{"report_id":"b5b42f0d-ebbc-4ff8-9c59-1bdc8a5d0622","version":0,"status":"done","tags":["suspicious"],"date":"2026-08-28T14:26:23Z","url":{"schema":"http","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"title":"Revenue River – Let the cash flow","dom":{"size":39864,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29339)","md5":"091113bdc39f99d49cb504947684bf96","sha1":"4cceb680bb41a9efc3455d3d21ca66e01238f03b","sha256":"eb03cb8c149da691a4d3b81b73bd70b6780a2a46677d8d17c923b6bb70f6639b","sha512":"ca1e2a27c52efbff68e37c0d4865814e8f0921a04218ef75c47c657128a9734e3c58f5e289b6c3f19e2fdb291b9f112d2902168e1b5c28fbcd0a46a630f87fca","ssdeep":"384:tWq/QsWjphiIE9gCTym1o8lWYaB3s2v+dr0sxpWo5Ym3V4cIXdqLIJk:7/QsUpJG7q0XHWo5FKcgdqLIJk","tlshash":"3f0320728112113f017f9dd4f4705b2aa2fbd30ac9136186a2fd470d9bcff559a91aac","dom_hash":"domhashdc8dfaa77d40fe4c60ad69d55632c221","first_seen":"2026-08-28T14:26:31.681015Z","last_seen":"2026-08-28T14:26:31.681015Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T14:26:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-28","alert":"Detects file containing Telegram Bot API","trigger":"revenueriverwork.com/assets/index.23aa5ba1.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"revenueriverwork.com","ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-30","domain_rank":0,"first_seen":"2026-08-28T14:01:36.40378Z","last_seen":"2026-08-28T14:01:36.40378Z","alert_count":44,"request_count":43,"received_data":10264089,"sent_data":25525,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"gateapi.reriverapiue.sbs","ip":{"addr":"172.67.181.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-20","domain_rank":0,"first_seen":"2026-08-28T13:59:31.126238Z","last_seen":"2026-08-28T13:59:31.126238Z","alert_count":0,"request_count":1,"received_data":1077,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":81608,"sent_data":697,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a13cb1f08be74fc8639439bbd26aae07","sha1":"413ebdafa3e2217d63113e771c2b38af8ac7def0","sha256":"e5c49273fe8f469e97cfa5cb76b4ba99a8dc57559d9f7d8e617966089ed60394","sha512":"fd1e2cde421fcd1d41d2bb5851d678c88235bb5fe65734545c36229f890e029fc918c125cee9e0729cadc3b13f443db0eda890f9025dd48d2285427951bae747","ssdeep":"","tlshash":"33c08cc6a0d72d101612681028ff28e4a0248036784c1b02ac99d8892ea34b48233e98","size":152,"data":"","first_seen":"2026-08-28T13:57:14.5583Z","last_seen":"2026-08-28T14:38:39.831658Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b0bca2300055e35a1fcf4881d9bee0b3","sha1":"5da577c7759f3321ee9be9cc628812cf4cf67c65","sha256":"23c6283cdc3a9fe64122913872164e7447e36962739647d74e6d1b7e56c941e1","sha512":"adb34897251aae90e08560f96c177445f838097b5dc999c3811b5b9a1f89e3f041586ba806a39a443232b91d6160bf208e40ef1cf9b738956091abfce1b645bf","ssdeep":"","tlshash":"50c08cc5e0c22d001612641114bf24e49024802674481b028c96e8892e224b09233ee8","size":140,"data":"","first_seen":"2026-08-28T13:57:14.522171Z","last_seen":"2026-08-28T14:38:40.065507Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-08-29T17:36:20.836695Z","times_seen":50225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f1a256907f52b172084ebd717990af21","sha1":"43c5a74646f26994d1333b59e8a57edf634b1516","sha256":"176df9dffeeba0ea05214a39eb7229db3199af701069844a12f4b174ac3a35ac","sha512":"b4d309092cbc9b6c4e57d41f505611a5dbf49f3fd2e5facadf70dadb2b0dc78ee8d68c5689c3ac25d1bec1077a5f4a92bf82643147c2e5d7529149d73fdada58","ssdeep":"","tlshash":"5ec08cc4a0d22d001602a41010bf24e49024402670481b828c94e8483e220b08233e9c","size":136,"data":"","first_seen":"2023-07-03T14:31:51Z","last_seen":"2026-08-28T14:38:39.795034Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8ccfd8b272b5a0f9f78a0b1476798b80","sha1":"9f5b841399dbabb13f9b5782b81b3a8811c59658","sha256":"c49a71f8097273af5f441b08ac1befc74a522bec934ea1c886246b7217f618b9","sha512":"d6ac42c5b67280227ec7a59768d0d452baa5e754f2c58d46db177c9535304498078269cb29d48e6c8869ee43f126b7190e0584f994c95d2a970eabba9d2ca8ac","ssdeep":"","tlshash":"cbc08cc5b0c32d101606681114af28e4a0244026b0481b0a8cd4d8492e620b09237e9c","size":142,"data":"","first_seen":"2023-07-03T14:31:51Z","last_seen":"2026-08-28T14:38:39.959586Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c8da13486f9d5219a009f964fb35fc0e","sha1":"9b93f1bfb10f89a9575152f14e87dd67a21ab08c","sha256":"cf64d3f76cb835ab79349a992a61c389fccca1438f5ab59032f75003f680cd24","sha512":"f8778ead6fdf11becce4e5f8d00c127c34addbc793b9a1dc7792138119027dc7d123256e1a8c79de53e96cc77e64277f862c5600deb2607e3abd