_seen":"2026-03-23T14:50:27.321513Z","last_seen":"2026-03-23T15:24:17.583072Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/script.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bfbfcb61638d4a1d7ccfeb5bcce3d70","sha1":"a3a77565963f698f21408d190fafab41eadc4882","sha256":"bf785fcd9d492bf9bcb667e11b536a08bc0f9ab608532e65f46d15dd204d6921","sha512":"25509d9638a31c8ae389ed1b1b5571773ea5cd7f4a29e4b5078ca81369a157ac57d937ce8c30c1335241cdaa2e3f95779f30a475a4463d96178ff7bd6ba2fc5a","ssdeep":"","tlshash":"da713f4e43b6293c01a7a1be579bb7002d3a2143351bd8e9ba4c57442f5d27a81b37ee","size":3757,"data":"","first_seen":"2026-03-23T14:50:27.362645Z","last_seen":"2026-03-23T15:24:17.597335Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61f9fa6df80fd93a87b74d8d87d6bc2f","sha1":"8a1a112303b22fd4ef1d9e61422149daea813eeb","sha256":"f0cff33910c918cec38c296d29d4f6d6ae2e482c659e068b5b4fb3f0273c0e24","sha512":"35d036a370eb0a2cd00c15b62207d25efa5d1ebee20b478fd2d61b3ee335177fab7f0937295be355c04312664d1b3103823e47eea7d96849779507937bdc87c4","ssdeep":"1536:Zf23bazER3VEZxp86taz5/8yN2eweQAxlpk5:B23eAR3qH86IN/8yOeQkk5","tlshash":"b05309497b932336aa23617f67bf766c703690079402c960f9ad87408f91f56227a7fc","size":63323,"data":"","first_seen":"2026-03-23T14:50:27.373919Z","last_seen":"2026-03-23T15:24:17.619613Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gsap/3.14.2/gsap.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad43678bf59663b2059bb78edf2e9d4a","sha1":"7a7b1b1be9f358d45abd664bb2d515e3b274b1f4","sha256":"adc546b39948374bb0ac27a832807bb61de4dfe8f17e1842271ac61a5176dde4","sha512":"5378ccf63692521336e5fa13a026cbc2d28f6b26b2d72a9850635c8665fd9ccfbaf4be8f3767bc0eb181a63068f6d334d470e1ffb6c64e36d4109712c7204a5b","ssdeep":"3072:SGC2iKzroYb62RQWUTPbNxWMYCngIunWQe1if4lNx+IU:zC2iKzroYm2RQWUTPbNxWMYCngIunNi6","tlshash":"01a3454937e375359117f03a9e6fcc0ab339a88f168acd0a754c91f45f0853487baea9","size":100526,"data":"","first_seen":"2026-03-23T14:50:27.307446Z","last_seen":"2026-03-23T15:24:17.60774Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gsap/3.14.2/ScrollTrigger.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6b49a54bcff1ec24379f35496558c86","sha1":"15c988b3151a80e25b0286932d4558a6dbc9e713","sha256":"06148be2f5606c343cf547c370ee194ba356184b833bf756ac07389e1e552ba3","sha512":"8c174280e9aaa642ab247aca4f3bac1625708355ad56873ccb254fe9016c6f5fb69a612e9b502fde70e643fb46430943faaf285354b77148a22ed4e23892a855","ssdeep":"1536:mSKxp9e3d588WZeX4H/TLl0WUIWUSQQaLrRjjv:ty8WoX4HnKWUIWUJQmrRv","tlshash":"6d43954936e63135925bf13acb1fce04b336584b1289ce197a8c53b45f1893897b9eec","size":60568,"data":"","first_seen":"2026-03-23T14:50:27.333625Z","last_seen":"2026-03-23T15:24:17.605095Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gsap/3.14.2/Draggable.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2abf343d93103aa98acd4e8c2e7881e2","sha1":"d78dff32bc2218bc08a2930bde19c610931a561c","sha256":"eb4934cf57d4982671ad69253ccee41faeb5869a597b045d8acef9a82aac3c7a","sha512":"1d860b5561ae305816a2925ee6012a5911473edbdd99fb7f92c860db6e3c1b4f3f1ee4b18b52df6c268a64fd2bf3622f73e352d36cfc132049d299706ae733b2","ssdeep":"768:NWF7T46TRw4P1BKkhlCVCP2NH6IFH9nL5iFBbCoCZjyvMZuP3E+yf:MzlKkhI4iH6IFHfcClZjy1yf","tlshash":"d423c49927e13231914bf22bce5edd08b23b588f13c6cc493a4c49a45f44a395fb9f99","size":47610,"data":"","first_seen":"2026-03-23T14:50:27.31199Z","last_seen":"2026-03-23T15:24:17.56986Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link-verify-7033.vercel.app/evm?id=69bbb0a3fcbed86f074e521d\u0026bundle=1","fqdn":"link-verify-7033.vercel.app","domain":"link-verify-7033.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"caaffbed8f469524967caeded9701fa2","sha1":"3b0a9ae1dbf3991cbf2282a7e2482533350f80c2","sha256":"da8552aaa2fb11a9b7ec5c72867e8347f8c5c2afe8246dd99c0b358d415f6744","sha512":"cce8161988a7a9a54790da35c609621b37bca77d8763e9af91b33df503bf16b40a2ec56c477a68555a0f84269bcbaaf97a09722ed5058bb2280f541ab30e5f7f","ssdeep":"49152:sOjeNnLZ0c8rBH5Yabj272AuFMJ2WE8xcrmblXtoEXJdmz0LORn2N1VY9JtOsCCG:spLglHy2WE8xcr9ETmB2N1","tlshash":"2fa58cb173a1b07603d782d950a61100f3359859740e80bcfbace8efaf959ca957af35","size":2150922,"data":"","first_seen":"2026-03-23T14:50:27.378975Z","last_seen":"2026-03-23T14:50:27.378975Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/js/webflow.schunk.7532b7c3406e74fe.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df89cd72e66ff32ed37dc705f4d1bd03","sha1":"b158c75f18abb1789dd87fcbe7b957bb6e7a7395","sha256":"0e372787bf40534f92863bd19cac8f45909fcdfd5a9558020f87ca65875e6e85","sha512":"e57a7dea5617e1edbb6db3886ce57b9b02704728f4900880f3c593383886279f860ca50a6b6115c6538da090f0f2eb7bc8a89acdc8afb6af29a98db25ef98763","ssdeep":"192:EoglR5IaoONUT4yRPUKAHVfxAcoim3bdK6jXTXC+aw+rw53DdpeyHmG/YG43VaWr:HK5sEC3bdK6jXFlug1/s//r","tlshash":"1b2247947ee33931a25b70aecb5f88047731010b4e85ce583e4de6965f988381bf6f5a","size":10703,"data":"","first_seen":"2026-03-23T14:50:27.323973Z","last_seen":"2026-03-23T15:24:17.589163Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f25bb36aee549ef630a6fbc8eb595e54","sha1":"8aad04c9df9d1b0fdafb04d911f46ab0b6d1ec0f","sha256":"0feb6b7e654213c4ca423d0f6607e93efe41adfd7705bc613342a8aae4ec6d3a","sha512":"180358a6cd231e62d4e5adae8d83e85cbe469e5732c0bb158ce4b05075bd97e4124891ce737dc2101a53826e058ab6c2580d5ab1dbabcb78ef36365d3606889c","ssdeep":"","tlshash":"2fa02280300cc083000800280a28f82bb0002b23f08300383cccc20033c002c80a080c","size":66,"data":"","first_seen":"2025-12-12T19:09:36.402427Z","last_seen":"2026-04-20T19:04:20.314456Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/js/webflow.schunk.36b8fb49256177c8.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57f696f55d9bfeb034d3d144f98f95f2","sha1":"777dff549fe0338320db863654851717c490e2bd","sha256":"817560d636845ec2e48f3c6fd94f5cd5dc1b6db6aecd80f09301cc7913631739","sha512":"1bcd3456594739c52dd7eb8ca7243e6866cca43481e16cb52f98a918cd3afa1a2020e81382981f29a9a7634ca08c85303dc86d12177c1a11dab4ca60438d8935","ssdeep":"1536:6y1mj3mKKUvFcKDOpl6QVtM4kD44AUowT0xz07CtUF:6SUTco4kDpAyT0xz05","tlshash":"ab5399497af3b1a4a213f0b8c75f9c0ab234549b158eed45794d92e09f60c7887b9ecc","size":62167,"data":"","first_seen":"2025-12-08T03:29:50.090719Z","last_seen":"2026-03-30T11:55:27.058784Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gtag/js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5a99d57fec4eeb28612383b9d89f528","sha1":"0b5f13df2dc89db67fdd03a745db76177c5897bd","sha256":"acc55a554e9309a31187756039c35b8f3b2e2a9d9aad838ecff06252f4e79e72","sha512":"733954b7f05717c46d93690979519f87196e75715a08ed28f3b553fd6c10634a647301570587c9a204d0cbca298d171b29731035d1e5a4affe201b7bfc78f834","ssdeep":"6144:sfcYBxwD0Wt3eWAs+7eHNsi8ZFBOPsEDC1p7Y2Wevo6dDFFuGU7UO31uRF:sfcYBPWt3e3sVNshYPsEDCsFS","tlshash":"cfe4735debfb2825a223b07c8b6f9809ba344847149ccd847d8cd1945f1853987fabed","size":675517,"data":"","first_seen":"2026-03-23T14:50:27.349249Z","last_seen":"2026-03-23T15:24:17.577987Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/js/webflow.schunk.ff560088e0bd9e74.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bfe4e39d97983a5625a1d538f03b488","sha1":"642636f9926cc266fc4da1b559f7a9a9cf739cb3","sha256":"238ed1070dc7fff9df99148996e93e7a7260bd2995f8dbca03d320d9f0e71666","sha512":"739d0334701192073bc77745e9b3966a83c69a0a2d8f6bb2b947d9fee8bdad8bca04d36c71cd1175ed9261add357115f3a1aaebc7cbac274d372a4f7b81c9a67","ssdeep":"768:5JrKqEDbQSL/71HrYxEqWfO7tbNr5rMuWgW1dncSje9meT3UGhc6GmcFfwPRZO/I:HKqgR/71HrzqVvMMS0fT4mcMZ","tlshash":"a333509a6be374359123f1b89f1fdd047235618b158add093d1c92a49f1493883bafec","size":53986,"data":"","first_seen":"2026-03-23T14:50:27.368074Z","last_seen":"2026-03-23T15:24:17.612057Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gsap/3.14.2/ScrollSmoother.