33d8a0eb13d9","ssdeep":"","tlshash":"e9c08cc4b0c26d001602685014bf29e4a024802b70481b028ce4e9492e220f49233e98","size":141,"data":"","first_seen":"2023-07-03T14:31:51Z","last_seen":"2026-08-28T14:38:39.816461Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e273672d1c71ed2c9d369cc075d49649","sha1":"591c3d74a9bdd1fe1051571ecdc182fa42110f95","sha256":"722a7bfc0c14c8e9908cff3bae89e6f115f28e67ae147467c0f3d76f89177a7b","sha512":"5ffb0c0520303b2da0af67e90c0da5cb21168dded0cdb9ab8c65f987aca5b30b022d12cd8b284ba91a2178cd9dc7073543ae3e3a890b25fefef83d375fcff7e8","ssdeep":"","tlshash":"82d0a7c470d63f40b5065512a56f3ed8d0249427764c5b95cea8f8953ab657483339a8","size":224,"data":"","first_seen":"2026-08-28T13:59:37.092237Z","last_seen":"2026-08-28T14:26:31.719455Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7e5d5bebabc0d83e0d3621162f971747","sha1":"a4304bd93e634b62d466a24cd9a1b663a80d96fc","sha256":"ad0a3ba2eea171535c93d9e6eab5da2398172d961ff8ccac67045d60c3b2ebfc","sha512":"77e3000791219e949f0b034787a8fe80f0fd377476e53b8a0442cb9398f9a0a255ed5cc1a9477a16f350198eed4bbdf79fd75853d6eb959273f3eb1a113b6e37","ssdeep":"","tlshash":"53c08cc4b0c22d001606645120ef28e490248026704c1b029dd4d84c2e720b4a233ea8","size":142,"data":"","first_seen":"2026-08-28T13:57:14.569201Z","last_seen":"2026-08-28T14:38:39.788813Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"394a7e6ddafe1fb8b7742e301460e9b2","sha1":"8edff08c11c8b19c827282f0b0c571e739248c57","sha256":"74f5bdea54a32aea55e0bb1f8466bd7de335fe18260bb978ff69550f6d7be92b","sha512":"23667e2b75f62f25b392e83a1c4d6df0235bc8b29bd10bc1551e2c0734b750f3e52aada439a621e2b5b3fa9ca75a148664d7ddd74dbb637dcfce846e7a9985bf","ssdeep":"","tlshash":"d6c08cc4a0c32d002642655018af24e49038802770482b42cca4d8583e234b08237eec","size":140,"data":"","first_seen":"2025-06-30T05:32:08.820909Z","last_seen":"2026-08-28T14:38:39.756072Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"198fc45ab8737a00127a5de30800999e","sha1":"b8d8c3a8ec5cffa25d3959eb5d7a3e5c142b081a","sha256":"fd8f80bfdb6aef53945da76575f18b0d829e7e92398b59068f28c747be34d89d","sha512":"5225b6414fa3aa18606b4a0768f3ef3ac38443774b397935635048bf0b80670f2d182cf1a682eb3b08e69d92cf181c4846a75763ea61d687a616b61df475ea23","ssdeep":"","tlshash":"04c080c8a1d33e1155016524547f35e450344016705c1b128ce4d8492d620b49333ddc","size":156,"data":"","first_seen":"2026-08-28T13:57:14.530652Z","last_seen":"2026-08-28T14:38:39.703875Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b9e7d0d2aec23a2de4177f243f112665","sha1":"1fa94871c4c06bff59052d4a5dfa0f873a81c44a","sha256":"ee6282fe94d1c41ab950b8c4055ad449c3eae8807db1c7c982b09e54ebb03ac2","sha512":"a99a1aae5b6383b1a7b010819c451f228bd2e0e1df1d01ac7c144fde36fe4d5bebe19a1b7069b6889d077e2d4fea06c50b63d893178106986403e28b9460f5ec","ssdeep":"","tlshash":"ebd02e82b292be3017152051286fa2e4e03898a2302c2e028cadd8192f221b8c133eac","size":250,"data":"","first_seen":"2026-08-28T13:57:14.525203Z","last_seen":"2026-08-28T14:38:39.720619Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dbcd3d44aada74fefbed378a9af6cc43","sha1":"9229417d3386f0604f9b0f6c26299ca15cd84814","sha256":"a2a322324822cd570c731625e702022b50d389b925ff23372afbf406ade7e9b3","sha512":"2f3401f49cbc486e177f02b5daa101d0ab3874c893efb9af41399d880d771ecd5aa6d006dae4db3115abce87368bf303bf41da3110e918979bb2600ccee7d0a7","ssdeep":"","tlshash":"70c08cc4a0c32e205a16641019af24e4a0244027749c6b52cee4dc492ee20b88233ea8","size":151,"data":"","first_seen":"2026-06-18T14:01:26.932293Z","last_seen":"2026-08-28T14:38:40.119558Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1bc3b06019b20ad8384545658c6afb3c","sha1":"758c6d2388346b5e9907918eb2d29bd4fc5bbca0","sha256":"fbda754a5ddbd457cc1616da2f5fa072371f4c6c53a6a30de035e4d1c0bbaa7e","sha512":"6e9df8ad3b3bb52936b0257b004def453378511507021986b6a0ec3035c87871186c72461db636d542b616d6a235a873504c98224ff4a6fcb58d180c81ad2bd0","ssdeep":"","tlshash":"d0c08cc8f0d23e201a06682424bf38e4a034403a744c1b67cca8d84a2e234f49333ea8","size":159,"data":"","first_seen":"2026-08-28T13:57:14.533698Z","last_seen":"2026-08-28T14:38:39.793471Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-29T02:39:33.808055Z","times_seen":4545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"44695009e50743a21479b87bb8d12a76","sha1":"48e34942a587c65d3a6f873b92370159cce34347","sha256":"4422fd1d860077f7b1c72cbf48efc47048b549373f9c79b3fd90096cb8b1a93d","sha512":"23c1755e93031a8a0a822d1412da2ed14df4ae7ef25050d1fb7d04872576bed5b03c7a93e118cd4b200f32284fe509ec2d03fb9d996e32a42458e379876e041b","ssdeep":"","tlshash":"ebc08cc6a0d62e119616a93050af25e4a0344836748c1f468ee4e8892e631f49233e98","size":161,"data":"","first_seen":"2026-08-28T13:57:14.51023Z","last_seen":"2026-08-28T14:38:39.751187Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b0e00b7a06859947583657b208ae98bc","sha1":"222852a29a953fd9fbc73bc6d7905d06679a7e44","sha256":"1c0ca6414068c837b3438d0922ccb6225b043b01986069f0a82a74dbbeb7ef5e","sha512":"4308cfa8384d844148deb822945bae9956db3e25853520b0d96373fe94bc03a8e9559e2a22c91d11587abf32a5cbf44a26bbdd174de6f6505071eb1c2effef04","ssdeep":"","tlshash":"78d02bcaa29669301a0d6945635b28e05130102aa4481b868fd8d5183f620ba4333fe8","size":266,"data":"","first_seen":"2026-08-28T13:57:14.49697Z","last_seen":"2026-08-28T14:38:39.791843Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a51dc84aeb8c4616ff64b6c730608b54","sha1":"41f4e5c31d7d9ae4da4d52c59963b1bd7bd9c5bb","sha256":"edbb081e9c3c772ef25480a90cb55655d423302adf0364dcd9c1628ca15c2153","sha512":"f94dcc8b7c22ad7f5ab064be2562e5b60740ba57e489f02bac615f0c0a070c50c9f34dcb4cb48ae9ba6dcc7cff11890a2f53d65cdf65f7715bc983fcc6ebab7d","ssdeep":"","tlshash":"b5c08cc4a1e22d001a22a81050af28e490344026b0481b828c94d8492e231b49233ee8","size":142,"data":"","first_seen":"2024-10-04T10:59:16.158343Z","last_seen":"2026-08-28T14:38:39.766493Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c86e160c11fad3ac7a1523d8c7ac4e48","sha1":"bb095a5014cdc0a323457a79ac634e52d667b7d0","sha256":"b6a290ef9b6a91e44174018abb347d34ed47aa1b61756ebda26297e0b65773a4","sha512":"f545bc0049b1e5877c4f485b370b60da2ca674dcef6ad9c4fec297978fa06cab2ba5b0ebfdd5081ccf5e6bb2b2b05484f1e9843d7f46b06c8aa74fd42832f0ec","ssdeep":"","tlshash":"85c080c862d26d101d22a85510ff35e5d024442ab0481b42cc9cd8493f133b05137ee8","size":158,"data":"","first_seen":"2026-08-28T13:57:14.540327Z","last_seen":"2026-08-28T14:38:39.760444Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8ea72cf19dcc63c6b36cf63e29f8ed45","sha1":"e570b10d5297fa2378bf82812d4a50f876d484e7","sha256":"aa49d554a3a634467f60d0f8674f75a7888d02d6a410e0d611a4bdf35e603451","sha512":"a73f7c97e444b6025eb0913d4b3af8437145e21bdd9c127cff4fe346a489e3f758c06b1c4a14a4cd71ecf1f9dfc88a27f4b8ba0b5f1a2cc1cfe5f873d2ff194d","ssdeep":"","tlshash":"9bc08cc8a0c32d002602aa1024af38e8b034842770481b129db8dc4c3e735f09233e98","size":152,"data":"","first_seen":"2023-05-26T21:07:27Z","last_seen":"2026-08-28T14:38:39.821483Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d1643a9b8cfc754d390e8ff533292813","sha1":"8885a02a97285b9a6a6188c6347b3ea11b70ae7e","sha256":"cc0bcde7a69f1844a6a2516c86d51407bfde6863028c921d764f5552d54c66a5","sha512":"685a726f32eb37363d414403a0b4b616afbd08da01d16255f47773ba9b7d987cd498332b7ec53c9ceaeeb26df0b34ad3ce65eff0e73693df1f8504777dbee19d","ssdeep":"","tlshash":"f8c08cc4a0c36d101602681011af35e490284026704c1b06cc94e8483e230b09233eac","size":141,"data":"","first_seen":"2023-07-03T14:31:52Z","last_seen":"2026-08-28T14:38:39.780324Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"21e5d748fca52fda47c584c2655ccd46","sha1":"5dfe839ca3dd735c6c43507689b242e486627b74","sha256":"57a850dc4bb989d685c1468ba6169b0d3aad16a09006620eabcefddff9eefebb","sha512":"e97b061211e138846096fce82c027c04ce49d1519fb71af4c39a55c8c3c4eb6b74d5ed44d251ca37267abf6ada2cb46151ad1092e7b7c8cd4f9d8eace5d5b382","ssdeep":"","tlshash":"f6d07d8955d628101e10b609288f15d411244425309d0f4b4d90e845376307c81f2e9c","size":274,"data":"","first_seen":"2026-08-28T13:57:14.535839Z","last_seen":"2026-08-28T14:38:39.729935Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9aa3a0433366038225f62e6a8ae451bc","sha1":"4d5c683ec8ac69f96e26146bdb4a018030fc58dc","sha256":"62d6b440146a37f7fde42bb9e7e45ce0bd31330867cd028fbdb1180b0ad1ca96","sha512":"008153b16d437ba51f9c7a5398330fb6633319af82cdd34538e29c626021c6d0b89c9070d8479b61b5a83de941a8e4d57525dfd770a9ac6ec40ab47492b35e8a","ssdeep":"","tlshash":"f6c08cc8a0c22e805612a92024af38e4a034802bb44c2b429da4dd4c3e7b4b48237edc","size":154,"data":"","first_seen":"2023-08-10T22:05:17Z","last_seen":"2026-08-28T14:38:40.049869Z","times_seen":245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7a5e7613dfefad832b8af51a53df5191","sha1":"8cc8174831f4839b423ec42a82e03881e7e81f18","sha256":"99eda97311d73aa8ef7513ad9a28cf68db534db35867f63d601f741b89b26c34","sha512":"4ac65afa7b589948b08c1da4a8dec8fafe0de1b15ae9e881fe22f92f37a23d26ba041b4983d2a37e0cbf6169228f1af0afccf4f5aad54e6d325d58caf2f9fceb","ssdeep":"","tlshash":"97d0a7d1d0d21a111916a8b2946f2bd4a028001af045568199b89a6c7d154b05127e48","size":210,"data