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3b29f3ec0fd563c1b94516a4f1f5efe","sha1":"3554f2e2a50bbe4cd527aaa4db660a4ccda5ecbd","sha256":"5ad1edcca98af042fdc043f1c6df349f3cc7a38f56b5f521ddf6f86277a325f5","sha512":"ca2f4fbb901bba5bd7e635ab2ae584f4712070b5b4a9704f3e55a037bf2e068f8648aa4a5b7c708ffd3fb538b3c7de4a283fb5998fb92dbb55dae51381f33087","ssdeep":"384:mjwAhGB/77ukHDFhtoeTOUYR6Zx2FWoWzoEz:mjwAm7uubt5Hx1z","tlshash":"65821f4a2be23131565bf17a8e1fde047331541b0b8ee9097e0c56a85f1853c4bf9e9d","size":18815,"data":"","first_seen":"2026-03-23T14:50:27.3458Z","last_seen":"2026-03-23T15:24:17.568918Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e9e3ad57abeefde87342864450cc232","sha1":"4dc8676bf3417d597053d5f253fce034007f63da","sha256":"9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26","sha512":"b2d8e0e883fc8af91de120565298502b6e5b0f6e20275ecd2974de3e768a19a443f7facc2127201df66725c20451b924a69eaab78224073e385f14a5431c3a6c","ssdeep":"","tlshash":"34c0123621525559045b3d04a66ba14a758791b2a9025401dc7ee5a0311bc9aad0255e","size":181,"data":"","first_seen":"2023-03-07T01:17:43Z","last_seen":"2026-06-13T18:17:00.131579Z","times_seen":55213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/npm/swiper@12/swiper-bundle.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"394ebb9b1551b4d96ffb7efa09a924e4","sha1":"b3189e4adaf46b9af92040a98962394ad6636231","sha256":"3b2f9456c5ad3f01bb798db785fcaec5cd52627c9d291b9d0ff96e6a105daaec","sha512":"c00ad49498dc6c64828e254c87c6c9b037be47c17643ad8ee74c7d42850c87ce2d2411e8825f44452c91e1b60ac0651b0dcaff5900d4bbbfea05e99edac03b24","ssdeep":"3072:0+WHdne+OwIwFGuyP9Dotk0zBH7ruYobX:0+yeHwFdtkJX","tlshash":"e014710a52f2253841a7e06e4b5fc811737a940b7a4adda83d8c4a589f5d83c47f9ff8","size":208900,"data":"","first_seen":"2026-03-23T14:50:27.360709Z","last_seen":"2026-03-23T15:24:17.609628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"96abf72b3264a970b8065f759b8f56ad","sha1":"2d4d78b149814f8e8ea3dab8b15f7e13fb9e1ac3","sha256":"4bb0eac7b50169ea5d049866cd53f10c59eb171944a6f59256802e755bdd74ae","sha512":"7732173c787e1cbc9f337800002918fab1e808cd5c6a1ee2369a94d8ba8ef7bc9ee6235f004a443c3ddc5ebab2fd61c21633e665387db3df89c329cb4ed1bfec","ssdeep":"","tlshash":"8cc0809c22122db555df1b404b2fb7957153712194d059b34d4127489510d539758860","size":181,"data":"","first_seen":"2025-12-12T19:09:36.408427Z","last_seen":"2026-04-20T19:04:20.317204Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ef5908d7943f214fdf96d717e867a07","sha1":"fe44c4bd21efc7f2a1752a8b13f197e5c25c748a","sha256":"b7f0bc91114417defaedf6e92bd07b7d8324fd8dbe2a95ffc9a2dbac962c4316","sha512":"092585edb2ffd61fa51ac0b0cf03a291891de9650ccb6201fb086bd9419723454d6e897b05a5f69fa9fa496ce1a830941b67b53e0ce52bff54df7fad81df849b","ssdeep":"","tlshash":"fda0128a8244485102fe40e1843b0581f344834002219000737d24401c01c944024130","size":74,"data":"","first_seen":"2025-12-12T19:09:36.410157Z","last_seen":"2026-05-15T05:33:22.379664Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/ajax/libs/webfont/1.6.26/webfont.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"def8d24fc0849b28c41029e4c10361e0","sha1":"0edb1c24734b63b9e0a9fe4870d78db872ec5856","sha256":"e8ebaf5621d0285d223eef93a80fabdf255134d1ba8762c1dda2190bc5e4b901","sha512":"d3105a952eb6fe30ecc6a85839747b77cdb08c7f5f818a8e00d2aee09df73f4e530a587c5b7c6ae7d7ec1ad2f4bd78fddd2bb8846edc6f25bc7dc35d3e608778","ssdeep":"384:sTq5MOMlc6Q0eqr2jWaIB2tgFb+x5Ia+G0Y415Bj2zCAnMsPxb:sTKMBt9HavtgJ1WxrnT5","tlshash":"b282fb0eabe72429e023b07dcf6f98147524850f1499cd99398c96e4df245394bf9fac","size":17965,"data":"","first_seen":"2025-11-21T23:26:19.637134Z","last_seen":"2026-05-16T21:36:28.407771Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/evm-noir.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02f3fd47923ad9a7773c963d777e245c","sha1":"cecbd5b84c5aaf232ca1cfb4de3bc94d0642f753","sha256":"e3585d6649befab2a226aeabd953fb26688f615cd01098dd3e47e2ef69cb0402","sha512":"469daf6a3406d3073a2a98a784f9f8e7d81aaaf9607024ff8e27215ac08d7d5cbfb9d8397bda61225b939d439b00722db1d632494bf091164704502134ae450a","ssdeep":"1536:RzceMknX3a6ylth0AekhKXL/okqiQzTbNv5hPX1zXbXh9DZuDTemFHk9RjYOJOls:hVX3by6YqGzfbk5kIOms","tlshash":"fd834d7acf5f3d828f54170666fe1ccd0a2d9f8664c3448d5a0af2ca829f67718c85e9","size":84539,"data":"","first_seen":"2026-03-23T14:50:27.335656Z","last_seen":"2026-03-23T15:24:17.59392Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5cd645cb11b9e33047d0d2841026b40","sha1":"1a8e34ac6ce68a6dc3eb31ceee1868b0417adc38","sha256":"e81771224f87783ad3e1ef819dd2b922b905ec08db930bb346c9afe0f7a8e340","sha512":"606d03f2e91b9461566f741308406781599db4416f6edcd65107dc64945f17458c2356e5ba32a5ac97e6decc71ab867d1d4f5132765cb93e6f282ba4727060bf","ssdeep":"","tlshash":"2b01bd2b7af330704a7be22b2e4f53063b220023740eed85b92d44940f70f504c744d9","size":788,"data":"","first_seen":"2025-12-12T19:09:36.411544Z","last_seen":"2026-05-15T05:33:22.380618Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a06ff852f6daf6876e4c0aa1d090d5c","sha1":"760ab3392a0970e0a4a81c6f66905f31176d11ba","sha256":"278362919d3b1795efb6c7953e61c60ae88b6756e11592e8c3c383048a04bbe4","sha512":"1ec2c5f2b1400509a19b1c0eabc91b7d9f8a812266f03dc6fc7feafc1ab7adf1931d23f559952d9a86f7e630d24d9dec8d4b2a0da3303ac2c16f84d9b5e8d75c","ssdeep":"","tlshash":"7121003ef2ba0966017b31fa83c312407c1871032f99d80ab69ccbf04f97d959812385","size":1138,"data":"","first_seen":"2025-12-12T19:09:36.419563Z","last_seen":"2026-04-20T19:04:20.325195Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/68b2f172993999fc8700fb2a_line_only.svg","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /68b079c8e8fee1a63c705d4c/68b2f172993999fc8700fb2a_line_only.svg HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd86-189\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:02 GMT\r\ncdn-storageserver: DE-1139\r\ncdn-fileserver: 1215\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/23/2026 14:44:53\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: fe22b80fe1ea4e15f5f1182f2e72beb7\r\ncdn-cache: MISS\r\nage: 300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pT1e7GpYgXizu2xeXb8rJxdbKFO3vFpw8F5ApnoPHABuyETg3rW%2FU9Si3viaw2HoSTn1pr4DFZ4MnH%2B3CMm8gZBHcpyDc7MtyF9KoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ecf7a881806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":393,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fc6459133434d316b8fd3c715bf8e6c","sha1":"67fbaa7c214475ad94edfdb7fb738b801a21664c","sha256":"77f7eb42914941292860c58079bdca977ddf4e04b92800b897a69079cb49dcc4","sha512":"cb125bd2ee8e223585dc5f6da0d01e42756d3fee63ddf9755a4fe46e81dbd1b5aa8555d2332b04fd841cfced0d1b7a0d74b70292c911501383aae5b00e676907","ssdeep":"","tlshash":"35e061f9128dc52dd7448101df6bf9848125929d45794015b1c42637781dd57ab333dc","first_seen":"2025-12-12T19:09:36.348735Z","last_seen":"2026-05-15T05:33:22.370987Z","times_seen":10,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/css/river-124231.webflow.shared.d09a5bfb6.css","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /68b079c8e8fee1a63c705d4c/css/river-124231.webflow.shared.d09a5bfb6.css HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd84-eb57\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:00 GMT\r\ncdn-storageserver: DE-635\r\ncdn-fileserver: 1209\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:41\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e413302e7f371c2c6f553dcef1e6267f\r\ncdn-cache: MISS\r\nage: 310\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dItZTgLqfe2oaAinIBhX2CLKy8a3D5sjgFmEkVlqF4%2Bh6HPA7bdEFrduUg9ywwXl56RSG%2BoXjmsvitU9jNGAk4Gm%2BhrHyOvCDwIIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece3f581806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60247,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2587)","md5":"43fdaf5a572209e8b88160c720aa8c9b","sha1":"c5c503962f2c1efde8cb0a9753cccf64bb2aaea5","sha256":"8a39b0c1bc6a09ce856592fca5952e2536f2fcc2a8199f0850476170df103496","sha512":"f9a65b1c226345986b77b56757d9ec4ee1be0b49a50a57ffccd351269062a539b27aad2567a44bcd01765c1ab11da2f2e52cd212a46db0b6b6b5f52f5aaa3ff7","ssdeep":"768:AyNf7A1RE/GqyFVF54mkxWaIi1aUuF9Zl0F6FhF8FPqkowKji/JVx+BPsYysFgKv:Aye1REeqyP0XcPyjowKjvBPsYysFS2J","tlshash":"3f4375696bf42904bc0b94b86d99e7907b2d4047de0ecf58b9d1600adfce2853973b9c","first_seen":"2026-03-23T14:50:27.304619Z","last_seen":"2026-04-20T19:04:20.291321Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gsap/3.14.2/gsap.