":"","first_seen":"2026-08-28T13:59:37.124565Z","last_seen":"2026-08-28T14:26:31.732021Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f8665ae18ab6f5fe3929cffb60e74933","sha1":"67b27c5c86e3445023e3a526cc5374a67a4b19a9","sha256":"55558eab3a6e1d60fa830d6f5d5808be1b512a4ce1cd0e4f277ef28d58bac078","sha512":"1d47b610d9703592364b6b8c9018a18b2617df16398bbaab0a45dc18cadf69351b1ccac47dbf3b9970bce50a33a5cea0b4c8241483b8339b67f09e746b279a17","ssdeep":"","tlshash":"c0c08cc5a0c22d002602641110af24e49024402670481b028c94e8493e230b08233e9c","size":137,"data":"","first_seen":"2023-07-03T14:31:52Z","last_seen":"2026-08-28T14:38:39.715096Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c58f1c5d0c88e0b3d57f01b60ea43f1c","sha1":"e76c79408176beb0998788725843b7c2236e2070","sha256":"26c5cdc49b0f841814d80d4c814bb9bfa9e4b4f35480c500bee38837686d35df","sha512":"2372cb02223d0c8cc6a91364cc87c65e79fe5740384e7584f6c53468820a3672839606dfc636e8aa5890fe7df6d539d239236a22fac02c18066862d77d69ffbd","ssdeep":"","tlshash":"39c08cc4b0c22e002602691110af24e4a024402670881b06ade4d8592e620b48233e98","size":140,"data":"","first_seen":"2023-07-03T14:31:51Z","last_seen":"2026-08-28T14:38:39.968369Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"48158b712340eaf3ffc6a0953a9a3c15","sha1":"670452462ec42fd6fddfd816bfd0a1f556b0c079","sha256":"d80c4fd95997a4d9875ffb23e1f272231cca71354a91ff3ead4d8a55fec8384f","sha512":"bcefb91c177f429dd55bc634f14548cd8449d917e911df4ee07c756de539eb058fe37df44e0c5a8b7ad209fcf043f8607eafabc3f3c882e6b2860bae3a9decc3","ssdeep":"","tlshash":"6fc08cc4a1c62e006a82685112af28e4a026802a714c6b02dcd5e9482fa60f5e233edc","size":161,"data":"","first_seen":"2026-08-28T13:57:14.512423Z","last_seen":"2026-08-28T14:38:40.099546Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"42dbea53539195f394b462bed7c86292","sha1":"e9ec30ec339ddc5979b223481c3120415831e5fb","sha256":"9bf1c85f7ec4e4ba83aed4fbdd246dfe7696ad5ee64de10fa8c2befd33dacc67","sha512":"218ee6c155263a2d5f63da4efa7fa938f33de3eede9ed401255ca749413620611ef21383872ce4096bd8e69765e00d83777f86b9af483e307815e35aef758db7","ssdeep":"","tlshash":"1ac08cc4a0d22e001602641010bf25e49024442670481b428ca4ec882e224f09233ed8","size":138,"data":"","first_seen":"2023-07-03T14:31:51Z","last_seen":"2026-08-28T14:38:39.764319Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3bc9adfe363152f633c63111dde45ced","sha1":"0f00f0d93a6a3185d78a829c88fe2d5dad1970a9","sha256":"5d2d42ab8d7ee4204a58fd6965d207471101ef15acf26c28b1e9f97c11b3219b","sha512":"3b983f73c48c05bf665e03eda44d185a2340655159cb8deeccf6f491e42e4b9f76a6ec9579d6bae81c54cc62df0a863f33e292033cfd3524fb54c95c4945bb99","ssdeep":"","tlshash":"49c012d8a0862d10a701a514256f69e49064802ab4485b929dd4d95d2a921f48133ea8","size":176,"data":"","first_seen":"2026-08-28T13:57:14.549096Z","last_seen":"2026-08-28T14:38:39.823828Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"261985c8854a6f14f26e6846603f2a5d","sha1":"56bba07d737ddf32d084718fed8ef53c9d471bd0","sha256":"bdffc87a8d09937fe4a19a4741551212a58a71c7a492e32873c8cc2e85f1d24a","sha512":"7c7925bea1f0391238a34c8dd4651d8112ed666f16f8167d29df110ed591bd141849f3e4a5a772e1d8ff97fff34c798fa64b4c0b7b3b6c9c464728c44fb0ae9c","ssdeep":"","tlshash":"27c08cc4a0c26d001a02741010af34e49028442670481b428ce4e8482e220b08233e98","size":139,"data":"","first_seen":"2023-10-05T08:35:43Z","last_seen":"2026-08-28T14:38:39.685811Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f6e2dba8637219591923bdd5ded8ce20","sha1":"aeeb8033c3a10b7f187c5304cbec6fe8b28f6022","sha256":"9ae4d546488ec6398011e4236786d48193cf736bd25ae8fc5d8978b2462afd1c","sha512":"5e51d18f25079e527a57372bffa3630e64e21246ef7f86b070679c12b69902fb0081338b706137a35d12992a57684671671fb3df2da7fe0e09a19552acc75e61","ssdeep":"","tlshash":"9bc08cc9b0c22d002a06b82910bf25e89024802bb44c6b028ce8d8483f231f4c233fa8","size":157,"data":"","first_seen":"2026-08-28T13:57:14.574096Z","last_seen":"2026-08-28T14:38:40.048202Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85f46faf4147aea70bf2eef963bce0a1","sha1":"f44e54ee800093e82096a697ea126f548f04ac65","sha256":"3ecca1f64c99825005b934519bd1c9ece59d94facbea8c710099690241731717","sha512":"31690ff22289305ca0cbdb14bef241cce726db0e961fbc2d3c322a103e32efcc1875439033084b39d8d8af549ceb302fb7623671c2d6fd8ed47943cc2a672a45","ssdeep":"","tlshash":"60d022cf0400c30517e29023dc03bd0061f312fb0440e4028eb10aa2ab2cbcfa207bc8","size":206,"data":"","first_seen":"2025-06-13T12:21:54.381621Z","last_seen":"2026-08-28T14:38:40.086885Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