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /gsap/3.14.2/gsap.min.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd88-188ae\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:04 GMT\r\ncdn-storageserver: DE-660\r\ncdn-fileserver: 640\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a15898aa4eed640c95798fbb1b8995b1\r\ncdn-cache: REVALIDATED\r\nage: 310\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7VbSQZDo92VkMCtpYwmgdRiHW9a2spnc2ShiAX5Y90TL7DepBAd%2FCbrQfRDdThZtQJ4ioIztq52J5ieFrq9wB8nzZhAgLwLmDiN9Aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece4f771806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100526,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (614)","md5":"ad43678bf59663b2059bb78edf2e9d4a","sha1":"7a7b1b1be9f358d45abd664bb2d515e3b274b1f4","sha256":"adc546b39948374bb0ac27a832807bb61de4dfe8f17e1842271ac61a5176dde4","sha512":"5378ccf63692521336e5fa13a026cbc2d28f6b26b2d72a9850635c8665fd9ccfbaf4be8f3767bc0eb181a63068f6d334d470e1ffb6c64e36d4109712c7204a5b","ssdeep":"3072:SGC2iKzroYb62RQWUTPbNxWMYCngIunWQe1if4lNx+IU:zC2iKzroYm2RQWUTPbNxWMYCngIunNi6","tlshash":"01a3454937e375359117f03a9e6fcc0ab339a88f168acd0a754c91f45f0853487baea9","first_seen":"2026-03-23T14:50:27.307446Z","last_seen":"2026-03-23T15:24:17.60774Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link-verify-7033.vercel.app/api/v1/visit?source=river-s4.icu\u0026wallets=","fqdn":"link-verify-7033.vercel.app","domain":"link-verify-7033.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:57.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /api/v1/visit?source=river-s4.icu\u0026wallets= HTTP/1.1\r\nHost: link-verify-7033.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://river-s4.icu/\r\nX-Config-Id: 69bbb0a3fcbed86f074e521d\r\nX-Client-Source: Perpetual-Client\r\nOrigin: https://river-s4.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob: wss:; frame-ancestors *\r\ncontent-type: application/json\r\ndate: Mon, 23 Mar 2026 14:49:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEmZ45SEc8RWDAM%2BOIov5rsJW8YZ9LoGH47VVTP%2BHJMTHZ3NsgRotqKQ649twAOVHQLDKFFkvSn3%2FcF1ViGjEWdUkpcNEwcamb33Cknq6rDoJ4%2F5T8%2F5BpPu2rYQG6U%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 55\r\nx-ratelimit-reset: 48\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::gbxjj-1774277397016-1e68c48de288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cff36d12c93e610d6868e486d3e555a1","sha1":"a73969f25475eff0ed30937756c2f434fbdb042c","sha256":"9409cf52dfe8ea94df613871e612657491e6eaa4cf65574e5df9739af42e39d5","sha512":"2721d3ce489b8df549e53e09df4860f34b74910ee9ffb1ccac7d7be27e5ddebdb7a92a237a6aea52ecca3161a0d945a32fef8ec3b3b6b0be6a224c460fbe7857","ssdeep":"","tlshash":"c090041001043c345f510701341177503df4ddf1544d7053501f703c0115dc1d05f307","first_seen":"2026-03-20T13:13:34.015138Z","last_seen":"2026-05-05T22:04:55.766217Z","times_seen":19,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/js/webflow.0571e525.bbbe942d7acad6e7.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /68b079c8e8fee1a63c705d4c/js/webflow.0571e525.bbbe942d7acad6e7.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd88-25136\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:04 GMT\r\ncdn-storageserver: DE-633\r\ncdn-fileserver: 1124\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:40\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 4e58a2b05097a354b6d20bf80eb98bb3\r\ncdn-cache: REVALIDATED\r\nage: 310\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hvt4v945DX4JgNlqj7EZMpFnOJOrHG2hBQCcAUEzWdry64fTHvK7gqF5k5aTpiZMwjl66rsJ8eDZkC5FHaVLQQ9%2FQ3zokLVNddjIbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece3f721806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151862,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (847)","md5":"e5f8ae6e4fca6e0b7c71a350ec401b11","sha1":"37fddae160e949f6203ab1bacaac65e6f1eea9e8","sha256":"42eebe5060715311cf576b0297a272fc341d9ac2586d29db7d81b4ec3db60590","sha512":"055b91d7fdcafbd59ddd4bd448d0a46b9e07902adc84e176414d273e3913c846931dfceb7008ef9b5a36a858093f20141a6d295c2c957a093be94c6491030380","ssdeep":"1536:QpNkcNMzUY8Q/7x92WJ/veWUyKQy5fQXlj84zxAffr1TetnF6RhbyJxS4iIEUYRj:vL19RUwYyq","tlshash":"98e32b493af37030421bf07d862fd805b238868b0a5dbd187e5c96a46f1846e97f6bdd","first_seen":"2026-03-23T14:50:27.310334Z","last_seen":"2026-03-23T15:24:17.581708Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gsap/3.14.2/Draggable.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /gsap/3.14.2/Draggable.min.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd87-b9fa\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:03 GMT\r\ncdn-storageserver: DE-1136\r\ncdn-fileserver: 1215\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:40\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 6d6ef1a4b00f795c2bab351f522b3b7c\r\ncdn-cache: MISS\r\nage: 309\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hxJMBUUqNEy698PIWmo%2BJUQ1ki1LRhCqj6kO3rgyF0MLVyV6W7TIV1%2FZf58uUd%2FeAnnyYEX8mzznGVXs%2F024Nd%2Bnms1vaOoCcHcJ4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece4f8b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47610,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1561)","md5":"2abf343d93103aa98acd4e8c2e7881e2","sha1":"d78dff32bc2218bc08a2930bde19c610931a561c","sha256":"eb4934cf57d4982671ad69253ccee41faeb5869a597b045d8acef9a82aac3c7a","sha512":"1d860b5561ae305816a2925ee6012a5911473edbdd99fb7f92c860db6e3c1b4f3f1ee4b18b52df6c268a64fd2bf3622f73e352d36cfc132049d299706ae733b2","ssdeep":"768:NWF7T46TRw4P1BKkhlCVCP2NH6IFH9nL5iFBbCoCZjyvMZuP3E+yf:MzlKkhI4iH6IFHfcClZjy1yf","tlshash":"d423c49927e13231914bf22bce5edd08b23b588f13c6cc493a4c49a45f44a395fb9f99","first_seen":"2026-03-23T14:50:27.31199Z","last_seen":"2026-03-23T15:24:17.56986Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link-verify-7033.vercel.app/api/v1/config/mode?id=69bbb0a3fcbed86f074e521d","fqdn":"link-verify-7033.vercel.app","domain":"link-verify-7033.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:54.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /api/v1/config/mode?id=69bbb0a3fcbed86f074e521d HTTP/1.1\r\nHost: link-verify-7033.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://river-s4.icu/\r\nOrigin: https://river-s4.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Mon, 23 Mar 2026 14:49:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVm02RU43wba1jn717XkO8KTn96WwEx0jJAqe5DbcmZxSKFqGAEAzcJ1YrgCVsouYziskHPcALbDl2T7DNhJMJkRYvIfqLVQAMKC0DLsocturqff8MLNUZo0MPFpSHJIRvEKJfsJ\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::d7m7f-1774277394328-4807f92fefec\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":34,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bad1f7c9dd6b19229918700404df9d60","sha1":"79a8cd1d6e45d91ab4ce12de44fec50b45c8731f","sha256":"efe8405eda83307aeab15ec10044b48e9d13ed679d46fc775552d4c1f8ab5e6c","sha512":"0e71a735892974de0c74849334cf264fe907f70fc39208a090fd06dbc336ce4fc1ab94f381af97c8bcde26fdfff036158d882399766dcafa004925708b01d50c","ssdeep":"","tlshash":"c48000c83b8a088800828ac80a080a080a3c0020b00ea03c800a3a88e0aea20c088caa","first_seen":"2026-03-20T13:13:34.000621Z","last_seen":"2026-05-18T20:35:54.458967Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1576,"timings":{"blocked":37,"dns":12,"connect":1,"send":0,"wait":1501,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gsap/3.14.2/InertiaPlugin.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /gsap/3.14.2/InertiaPlugin.min.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd89-26fe\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:05 GMT\r\ncdn-storageserver: DE-632\r\ncdn-fileserver: 1259\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:41\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 63951742302b53d37fa3cd78a0b5fc32\r\ncdn-cache: MISS\r\nage: 308\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U9EhTnKo6IhnWXIjt5YehNDjklEWKBCPlmVXy1ztksMNAmMvBifAcHj4307T3Dts1x9bo%2Bwlo%2BdjUWE%2BcjtdbJ7r8kJhMFfmwLPyBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece4f861806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9982,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (834)","md5":"24bca80a4541b3d3036ab9390d323db6","sha1":"c8f2d9752e0ac149d4e88e68e66d1582e535ee7c","sha256":"c79246409c43f2248ab46b2b77f43afddd7f453bf109a53d1525d04fe16c12f4","sha512":"894614ab05dceb3e17560007a1716c86e105ff6663f284e307db8c5b55d2709159f9196fe9bf99c6940486f3d870b0a58535de19d6c1d3f1003ac59c66111864","ssdeep":"192:k9/rUkL83pUKlklyDpLXtyJNMJhg22+xjozaRZwhRm31bSWbWXF0FUrNdS/wXRGa:KBLEeCbNp7CLR","tlshash":"6322325837e2b236a113f0398e1fdc1573a9a88f03d9c98b798c51f04f1447a47b9e99","first_seen":"2026-03-23T14:50:27.321513Z","last_seen":"2026-03-23T15:24:17.583072Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/js/webflow.schunk.7532b7c3406e74fe.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /68b079c8e8fee1a63c705d4c/js/webflow.schunk.7532b7c3406e74fe.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd86-29cf\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:02 GMT\r\ncdn-storageserver: DE-632\r\ncdn-fileserver: 1124\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:40\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: fca116a6bb1a5bd5c0d64ffda5d9ae5c\r\ncdn-cache: MISS\r\nage: 310\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDXqyZL5sbZ4hRLCcVCLY%2BSK8%2FDvKUiL4csv5xO%2Fz47aXEkXMZlgCx9nM8pa8jGqfNp2zYtuUn538pa5SvhE0N1o4ecklRq8Bg%2Bsdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece3f6f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10703,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (542)","md5":"df89cd72e66ff32ed37dc705f4d1bd03","sha1":"b158c75f18abb1789dd87fcbe7b957bb6e7a7395","sha256":"0e372787bf40534f92863bd19cac8f45909fcdfd5a9558020f87ca65875e6e85","sha512":"e57a7dea5617e1edbb6db3886ce57b9b02704728f4900880f3c593383886279f860ca50a6b6115c6538da090f0f2eb7bc8a89acdc8afb6af29a98db25ef98763","ssdeep":"192:EoglR5IaoONUT4yRPUKAHVfxAcoim3bdK6jXTXC+aw+rw53DdpeyHmG/YG43VaWr:HK5sEC3bdK6jXFlug1/s//r","tlshash":"1b2247947ee33931a25b70aecb5f88047731010b4e85ce583e4de6965f988381bf6f5a","first_seen":"2026-03-23T14:50:27.323973Z","last_seen":"2026-03-23T15:24:17.589163Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/river_hero_2_loop.mp4","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /river_hero_2_loop.mp4 HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1263569\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\nage: 310\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 20 Mar 2026 21:35:01 GMT\r\ncdn-storageserver: DE-756\r\ncdn-fileserver: 1210\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:42\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e9517b1dcde81b8f9d7becabe525ed3a\r\ncdn-cache: MISS\r\ncontent-range: bytes 0-1263568/1263569\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Gt17cpI%2Fsg1jiBBkNnfz29BUM8OE6tH%2Bs99VUksMJ3OBJMtm6YYaV%2BGTlZnvg0ha3%2B3ScpifOP69coq69%2FpE1y%2BfOYT3yFivH6r%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ecf6a5a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1263569,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"36f4559234b921cbfc07c3e8098d3c89","sha1":"b5248994e6832169eb68cab91c2a3e2092d67c1f","sha256":"f7c01c5f316951b441b320e0b6623b63eddebc798e89b3be9aff6a7455cb0976","sha512":"7871019c40814d7e5957d2e46bd74ec36a19dd994a5bb58a63c9139c6559e052b5f0e02fc67669ebfe1abd2ddb89267784dbc1c5c6720d3152a5012a31319b8d","ssdeep":"24576:6DSNC8kCHnL9wddPGXFoWAnBaGLqPkAlaPqohcrVI:6D38hHL9w7OXTAnJgMiomrVI","tlshash":"9025236005d45cafef3f59b2c8893035e9336de686c48fc3b99e62582f743584a4d0ea","first_seen":"2025-12-12T19:09:36.392061Z","last_seen":"2026-05-15T05:33:22.360887Z","times_seen":10,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/river_hero_2_loop_mobile.mp4","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /river_hero_2_loop_mobile.mp4 HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1258106\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 20 Mar 2026 21:35:07 GMT\r\ncdn-storageserver: DE-768\r\ncdn-fileserver: 1210\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:42\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8bbd765c8603a49c258fbef3c1a2ce07\r\ncdn-cache: MISS\r\nage: 309\r\ncontent-range: bytes 0-1258105/1258106\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bt%2F3lGAmrdJwJU7Ss3uyQRzJ5Qh7T5h2sofofeQ8MJKsGsow1nGJ85LQjyhmfRYje4hNnZnXN6PWRiJK4NtEPlATJjmTlrdJJ4XEhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ecf7a751806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1258106,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"6e61f6cdf3eef07f922ac22689d07849","sha1":"5d34e70bc252fd32d31a46c456d195e3898e3ff9","sha256":"9dae3eb13812f4151f829afc23e901aa672211ead568bb477be4ee4a28d6f231","sha512":"8f4e0bd0ce97e61085b0b8ad705f838fc0db22095a7248fa32ebb614e5a9cbe4f683024370d4300cb50328d909a2dbbee42c4749473059ae922591ffa358a015","ssdeep":"24576:Ec35/PG1bK+GuNSUmmu38yjYaQl/uC7W01BTJzjKDEhtSg:953G1b91/M8yjn0mC60DT4Dqcg","tlshash":"b025335bd7ea6cdbc50deb318a460c1ac716d10b50d82dc274cf2ce45baacec52ce666","first_seen":"2025-12-12T19:09:36.394312Z","last_seen":"2026-05-15T05:33:22.369798Z","times_seen":10,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link-verify-7033.vercel.app/evm?id=69bbb0a3fcbed86f074e521d\u0026bundle=1","fqdn":"link-verify-7033.vercel.app","domain":"link-verify-7033.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:55.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /evm?id=69bbb0a3fcbed86f074e521d\u0026bundle=1 HTTP/1.1\r\nHost: link-verify-7033.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: no-cache\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob: wss:; frame-ancestors *\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 23 Mar 2026 14:49:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B0PmjiJPO6LEoVpFID%2BBvwhbjAcnvyqSgtQ9AL2CFEyXUjNRq6xPc%2FzOiLPvPuTI8i3bZlrIhL8S8sc1NhIwslKUUqdHU7WCUeWrI5jKqIgrjjjfbNVQI%2BgGkw8rIt4%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin,Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 56\r\nx-ratelimit-reset: 49\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::jwqr6-1774277395883-dbae9b697a9a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2150922,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65019)","md5":"d06490528e925eeb2459594837f1ea9e","sha1":"ca31f9131a61672364cc41dc39533ebcd37a89b0","sha256":"cd3e9b779d96f8df942fcc4a23ae0ef379362a60ab8c27e883af46ee9d7e29f0","sha512":"caca2950068a6279fe63d74617275608e0fd15743addc24f9d84ee6374dbb0744695652eb792a3204159d80bac34181978077d2797c19ae07e64c786ec650a5b","ssdeep":"24576:sAbjeHtLLLZaPYF8rBH5Yabj272AuFMY+2WE8xcrmblXt72:sOjeNnLZ0c8rBH5Yabj272AuFMJ2WE8u","tlshash":"15256bb173b1b57603d783d984660101e2349859700e84bcfbaca9ebaf949cb953ef35","first_seen":"2026-03-23T14:50:27.3314Z","last_seen":"2026-03-23T14:50:27.3314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":413,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gsap/3.14.2/ScrollTrigger.