"458d965cde43d76f63df3db88fa32eca","sha1":"1722e96031b83fc95e03e28f35b23638ce589617","sha256":"f7aeee435428664be1ad7f8a0b60f4b49a480476d504ac9b5b8e734ad4813421","sha512":"5ddc87062f5d0fcb85f581c72c85d3a1588a7bafb75ee2b1fbeca861c7fb301d5f127657e10ffd1d7bab8b7cfe0bb84b5b13f4e23a6570e9d1497fd34c70fa9b","ssdeep":"","tlshash":"60c08cc4a0c26d002612642450af24e490348026704c5b038ca4d8482e230b08233e98","size":138,"data":"","first_seen":"2023-07-03T14:31:51Z","last_seen":"2026-08-28T14:38:39.746789Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f7415e134d5e7a2a5f81bce4ba2895ca","sha1":"c8b57db7420b97ef36a78fb6f17682409919eb8c","sha256":"80411cc12f9feca4d687f19d1f7c4545a43f807724cbd0ccf3f90f5038b3fbe7","sha512":"c2c467073dfc867a8665aa7aa5f15dce490e65cb65ef759fd2906f54daa52ad90b1b474d3ab74298b1f26ab0ea67a5e6debff69f71eea1eaeebe8d77ccdbbbe1","ssdeep":"","tlshash":"88d02bc5b2d965002a42155610af24d4d134c417754c06029dadc47c2e15175d3bbadc","size":246,"data":"","first_seen":"2026-08-28T13:57:14.492199Z","last_seen":"2026-08-28T14:38:39.752921Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cc0f8e1058f8f9de35dfc5d592123961","sha1":"361f19f33ae1b0574a82e676c8001a5d469cf26d","sha256":"70287ace8ea5931d7c86a7d5bab5142b0622795826f7da0b020e57348081fa50","sha512":"5a48b07b3fc65da9cda18919e94ab70948c4d30035ee18d0f032e807e5cf78aa033a80e95ffb4ce468046543744fb08b51d31afd1a82eb8718f24ca0e2dde292","ssdeep":"","tlshash":"73c080c4b0c77d14561265a514ef35e5a024403774481f578cd4d8982e120b4c233dd8","size":158,"data":"","first_seen":"2026-08-28T13:57:14.518025Z","last_seen":"2026-08-28T14:38:40.116984Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"951060da4073a91f2e3fe0357d99db99","sha1":"81e1b1e36e0a395ee009a5e17d5ca0a374848e6c","sha256":"949b4b22f91f0d793bdb8a760db01358453295a9ee25a42527117c7d8db0e528","sha512":"67385d78c1016e318d7750993c518a0866898ac03acea8794ae7904faad54bea74eb464ce8b54f872a7f0d8826f4bc34e6b5e9db7e4ce92a1c3802a887ab2135","ssdeep":"","tlshash":"a8c08cc8a0c77d102602642016af34e89028442674481b038c98d8482e231b08337ea8","size":146,"data":"","first_seen":"2026-08-28T13:57:14.498244Z","last_seen":"2026-08-28T14:38:39.844041Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bc6082146e4ca507cc433d63c8ef0c9e","sha1":"8f23aec3e6ee1f2aa6368ff6261c731a66326c2d","sha256":"5bccaccb954fc5f32844f007df548afe34c4a154a9e4e74a38657c48f012795a","sha512":"65867008fb469b8d4c6e6d837afcf4181d4403de8ba3b0b026ac5c8404da3bf4bc4d5df18c3c58323f36c10482e8430623b1c345fb6d1c99b2f985c12576d25c","ssdeep":"","tlshash":"b7c08cc8a0c27e209a16685910af28e490244026b0481b028cd8dc882e620b48233ea8","size":146,"data":"","first_seen":"2026-08-28T13:57:14.503848Z","last_seen":"2026-08-28T14:38:39.851073Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8d3cb8f132db5687cd1bc269c4798e78","sha1":"7580e78056b6a77ea2aed0f89c0f8fefa7863864","sha256":"a9dc93b3caa13a5daa5e62f1ff8c2c770c7f1d3af8cf7880fe4b21f119358d67","sha512":"09ed75964b3a3e7d1076831b1b0f7ab60737d92a712e9319de6984cf80210c19e59bf92e88344ae7e71552f509a73a9bcf4d9c292894084cf00251fb484aef94","ssdeep":"","tlshash":"99c08cc4a0d62d001612651020af36e4b028402a70489b178c94d8882e620b48233ea8","size":142,"data":"","first_seen":"2024-04-12T02:38:48Z","last_seen":"2026-08-28T14:38:40.006986Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e93eaded502d1e715780a7e4575c8bff","sha1":"96c73ed24544fadc18cd0b06ff94e53974b6d469","sha256":"7c3ee36b34618033e70a3ad12364532179835fe448663ef9ebdd795b4f3e0fe1","sha512":"81fc6f07f89266b566da01cea22f02c1f0f36e8588f3625aefb995974497ec1fee769e3bbd639dc2b70de9824a431482370dcf84cff4e75d0d19e446abb58462","ssdeep":"","tlshash":"02c08cc4f0e63d201a02a52154bf25e4e038402b70881b038c94e84d2e320b18237eac","size":151,"data":"","first_seen":"2026-08-28T13:57:14.501728Z","last_seen":"2026-08-28T14:38:39.687482Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/index.49d07480.js","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04821addf55b90ec3122ce906cfb332b","sha1":"f3e516fabd474a2e652dc8c16ad150febff015bc","sha256":"2a9490c77e3c49d9b7dd6d970accfb7289de1e5fd5f6c78f467b4ad95a9f55c1","sha512":"1a8e64541048f55008fd7701718e7b7972893ad41841592c5df5f0c48e6673cb466457d7ca65c9a301834deaeb902da90cbc6d7a01049ce6b72f5a9cd067e705","ssdeep":"768:g26shfDcxZl26T9fYKh8xkhmIQlQWHjMbw/LbYZkFmks:Ol26T5NmI6QXw/gao","tlshash":"9b330a81f18daa2553e752b4356a4400e03b5f58c086541db5bcdac53ff6e9863eeb3c","size":50472,"data":"","first_seen":"2026-08-28T13:59:37.051795Z","last_seen":"2026-08-28T14:26:31.687364Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"605f73f9cc94b7dd5ddc0d1a65899247","sha1":"bf090b559be684d8d79ab55ddd99670bfa62a815","sha256":"f36086c5ee820687ec776f8009f62192c9ca08ef528eaf79729ecc691b6e9983","sha512":"579e5b0d739f5dc17c4364a50df77eaf70363b3829ffe5126c072048a35cab614c484763aee08e1f0ffe46b86030bb081888f1bb1585ca867747abeedb4a2f9d","ssdeep":"","tlshash":"a0c08cc4b0d22d002602641014af34e4a028402670481b02ccd4d8482e230b08233e98","size":139,"data":"","first_seen":"2023-07-03T14:31:51Z","last_seen":"2026-08-28T14:38:39.801044Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"12e2e0e2996ae74a071f9cd3fa53bf93","sha1":"7937731015acd99c62a0280ab5c0ec5bb9b7e3fa","sha256":"2356cc98621cc4920ce304cb40d504277a1660812f65bb759505f42e940f099c","sha512":"04b32fc5683e28e63c61040ee2db6c95f3b1eef0daa192a9255b39ffc73c92a741581406ac7ff444d59042402f1a348e9599951bf19839b268bf88d80073fe90","ssdeep":"","tlshash":"11c08cd5a0c62e001636695890bf34e4a024447674485b22ddd8e84a3e230f49237ebc","size":153,"data":"","first_seen":"2026-08-28T13:57:14.52113Z","last_seen":"2026-08-28T14:38:39.778612Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7318d52d60fec8ff03da0157f94747ea","sha1":"8c375023f242f207cc85255d1e90518fca609fed","sha256":"4b9e86eb1061f4d49d115dbf9e288b3eacf739a77871d9ca864a6b986b564d44","sha512":"a1a4b7e937287709ccc49ea661d7629f6c960676ad16e892282d8f7368d8d649614705b6c4bc493662091e02a51cb2e0ac526d3e35de3a8802a4ace80aa33e60","ssdeep":"","tlshash":"5ac08cc4a0c22d102602652410af24e4a0288026b0881b028c94d8582e238b08237ea8","size":143,"data":"","first_seen":"2026-08-28T13:57:14.500681Z","last_seen":"2026-08-28T14:38:40.027482Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a21354788c7d78c8e4e8165bafe57b06","sha1":"f1e1aeeaaa8dc91e09ea6d61ed135e970d0dd7db","sha256":"b6b6d7e4becb811074f5f0e4355748c925cb916ed56f5fae214b9429f02ce49e","sha512":"90e271d3fcafac9607abb03ec5745f229cbed0071d75a13d303d9b74dfc8ea2dde0bceff8ed30e1329b9c8f4d53adffdbc962d68b8c35d2247c9349463ef4001","ssdeep":"","tlshash":"acc022c0a1c22d00032255a804af22f460200016e1888702dce8e8152e620b06237e98","size":178,"data":"","first_seen":"2026-08-28T13:57:14.531734Z","last_seen":"2026-08-28T14:38:39.752096Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d3daf3fb6e4da004538e3ae9f9f8eb17","sha1":"16eb57fb91d7beba61c02583da29d48399e4fc88","sha256":"5d5ef57d261bc771e4976e191c4c275f0d6b10ad72eeda27c99eb2b15a8c2486","sha512":"a176f0b7ad7ac45668900e24a83be62ee0fc2049c9b1cf3a976651aedf4fd6f26c45c2b07fb1eb0c52771f32dd6ac829887891a8fd2a24ac8391b22fb81c0418","ssdeep":"","tlshash":"adc08cc9b0c22e206a06755520ff2ce490348426b54c1b53cdd8d9582e322f09233edc","size":158,"data":"","first_seen":"2026-08-28T13:57:14.551083Z","last_seen":"2026-08-28T14:38:40.11108Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"08064f96a1fea2752658d5db8e2c87b0","sha1":"855ebcfaa70f26504b850516145573b89e82d9fa","sha256":"c8c5f6c74548c3d640fc9d801c057b4d2c8d27e57e79c0a284dcff366f271f7b","sha512":"8b73dbce78425f331f8d840f56925eedb93f8a142fcae6edf68201a1cdd3ff66520e63e8765a414e22835f7c65bb581f306b5cccfe3e688b5edaff3bd39b298a","ssdeep":"","tlshash":"eac08cc4e0ea3d005616682211bf25e4a028406a70882b139d94e84d2e226f4c333e9c","size":154,"data":"","first_seen":"2026-08-28T13:57:14.572782Z","last_seen":"2026-08-28T14:38:39.755431Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c5d7f6a8ecd91ebf6cc974297f65c918","sha1":"33887bc7c32f4f1ca776e2da09a07ecc28e7cce1","sha256":"73f2d76b712bcad7f6c8699c180afd8cb5e44451c9a8005e4e8b5818a99dae6a","sha512":"91cac552941ef0df049023c4f9fb67c51f0782eaaa9dda76d4109f1435efaaf4991886d0eedfb47e33c508fb3b05b44cc946fa1877dad879398a8071b67a02cc","ssdeep":"","tlshash":"65c08cc8b0c36e00160264101aaf25e4a028402670482b128d94e8483e230b08233eac","size":147,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-08-29T17:14:30.707776Z","times_seen":3336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"334c1df9d7cbc3519a286d40bd5ca18b","sha1":"4fdfd44666132f3539c0c90fa78b7abeff651ced","sha256":"0e24d6adc0a7c495e77fb86233ff7417053d1262b0fd0500c3e449a7ba621673","sha512":"2bf2f7bdb7821f75cd98877cf9f6066fd0c8dc2997bc9a26ec3206b8501d4cd6a189f960f8a4c8aab186a295d509eb0df47a8d13e9c73afcb90e87a1447f581d","ssdeep":"","tlshash":"b6c08cd4a0c22d002602681010af34e490244426708c1b03cc94dc983e220b48233ea8","size":141,"data":"","first_seen":"2023-09-10T00:20:07Z","last_seen":"2026-08-28T14:38:39.763488Z","times_seen":1677,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1d6250348ef7da34899d01b2eed90afc","sha1":"903d568cc3d4138