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /gsap/3.14.2/ScrollTrigger.min.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd85-ec98\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:01 GMT\r\ncdn-storageserver: DE-633\r\ncdn-fileserver: 1105\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 4276436dab21e20e8415ff76b789d97f\r\ncdn-cache: MISS\r\nage: 309\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ugDJZ9KVreqzDB%2BeZ82qFimfLmTYvPnkTKCSN9Rz6tsWte0QS4QDlMsBGaPBtUluB3ztRSWQHsOniyI49NZOCrlCqEe8f0PLp5KpQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece4f7c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60568,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (884)","md5":"c6b49a54bcff1ec24379f35496558c86","sha1":"15c988b3151a80e25b0286932d4558a6dbc9e713","sha256":"06148be2f5606c343cf547c370ee194ba356184b833bf756ac07389e1e552ba3","sha512":"8c174280e9aaa642ab247aca4f3bac1625708355ad56873ccb254fe9016c6f5fb69a612e9b502fde70e643fb46430943faaf285354b77148a22ed4e23892a855","ssdeep":"1536:mSKxp9e3d588WZeX4H/TLl0WUIWUSQQaLrRjjv:ty8WoX4HnKWUIWUJQmrRv","tlshash":"6d43954936e63135925bf13acb1fce04b336584b1289ce197a8c53b45f1893897b9eec","first_seen":"2026-03-23T14:50:27.333625Z","last_seen":"2026-03-23T15:24:17.605095Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/evm-noir.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /evm-noir.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd88-14a3b\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:04 GMT\r\ncdn-storageserver: DE-1137\r\ncdn-fileserver: 1138\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 4bbad949106dc7a5e3c6045e598e8565\r\ncdn-cache: MISS\r\nage: 310\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgA996M%2BiWPJRi6ZeUOytP%2BPQL4uPVgCH9XGC8KFkdTu7MV7qQlIVRt9gP%2BXhM%2FV%2Bbm%2Fc%2BTEUDiTNOXGoMthU3Spa9B%2F47kdcdSjkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece4f951806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84539,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"02f3fd47923ad9a7773c963d777e245c","sha1":"cecbd5b84c5aaf232ca1cfb4de3bc94d0642f753","sha256":"e3585d6649befab2a226aeabd953fb26688f615cd01098dd3e47e2ef69cb0402","sha512":"469daf6a3406d3073a2a98a784f9f8e7d81aaaf9607024ff8e27215ac08d7d5cbfb9d8397bda61225b939d439b00722db1d632494bf091164704502134ae450a","ssdeep":"1536:RzceMknX3a6ylth0AekhKXL/okqiQzTbNv5hPX1zXbXh9DZuDTemFHk9RjYOJOls:hVX3by6YqGzfbk5kIOms","tlshash":"fd834d7acf5f3d828f54170666fe1ccd0a2d9f8664c3448d5a0af2ca829f67718c85e9","first_seen":"2026-03-23T14:50:27.335656Z","last_seen":"2026-03-23T15:24:17.59392Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/river_hero_1.mp4","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /river_hero_1.mp4 HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1593839\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 20 Mar 2026 21:35:05 GMT\r\ncdn-storageserver: DE-756\r\ncdn-fileserver: 975\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:41\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 03ac79e9026bc0fe74989adab976b919\r\ncdn-cache: MISS\r\nage: 309\r\ncontent-range: bytes 0-1593838/1593839\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gNnbf%2F9P7MW2SsGhTLKc1WiEd6dUNaOgNihR%2BcwSE8YU6b9HrpkbMSiwoeLSuR%2FPwAXDN7zxT%2B4SOWZoltp%2Fg4hBXOAxuq2IM6yLHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ecf6a581806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1593839,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"119916f21a9e242d27ae27f546f80de1","sha1":"93e2a3e0355dca5988ed870e1276817b18ae3638","sha256":"00294d23be35726ca05abb3381d9de9cdd517c3fea3bfb6e337eabffb39bc700","sha512":"bfc1e89a9f071fba3514e3a9d92cf555d2317f3395d30f4e7515e8e0e1f8862d5af8dbb76350af48b85c4626d76ae13efc7965af3e185bbbe91aafc5d0457b56","ssdeep":"24576:Rn0wPh5SBW2mc1anAH0pW9vtMVOvjZ4oVHcKAUF1:RntcMAHQW9VMVMtaKAUj","tlshash":"ea2533ee8ec62922ec7ca777e5c6652c5ac69976c9c817ff34cdc00403065c19e6ae4e","first_seen":"2025-12-12T19:09:36.376321Z","last_seen":"2026-05-15T05:33:22.368912Z","times_seen":10,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dns.google/resolve?name=_r.chrome-extension-da0e5-bc.com\u0026type=TXT","fqdn":"dns.google","domain":"dns.google","tld":"google"},"ip":{"addr":"8.8.4.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:58 GMT","end":"Mon, 18 May 2026 18:21:57 GMT"},"fingerprint":{"sha1":"AC:3E:80:8F:F2:AF:54:3C:C8:43:8D:69:CB:52:41:F7:7D:B8:47:E8","sha256":"40:A0:B7:B9:F5:1D:1A:1A:93:97:BD:33:8C:70:B2:0B:B4:49:C9:DA:B5:B5:C7:52:35:95:25:30:9F:09:68:16"}}},"request":{"raw":"GET /resolve?name=_r.chrome-extension-da0e5-bc.com\u0026type=TXT HTTP/1.1\r\nHost: dns.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/dns-json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://river-s4.icu/\r\nOrigin: https://river-s4.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ndate: Mon, 23 Mar 2026 14:49:54 GMT\r\nexpires: Mon, 23 Mar 2026 14:49:54 GMT\r\ncache-control: private, max-age=60\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: gzip\r\nserver: HTTP server (unknown)\r\ncontent-length: 198\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"72998bac93c5fd5da48dc398dc7d811c","sha1":"e8fd0462eadddf75e27e52b82e5db2c3eb5f46a4","sha256":"a5c3da2715afdbf90b9c356967530c65750a3067a6f76eece6901a95c5a6247b","sha512":"815f9906bbd064c17b96e929618d78d2b391121f228f26b6af2142a2eedea8378a56a5f9f078ae4d87801ea193dd46d69d81efde38e6742d1de84836725f1f6a","ssdeep":"","tlshash":"8bd0c284948880ad76176750c48b188a9fac23b272dcbe6986842f54e6cb251a492227","first_seen":"2026-03-23T14:50:27.339691Z","last_seen":"2026-03-23T14:50:27.339691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":222,"dns":12,"connect":70,"send":0,"wait":55,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/68b444b6f74d369d666f8d1d_32.svg","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:54.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /68b079c8e8fee1a63c705d4c/68b444b6f74d369d666f8d1d_32.svg HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nCookie: _ga_ZQHPES9XC8=GS2.1.s1774277394$o1$g0$t1774277394$j60$l0$h0; _ga=GA1.1.1906541626.1774277394\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd85-848\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:01 GMT\r\ncdn-storageserver: DE-757\r\ncdn-fileserver: 1215\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 15:11:30\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 7b480a1d69096898e6ef2ecf3a6a582b\r\ncdn-cache: MISS\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wZW780jAjZE5dWvjuMU9UJgnSGROj1d2hLfSrSeNL22oiqqx90BHDjf7KjnFoQAJCbno3pw2gHYfDnfW9nFkXwqma91tm4HX13qEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ed38f5d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2120,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c458fe33ee2c7befb7f3520b8e54003","sha1":"0376a633bd46088496386fd2e7b1ac96c3ed60ed","sha256":"2cf4eca38d3ab99201d8c08f0d8fa6644a52c2c506d937ccd2621411edead24a","sha512":"53a2a4dd11c8a99512e99f8a27fb30d474569202b6fca01927c4c50971e4b305fbae960138bed06e605f2040e96fbdf9396a0f049a034f803fd50ebeb2d97704","ssdeep":"","tlshash":"194175f5b3d9b1c1d103e7f0cb293421bd8a28fe6f26c7da86d56c54a52244d845a8c4","first_seen":"2025-12-12T19:09:36.336049Z","last_seen":"2026-05-15T05:33:22.372021Z","times_seen":10,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link-verify-7033.vercel.app/api/v1/visit?source=river-s4.icu\u0026wallets=","fqdn":"link-verify-7033.vercel.app","domain":"link-verify-7033.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:56.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"OPTIONS /api/v1/visit?source=river-s4.icu\u0026wallets= HTTP/1.1\r\nHost: link-verify-7033.