a93d69730080c2f19d0381d9b","sha256":"e9ff2b403bdb2a2531bf8fc5a0e6167b578dccdcaaf97e0edcf87bc25c62f348","sha512":"134db0b9b4582d5aceae19e82eaca355d722bcbe1a379d26c96069c5c5bfa411cd2f034f38526fe121603e3f2f04a81cff645a899b75e02d59f0c4c9c41a9330","ssdeep":"","tlshash":"69c08cc4b0c23d001602641050bf24e49034402670481b038c94e8493e220f49233eac","size":140,"data":"","first_seen":"2023-07-03T14:31:52Z","last_seen":"2026-08-28T14:38:39.779235Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7748d73ce4f1391c1bce67b01ee0ddf6","sha1":"9b08103f51c46613285313788ac362c43e7bf9d1","sha256":"087715e894d2ae8727e0eca6e0ecffcb70353ffede25110bf64300ec8b91bb36","sha512":"78ebe62352e60d0a79f4671c2213c16e5cc30de8bebffd34e65126c06ba7aac0078c0a36d83c8011b819ad1ea7e805c0a4ab1c2e8539078f8de0e3702ff78be2","ssdeep":"","tlshash":"07c02bc4b0c33d002616a41014bf34e490348027704c1b03ccd4dc493e230f08233edc","size":137,"data":"","first_seen":"2023-07-03T14:31:51Z","last_seen":"2026-08-28T14:38:40.08969Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"79e9b725779da1d0216c2f195c556ef5","sha1":"33e82c077dda053539a1cc25f1292381d7eb7526","sha256":"252c0709de9d2518dddc07d97b09b9ee02dd3b098b6ada20a288ca1661c7a3e4","sha512":"b54adfd823f6134c28c28d690d6c146bc585ed839830221282908a32879bfe32707f2087b38ee8cf90eca8003e5df79b966e30577722a0c71d47964a881a92ba","ssdeep":"","tlshash":"d5c08cc4b0c36d101a02a81018bf29e4a024402770485b168cd4d8492e220b49233ea8","size":141,"data":"","first_seen":"2023-07-03T14:31:52Z","last_seen":"2026-08-28T14:38:39.758405Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"abd0df644b6a330baf30cd27aebb2cb3","sha1":"1893f0289fcf1b576ea009506871f76961a335f3","sha256":"fa2f1975a63bb59bee43e9eec5520ede06bc7f2fd2c02758ba017b129974286d","sha512":"6f40be6cd56c4dcc965c669155dec52140efb6695fa4de491b9b55f0bf24ddc371dc1e92567ea2dd24593b7bf0308d63d28d2e29adf11efd5473326a37f6f826","ssdeep":"","tlshash":"d3c08cc4b0e6bd001612686125ff34e4d038802ab84c5f4bdc94d8492e620b19337fa8","size":159,"data":"","first_seen":"2026-08-28T13:57:14.546583Z","last_seen":"2026-08-28T14:38:39.759324Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d31574a9440ac6a46aefeae87e657442","sha1":"4e6c2f5e647e23885f39b3b4b8a80ec5a0e72e8c","sha256":"b7c6b8edbabca5356e28a9c56ebeaa3edc9005420393d6b24238c72298faf378","sha512":"4e473169ddf1c77e81b32eb187e9230ad793c92ba746c439ff799b4017ead7017548fb7a02d227c3e9c220ca7c7ad027e024d37359c2eb4402941c150a77f605","ssdeep":"","tlshash":"f0d02bcaa0c3390002013451952f54e4e430d41921481b175ca8d8592ea30b95223fd4","size":248,"data":"","first_seen":"2026-08-28T13:57:14.570793Z","last_seen":"2026-08-28T14:38:39.765244Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7d94eff70ac81272b3561b90bd46ea20","sha1":"00ff0e02a7bbfc4cb9612a102a3939c66f411168","sha256":"c890d6dc614938e5d32cc0618664f202bad4a51770c95789f1c27514ccbdcdc0","sha512":"fe4c46fff3695044713e0a6432bb3c899c343b6d3dcdcc5766b3bc005d6aed3b6c49d3ddad753fd2c955b80952bf1f01c444c106c16b6cf1dea009907544fe6a","ssdeep":"","tlshash":"f3c08cc4b0ca2e005606652056af24e490244426b0481b428de4e8882e230b08237eac","size":143,"data":"","first_seen":"2026-08-28T13:57:14.534841Z","last_seen":"2026-08-28T14:38:40.033045Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"48e1cb64fff7b2d7a16cb4330bcf2aa4","sha1":"d3b91c83ecdc6cf6019fa05dc9a3b6d5965f0fc6","sha256":"3b4eb365095537f36dfa3024992a3a4270af695de10afbaa651b9c2c976832d0","sha512":"04a69f5d7f5a2b2d4d0c680e0eed184b3b6eda06a0794d2dc50c9e97ea436c6651fbce8cb7193e109d5c65b21d5cb19aaf2be6525d8d4cdd19f4ebfe62cec251","ssdeep":"","tlshash":"0dd023c570cf6c1019067851795f16dc50180816258c0f67ce90d8483f230f08337ec8","size":206,"data":"","first_seen":"2026-08-28T13:57:14.567321Z","last_seen":"2026-08-28T14:38:39.736124Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7b86bcf679fb9b3c5a0f836d2214bdbc","sha1":"94054d3bb9849c9f8ebacfa6a55c043674b7f119","sha256":"55d851c19d673b3fd4b95ae7add0477f949dc2f403ca8eac880d91f448e0b8fa","sha512":"fe0631baddc4a901803d43b12d887191a823cee38786c6495f6735b3b5761b523e106fc68ad9ea1a78e98cf4e5d0b7c2efdd204272e0b6e17cc1d3522ea7526b","ssdeep":"","tlshash":"9ec08ccab0caae101a12755020afa9e4b024403a744c5b568cd4dc483e230b58233e98","size":153,"data":"","first_seen":"2026-08-28T13:59:37.128677Z","last_seen":"2026-08-28T14:26:31.756308Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"056f903d6bf68f06f1051a8febbffd52","sha1":"82aa237c5b328c73c1479650423e47f2bfcbb4ab","sha256":"107e5f5a8784cab3d1755c2ae87e73165ed5c478043bbce3b736666a5437bd54","sha512":"f2e71db620