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-client-source,x-config-id\r\nReferer: https://river-s4.icu/\r\nOrigin: https://river-s4.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Mon, 23 Mar 2026 14:49:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6%2Bac2ztURFR7zJOJkje76ySTAY5boYNMKOarHEa66G%2Bl3dILozOPJ4y42Bvxe9cCy7Ev4RQALXfK9cNnAzk%2FV88L0VHBJGjQK%2F0h%2BtUVd2bUbpIh%2FO6xP91zJf9Qo0%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::gbxjj-1774277396833-e4b902beafee\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-v2.satoshiprotocol.org/protocol-info","fqdn":"api-v2.satoshiprotocol.org","domain":"satoshiprotocol.org","tld":"org"},"ip":{"addr":"216.24.57.7","port":443,"asn":397273,"as":"RENDER","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api-v2.satoshiprotocol.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 21:19:50 GMT","end":"Tue, 05 May 2026 22:19:47 GMT"},"fingerprint":{"sha1":"DE:78:27:43:67:C1:7B:F9:17:D2:3C:7F:92:56:74:C9:E7:B3:BA:08","sha256":"29:BA:9E:20:E6:E0:ED:42:59:0E:52:80:B5:E2:28:B2:1E:3E:F1:11:4E:21:6B:F7:17:8D:BF:E2:F1:A2:24:C9"}}},"request":{"raw":"GET /protocol-info HTTP/1.1\r\nHost: api-v2.satoshiprotocol.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://river-s4.icu/\r\nOrigin: https://river-s4.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 589\r\ncf-ray: 9e0e3ed13ba90daa-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\netag: W/\"87c-GX7ARKWzSu6u9B5xFIoaXK1TE9s\"\r\nrndr-id: c1bf2108-cff7-448e\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nx-render-origin-server: Render\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Render","description":"Render is a cloud computing platform that provides a wide range of services, including web hosting, cloud computing, and application development. Render offers several hosting options, including static site hosting, web application hosting, and managed databases.","website":"https://render.com","common_platform_enumeration":"","icon":"Render.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2172,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5cb0e005802edf1cabfcebd065ec7dd4","sha1":"197ec044a5b34aeeaef41e71148a1a5cad5313db","sha256":"5a984cdb2f6484a286a3d36e0b41ca59fd0adf1ee7ae84e54cd2b56861353861","sha512":"c251634bd7bcea35ddfcda75585944f2df760d62d783ac84a580d5eaba725ed8c4481b598d042911fbdeaf1cc9effaa5b70bd67d93f63ec481e9288b0816a359","ssdeep":"","tlshash":"f04129862c884caf2863596c765500d9323dd19a8e4158dd4432ae58feffc33a70fc72","first_seen":"2026-03-23T14:50:27.344102Z","last_seen":"2026-03-23T14:50:27.344102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":166,"dns":68,"connect":4,"send":0,"wait":395,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-23","alert":"Sinkholed","trigger":"api-v2.satoshiprotocol.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gsap/3.14.2/ScrollSmoother.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /gsap/3.14.2/ScrollSmoother.min.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd84-497f\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:00 GMT\r\ncdn-storageserver: DE-679\r\ncdn-fileserver: 1251\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: cf51baae1d0c852eb53721e2252a9428\r\ncdn-cache: MISS\r\nage: 309\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQ92MKcOX822DkI10BKaa2bIBrO8Nvea3T3huOUitNjRs0cyXzCWQovWYP4T%2BiodWddJw3fn1nBsTyxxZyJzQF3fk3s76Hg9fGYF2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece4f7f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (518)","md5":"b3b29f3ec0fd563c1b94516a4f1f5efe","sha1":"3554f2e2a50bbe4cd527aaa4db660a4ccda5ecbd","sha256":"5ad1edcca98af042fdc043f1c6df349f3cc7a38f56b5f521ddf6f86277a325f5","sha512":"ca2f4fbb901bba5bd7e635ab2ae584f4712070b5b4a9704f3e55a037bf2e068f8648aa4a5b7c708ffd3fb538b3c7de4a283fb5998fb92dbb55dae51381f33087","ssdeep":"384:mjwAhGB/77ukHDFhtoeTOUYR6Zx2FWoWzoEz:mjwAm7uubt5Hx1z","tlshash":"65821f4a2be23131565bf17a8e1fde047331541b0b8ee9097e0c56a85f1853c4bf9e9d","first_seen":"2026-03-23T14:50:27.3458Z","last_seen":"2026-03-23T15:24:17.568918Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T14:49:53.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 20 Mar 2026 21:35:03 GMT\r\ncdn-storageserver: DE-1142\r\ncdn-fileserver: 1209\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/20/2026 21:58:31\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e72f78a3c1975be488e42330c6d04ce8\r\ncdn-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6o3nOL7ud2fQRPHlfJd4nMm35dCeJunONciNKcS59RJWKmIHkxmtAgoTtARp%2FfH7HEYDudqEFoiw%2By8lokS1ObofrZ6LfOBvcdZsMA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e3ecd2a3890fd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":64759,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34827), with CRLF line terminators","md5":"6ab9c55b8639216faa67be86e08c5b5f","sha1":"e7363487e64d87497316879c42d6e99ff717f59a","sha256":"49fedbdd3b2b5f5215a3a60be2b362f33fb90e0a5d1547f0faf8e0d10de0bb59","sha512":"2fc138ab48d88b645e03b2d2ea9ce0d63a7017f66b411985775f7e38dcfb2e630b914fdc6e202dfacfd93ca5507f346c276a437d56806481cf5284d466ad92b5","ssdeep":"768:ShTPQcGrEa8lwC56TuKCCUHZRc+Lu7jVGG+D8P91VEa8lwC56M3dcVSiUomP:2GrLKwCKCCU5RXLu7jusLKwM3Y/e","tlshash":"1153e7f2e7c4517601174fe0f23ab73975a7907ecf0789886af89ad4a751dca8c15c88","first_seen":"2026-03-23T14:50:27.347458Z","last_seen":"2026-03-23T15:24:17.572662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":75,"dns":46,"connect":8,"send":0,"wait":31,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/gtag/js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /gtag/js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 675517\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 20 Mar 2026 21:35:03 GMT\r\ncdn-storageserver: DE-633\r\ncdn-fileserver: 1244\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 65f832333da63575aed6cc441e8f30ee\r\ncdn-cache: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAFPbIRUyj9CYW%2BofoFxiszVe6wrcHfxEfHFAmJe1DOgYm8bspwnjsEfUpDB3haNaBTMPOauJ1mzkyS%2F5MLlERQiKG2Nnu8gUr80sg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece3f5d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675517,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (61526)","md5":"f5a99d57fec4eeb28612383b9d89f528","sha1":"0b5f13df2dc89db67fdd03a745db76177c5897bd","sha256":"acc55a554e9309a31187756039c35b8f3b2e2a9d9aad838ecff06252f4e79e72","sha512":"733954b7f05717c46d93690979519f87196e75715a08ed28f3b553fd6c10634a647301570587c9a204d0cbca298d171b29731035d1e5a4affe201b7bfc78f834","ssdeep":"6144:sfcYBxwD0Wt3eWAs+7eHNsi8ZFBOPsEDC1p7Y2Wevo6dDFFuGU7UO31uRF:sfcYBPWt3e3sVNshYPsEDCsFS","tlshash":"cfe4735debfb2825a223b07c8b6f9809ba344847149ccd847d8cd1945f1853987fabed","first_seen":"2026-03-23T14:50:27.349249Z","last_seen":"2026-03-23T15:24:17.577987Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd87-1ed48\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:03 GMT\r\ncdn-storageserver: DE-679\r\ncdn-fileserver: 1247\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:40\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 91bf610d024bf03fb366f9dfaec2d499\r\ncdn-cache: REVALIDATED\r\nage: 310\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sBgz%2FF6h1nT5EQ0%2BUY5%2FGSkjEcMDKylT8ianf7B8Cv%2Bu9%2Br1jVF%2BoqnoLcFVZwQuaRmOOGI0KBI4AniIhsBjuVoIBJ9L5eWoG0lEOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece3f651806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126280,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (804)","md5":"855c9c216e0d546ff91c2cc95ccd0d26","sha1":"81a826d1f1769300094717799811d8e7ba85f063","sha256":"023178c1f9a08b3559d50ab4f37c18925319741f7d33d93349112ac64820c3af","sha512":"a0a0ac4be7b424a690150d97113af52ded0c351d2f0be71e396d13b7312e491160e563ac5d70a4abd58cd03c80158efe7b03d7dbfba471a51fcf0936e0b49bb0","ssdeep":"3072:FBjrbW9qW2aT4bln/U7ilm+5yOYEOnXfU:FBfOqW2aT4bln/U7iY+5y/nXc","tlshash":"5ac3508976e721319227f0be8e6fcc09b174544f168dde057d4c82a59f148389bbafac","first_seen":"2025-11-21T23:26:19.639598Z","last_seen":"2026-05-16T21:36:28.448534Z","times_seen":7,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/js/webflow.schunk.36b8fb49256177c8.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /68b079c8e8fee1a63c705d4c/js/webflow.schunk.36b8fb49256177c8.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd8b-f2d7\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:07 GMT\r\ncdn-storageserver: DE-634\r\ncdn-fileserver: 644\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e2efe5ec3a04bdde7da2a6e738136623\r\ncdn-cache: MISS\r\nage: 310\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQ7JBNRMqx3vAQhDQf10z9rwX5ZA0%2F19Ngp4r8C6uc7aRF4RFomZOUh7TEdGFbYy9eHnxUhYUQKNhThfMIRkHvVCnoYwyRiYSPbR9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece3f691806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62167,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (643)","md5":"57f696f55d9bfeb034d3d144f98f95f2","sha1":"777dff549fe0338320db863654851717c490e2bd","sha256":"817560d636845ec2e48f3c6fd94f5cd5dc1b6db6aecd80f09301cc7913631739","sha512":"1bcd3456594739c52dd7eb8ca7243e6866cca43481e16cb52f98a918cd3afa1a2020e81382981f29a9a7634ca08c85303dc86d12177c1a11dab4ca60438d8935","ssdeep":"1536:6y1mj3mKKUvFcKDOpl6QVtM4kD44AUowT0xz07CtUF:6SUTco4kDpAyT0xz05","tlshash":"ab5399497af3b1a4a213f0b8c75f9c0ab234549b158eed45794d92e09f60c7887b9ecc","first_seen":"2025-12-08T03:29:50.090719Z","last_seen":"2026-03-30T11:55:27.058784Z","times_seen":5,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 20 Mar 2026 21:35:03 GMT\r\ncdn-storageserver: DE-1142\r\ncdn-fileserver: 1209\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/20/2026 21:58:31\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: dcf5934752303f5c9a535f5de550c9c4\r\ncdn-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OXJu0AlevVyIOUU%2Fchxi%2BvaYY81mtfgZwmufw7xq%2BYNtrT9Kt1vSYCD8ljXupCTbc9%2FAe0jy8BaKCErbA6TfyhxoROFIYRsF4m1Zjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e3ecef9211806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":64759,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34827), with CRLF line terminators","md5":"6ab9c55b8639216faa67be86e08c5b5f","sha1":"e7363487e64d87497316879c42d6e99ff717f59a","sha256":"49fedbdd3b2b5f5215a3a60be2b362f33fb90e0a5d1547f0faf8e0d10de0bb59","sha512":"2fc138ab48d88b645e03b2d2ea9ce0d63a7017f66b411985775f7e38dcfb2e630b914fdc6e202dfacfd93ca5507f346c276a437d56806481cf5284d466ad92b5","ssdeep":"768:ShTPQcGrEa8lwC56TuKCCUHZRc+Lu7jVGG+D8P91VEa8lwC56M3dcVSiUomP:2GrLKwCKCCU5RXLu7jusLKwM3Y/e","tlshash":"1153e7f2e7c4517601174fe0f23ab73975a7907ecf0789886af89ad4a751dca8c15c88","first_seen":"2026-03-23T14:50:27.347458Z","last_seen":"2026-03-23T15:24:17.572662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/ajax/libs/webfont/1.6.26/webfont.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /ajax/libs/webfont/1.6.26/webfont.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd87-462d\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:03 GMT\r\ncdn-storageserver: DE-756\r\ncdn-fileserver: 1240\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 437d9b9efdd2d255a08440f65b3fcb90\r\ncdn-cache: MISS\r\nage: 309\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qsG6LuQJ%2BJq4tykjXWtJ4nROusTHKCvgg%2FX3KuVIHlyxb9sIQnkBOK7z%2Fe75nMbKES6w97nMuJtAmZOMg9zq8cL%2FJ7OyMB9iQH5adA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece3f5a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17965,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"def8d24fc0849b28c41029e4c10361e0","sha1":"0edb1c24734b63b9e0a9fe4870d78db872ec5856","sha256":"e8ebaf5621d0285d223eef93a80fabdf255134d1ba8762c1dda2190bc5e4b901","sha512":"d3105a952eb6fe30ecc6a85839747b77cdb08c7f5f818a8e00d2aee09df73f4e530a587c5b7c6ae7d7ec1ad2f4bd78fddd2bb8846edc6f25bc7dc35d3e608778","ssdeep":"384:sTq5MOMlc6Q0eqr2jWaIB2tgFb+x5Ia+G0Y415Bj2zCAnMsPxb:sTKMBt9HavtgJ1WxrnT5","tlshash":"b282fb0eabe72429e023b07dcf6f98147524850f1499cd99398c96e4df245394bf9fac","first_seen":"2025-11-21T23:26:19.637134Z","last_seen":"2026-05-16T21:36:28.407771Z","times_seen":8,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/_nuxt/assets/index.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=14400\r\ncdn-storageserver: DE-660\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 404\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/23/2026 14:49:53\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\ncdn-requestid: fa5f6b3ee6aac1f9d8e49db34e695f26\r\ncdn-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dc1MeK7XYYxk7XQSuX7V8iHtmyojZEI4L1Iczp6NVwLMtUHJiKwUn%2Bc8cHeyJa22HGgCWdAoVBwuv402Nak%2BGvHR1D1EfYEqH%2BeREw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e0e3ece3f611806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/npm/swiper@12/swiper-bundle.min.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /npm/swiper@12/swiper-bundle.min.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd83-33004\"\r\nlast-modified: Fri, 20 Mar 2026 21:34:59 GMT\r\ncdn-storageserver: DE-1141\r\ncdn-fileserver: 640\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 05623fc052f8ddd94d8c17d1034259b8\r\ncdn-cache: REVALIDATED\r\nage: 310\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70Pz2mzP%2F2QUumZ5WG84p2w9qWp4dOGYQiuxr1fLkgmzvKKqgU8qMT1A2udl%2FMMh8uLImVgEpVr%2BSWI949Hnqq3xDz%2BFOxUle2ogqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece4f8c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208900,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (621)","md5":"394ebb9b1551b4d96ffb7efa09a924e4","sha1":"b3189e4adaf46b9af92040a98962394ad6636231","sha256":"3b2f9456c5ad3f01bb798db785fcaec5cd52627c9d291b9d0ff96e6a105daaec","sha512":"c00ad49498dc6c64828e254c87c6c9b037be47c17643ad8ee74c7d42850c87ce2d2411e8825f44452c91e1b60ac0651b0dcaff5900d4bbbfea05e99edac03b24","ssdeep":"3072:0+WHdne+OwIwFGuyP9Dotk0zBH7ruYobX:0+yeHwFdtkJX","tlshash":"e014710a52f2253841a7e06e4b5fc811737a940b7a4adda83d8c4a589f5d83c47f9ff8","first_seen":"2026-03-23T14:50:27.360709Z","last_seen":"2026-03-23T15:24:17.609628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/script.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd85-ead\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:01 GMT\r\ncdn-storageserver: DE-757\r\ncdn-fileserver: 1210\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ea1b31dd203cf1583323f8cabceb7033\r\ncdn-cache: REVALIDATED\r\nage: 310\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHYuUS17FuVs9ttiOJ%2BNLe70bj%2BWS8W5sjPuDxZb3D7fhE117XDVJwmmccukP9VWnMq7dpD1kw1jsqrRfmvXf62CXdXyEg6W2SX1cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece4f911806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3757,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0bfbfcb61638d4a1d7ccfeb5bcce3d70","sha1":"a3a77565963f698f21408d190fafab41eadc4882","sha256":"bf785fcd9d492bf9bcb667e11b536a08bc0f9ab608532e65f46d15dd204d6921","sha512":"25509d9638a31c8ae389ed1b1b5571773ea5cd7f4a29e4b5078ca81369a157ac57d937ce8c30c1335241cdaa2e3f95779f30a475a4463d96178ff7bd6ba2fc5a","ssdeep":"","tlshash":"da713f4e43b6293c01a7a1be579bb7002d3a2143351bd8e9ba4c57442f5d27a81b37ee","first_seen":"2026-03-23T14:50:27.362645Z","last_seen":"2026-03-23T15:24:17.597335Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/68b444b8ea77044cbff02c2b_256.png","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:54.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /68b079c8e8fee1a63c705d4c/68b444b8ea77044cbff02c2b_256.png HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nCookie: _ga_ZQHPES9XC8=GS2.1.s1774277394$o1$g0$t1774277394$j60$l0$h0; _ga=GA1.1.1906541626.1774277394\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 4176\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 20 Mar 2026 21:35:01 GMT\r\ncdn-storageserver: DE-768\r\ncdn-fileserver: 1105\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/23/2026 14:49:54\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f08254268f616e55d2dabac5d30925c9\r\ncdn-cache: MISS\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p9HZKL6tpfqHyCGCFFqz%2FOpvEXYQOqMztTPPR%2F7gDTu%2B%2BggVG5Ger5TVZBzZKw%2FmCHkW1%2B99b700p6Ii6qHjYgIXM8NioToe5LhwtQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ed38f581806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"c798c262748976727fe8c47b13fbb671","sha1":"19a7a350af7c8d150885039c83f4a84697c193bb","sha256":"b7cc1c2133dd1efa0c1db50bf1063721a0426367ee46197f4f7997eafc0cb917","sha512":"b23eb96f13755544f7477d87949e417756ee01472fa92e2834611d5e953de31ced03816fb692ceb71a2aeeb0aab4c9c2c02877476db70cada516a45c9dada3a7","ssdeep":"96:1S1beOtuj0XNXVqPAVqCmITLygRjcz2H0TP5eOynpmW:1SboAdlqPAdmJ2j90w74W","tlshash":"4e81279b28c720db382eeca340f0a894a7c6758dc4116f80f1f8af6cd570b69835856a","first_seen":"2025-12-12T19:09:36.333396Z","last_seen":"2026-05-15T05:33:22.361793Z","times_seen":10,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/68b079c8e8fee1a63c705d4c/js/webflow.schunk.ff560088e0bd9e74.js","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /68b079c8e8fee1a63c705d4c/js/webflow.schunk.ff560088e0bd9e74.js HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"69bdbd84-d2e2\"\r\nlast-modified: Fri, 20 Mar 2026 21:35:00 GMT\r\ncdn-storageserver: DE-1143\r\ncdn-fileserver: 1211\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 6dcf737fa92ad146541044c67213f3fa\r\ncdn-cache: MISS\r\nage: 310\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1S3Uh2O63sci56rAcqtFNduoFx3Mj6LdgOg3ig%2FQEv3hmfmnuqRpi1mBgWEGAfnZAsYudtmg2Dm7i4ux43b8PHFW7MD%2FNdIa4fP1bA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ece3f6c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53986,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (721)","md5":"5bfe4e39d97983a5625a1d538f03b488","sha1":"642636f9926cc266fc4da1b559f7a9a9cf739cb3","sha256":"238ed1070dc7fff9df99148996e93e7a7260bd2995f8dbca03d320d9f0e71666","sha512":"739d0334701192073bc77745e9b3966a83c69a0a2d8f6bb2b947d9fee8bdad8bca04d36c71cd1175ed9261add357115f3a1aaebc7cbac274d372a4f7b81c9a67","ssdeep":"768:5JrKqEDbQSL/71HrYxEqWfO7tbNr5rMuWgW1dncSje9meT3UGhc6GmcFfwPRZO/I:HKqgR/71HrzqVvMMS0fT4mcMZ","tlshash":"a333509a6be374359123f1b89f1fdd047235618b158add093d1c92a49f1493883bafec","first_seen":"2026-03-23T14:50:27.368074Z","last_seen":"2026-03-23T15:24:17.612057Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"river-s4.icu/river_hero_1_mobile.mp4","fqdn":"river-s4.icu","domain":"river-s4.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:53.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"river-s4.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 20:45:44 GMT","end":"Thu, 18 Jun 2026 20:45:43 GMT"},"fingerprint":{"sha1":"53:C5:EF:D4:9F:DE:7C:47:DC:FA:21:9A:CF:69:7E:C9:7D:A7:60:7E","sha256":"DF:FF:BB:38:20:DA:11:A8:D9:16:B5:28:67:AF:BD:B0:62:C4:44:1E:FD:15:83:DD:BB:B9:44:6E:A9:37:B1:F4"}}},"request":{"raw":"GET /river_hero_1_mobile.mp4 HTTP/1.1\r\nHost: river-s4.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://river-s4.icu/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 23 Mar 2026 14:49:53 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 1600217\r\nserver: cloudflare\r\ncdn-pullzone: 5521526\r\ncdn-requestcountrycode: SE\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=14400\r\nlast-modified: Fri, 20 Mar 2026 21:35:00 GMT\r\ncdn-storageserver: DE-660\r\ncdn-fileserver: 1210\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 725\r\ncdn-cachedat: 03/21/2026 14:03:41\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 2e2f8bc93c785d15fb29cdcd27b4c87e\r\ncdn-cache: REVALIDATED\r\nage: 310\r\ncontent-range: bytes 0-1600216/1600217\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghLqVgN7jBzmNJpBCO3yedDUjwduYZFDqBo7U5977OfpVLN61xA0uriUFersqHukQrO0dDsMS5StglJEFH6Eq5hxQzJuutOtj%2BDU0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e0e3ecf6a651806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1600217,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"da3fb37366763656c26ca18fdcc5a5f4","sha1":"934971e6c60a7b9467ccf38380e7184b6c2f397b","sha256":"79cbfb71b6fe6be9f7491d4409d2b68d4319b4a3391ab5f6f7436fa26ba45f3b","sha512":"31819d6f121d18ab7e76e2b9703c67e852466ba3c810eaca0a224a75c49c4dfe5a09068fe758f8e856eb630dd6979e3f357b8dd24985a84d2ca4979a999ce679","ssdeep":"24576:oC/SSv+0Mdjs/boy1cm2P0N6UqQDRltQ01O78ASZiq9Ry:h/f+h9y1i8NiQDjG0u80","tlshash":"a52533d369d12ac6cf2092769193bb043a07bc6b5aa293c377ee35159fb83758b43c41","first_seen":"2025-12-12T19:09:36.323561Z","last_seen":"2026-05-15T05:33:22.375424Z","times_seen":10,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link-verify-7033.vercel.app/api/v1/config","fqdn":"link-verify-7033.vercel.app","domain":"link-verify-7033.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:58.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /api/v1/config HTTP/1.1\r\nHost: link-verify-7033.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://river-s4.icu/\r\nX-Config-Id: 69bbb0a3fcbed86f074e521d\r\nX-Client-Source: Perpetual-Client\r\nOrigin: https://river-s4.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob: wss:; frame-ancestors *\r\ncontent-type: application/json\r\ndate: Mon, 23 Mar 2026 14:49:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FotJF3kw%2BFTKczoK74kTEyALCPcLdBM18Z%2Bau%2BOrGjXUr9bYeTS9zM93vBbC7Q6n9p1uJipsUbN8rbKE%2BifWCGLATmSmpI8J8KoWZ%2BnrauJcK3C8N1Xrcq7juc2xj7Y%2B1w%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin,Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 54\r\nx-ratelimit-reset: 47\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::d7m7f-1774277398303-f430e19f80c9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":901,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a4dc2985eac424ae837086728454f7cb","sha1":"0190f8e5e9c22ecbc8e9de68fcba376267c6b44a","sha256":"db4513cc93f5ae47f7d798e45365042bd8893887c4afb8ce36f8caddea882095","sha512":"399e64425d2af65a43ea0147c6063a92ea2cfe858ee9fd5df70137f5acc7ec28e21139ddea86b51806e32f8017ebeea0e602bcb00c8108476d92205371f2f1b2","ssdeep":"","tlshash":"9e11c011423c0937060657e3a41a0666aee6176263dd24f8e99ecd0b82caeb4b3209d7","first_seen":"2026-03-23T14:50:27.372678Z","last_seen":"2026-03-23T14:50:27.372678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"link-verify-7033.vercel.app/api/v1/config","fqdn":"link-verify-7033.vercel.app","domain":"link-verify-7033.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://river-s4.icu/","date":"2026-03-23T14:49:56.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"OPTIONS /api/v1/config HTTP/1.1\r\nHost: link-verify-7033.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-client-source,x-config-id\r\nReferer: https://river-s4.icu/\r\nOrigin: https://river-s4.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Mon, 23 Mar 2026 14:49:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrrnG%2BzN%2BM1Vxv3NuvAkz92rBgE9zMF4YGGaCvvWLMOHhl8h3nObjOgrv6G4ifHFc5tbXIxwEHBR2QvbT5K%2FR1cN856uiZUQw%2FZf69Iac8oMN9IfZr1uDT0%2FQp0GGzbTNw%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::d7m7f-1774277396832-bdef3c5bd433\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T18:33:32.683565Z","times_seen":16393053,"resource_available":true,"data":null}},"time_used":1469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1457,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}