cc87664cda74a1a46bcf2cc9879e874f6bd7ccd70068754ef50f17a611d01afb6e5405402483adba98cd9f68752ca3bf7e593f2fdd1b4a0c0111df","ssdeep":"","tlshash":"b5c08cc4b0cb2f005a0a662a2def35e89034806770486b128c99d9982e270f49233fd8","size":156,"data":"","first_seen":"2026-08-28T13:57:14.520063Z","last_seen":"2026-08-28T14:38:39.701521Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aadd2a392646f5fc1ba4e2d5a9d5d3fa","sha1":"a0095fc5a252e84fe6225acc9e51d05c32db3677","sha256":"50f22eabb556bfba02a8ffa6342b36a87f2fe2dde0bf7a25540fd631575a5b9b","sha512":"e948ce09ed68e44b7e7fee5d7a70ff44aa6d7af6ef18fc51c2aa690a9b43d641a04e4952e95bbb5dbca656bef07f1537b524c563df7e33219c75959145fbe689","ssdeep":"","tlshash":"74c08cc6f0d62d106a22aa1050af35ec9024802a70882b02dcd8d8aa3e220f08237ee8","size":148,"data":"","first_seen":"2026-08-28T13:57:14.554433Z","last_seen":"2026-08-28T14:38:39.768366Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bc36b06b39297d4ac0951a960cebc4de","sha1":"c702e22d9b043c666fa9b69028623b9a9018ede7","sha256":"38fb362a0eab3bdb0c411c10ffd88e0dd2c68343cafaec2d0989d0e3d8fd8372","sha512":"87720cd10430e1f896c726fd3d4eda72faf9243f895da8169b7152ebe77643fd49d7ffd0dc6094e772762e03dbf109e765c62c45c5d1f392cb325a54cd22dc71","ssdeep":"","tlshash":"b1c08cc4a0c32d002606a61420af39e8a028402b70485f128cd4d8482e630b48233edc","size":145,"data":"","first_seen":"2026-08-28T13:57:14.518973Z","last_seen":"2026-08-28T14:38:40.08459Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"35e0563db9526e0c5fb582a10302458c","sha1":"a1f9f0f5d0b5c690795b05928ad7ca0c103b9777","sha256":"65edd78a29d50b17ea83883ed1d346bb8e350b5cc13e7bb107b7507199fa8eef","sha512":"c7c38f574d0cda3932f3e34d78956e744ea361286aba39e79003d524f9f19ab05603900fe145662c11a0c04a43898bf00b76ab2f8a3783d319092bf55b430d3f","ssdeep":"","tlshash":"51c08cc4b0c32d002602645050af24e49024802770481b029c94ec492e220b08233ea8","size":141,"data":"","first_seen":"2023-05-05T08:00:34Z","last_seen":"2026-08-28T14:38:40.136913Z","times_seen":714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ac0a8493307bb4bde8791bf80ce9aa1c","sha1":"13f7aaf08751649dba1e4ce25cf970e472fe6331","sha256":"2b4f5957a252045588a3a7d34abad27794d300045fdf46ef7d709e40c566bb5c","sha512":"a8958428f831768c387eefc7897bd0d4d1d688f3df5bfd393de12334057eb4723e106837fa44b43eea59cdda8b4bf724a8233749937a59f2afadc23c4e58c909","ssdeep":"","tlshash":"47c08cccb0cb2f006a0a762a19ff35e890349067704c6b128c99d9982e270f4a233e98","size":163,"data":"","first_seen":"2026-08-28T13:57:14.561322Z","last_seen":"2026-08-28T14:38:40.094126Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bd07a459fc2deb8e2fddb26d7c26e829","sha1":"0fb9957f3d8dfece75f1131725257fdcf22d6a27","sha256":"7ebed2d492fc15ce5d3c4b3d0c0630deca9e5ebdc2c92582d782d0e2c0390f40","sha512":"7b2e3f861e7dc2785aaf615e85a25d6817481a2d0bb409a78a84536167edc3338dc65f4d6ce5787a21155e9dc52fec7dd17d68e698f2bfaf1195ddd3961cd108","ssdeep":"","tlshash":"c5d02b9e23c63a201a03aa56685e55d852244c1235dd5e564e8598453ba31bc4177be8","size":266,"data":"","first_seen":"2026-08-28T13:57:14.504887Z","last_seen":"2026-08-28T14:38:39.979206Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2afaed375a7d9a28eca6f0a39a019671","sha1":"633499170cfab37a2e3aa674b2d014f0211374f4","sha256":"7e011149126990402ea2732891b63ef6d3843344c4341f088ea30e098b301951","sha512":"0077a3baebdea79ce21b26e1504175497e8b265d02be07b12de3863c0ca3d9092289b2c67956ffde41b7414c23b671879e2b4a225888aaf41d19f5eb04d08590","ssdeep":"","tlshash":"5cc08cc4b0c3ad005606699416af38e490384427714c1b029ce8dc886e621b4823bee8","size":154,"data":"","first_seen":"2026-08-28T13:59:37.129716Z","last_seen":"2026-08-28T14:26:31.76174Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/index.23aa5ba1.js","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9698bc321d0c4de0cc65b3666ef0bf96","sha1":"f0f0464730388323b7b90804b01e96836a75d87b","sha256":"08a312e2db71c44a11dceb988d502b6756e02b72eab5c5410d4153a3bfc83eba","sha512":"ee3047d55b3d6691866d24d4b11836718f940d11d4b2c56c9e35488f757fb261a3ccf85e7ec6e549595cb62e096647f8a019a0a905a285d3ffe792d1099bdc18","ssdeep":"49152:V5eLNO73ITrVdteWKwOxmiSXJnqt8YVxUIk7KNKTvyAscXjxsvHz93:HeTb6d","tlshash":"4de58c03718975634a72699fd26f920a70acbf84a08590d8f4becddd5c09e1a319fb7c","size":3052431,"data":"","first_seen":"2026-08-28T13:59:37.131054Z","last_seen":"2026-08-28T14:26:31.763411Z","times_seen":4,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-28","alert":"Detects file containing Telegram Bot API","trigger":"revenueriverwork.com/assets/index.23aa5ba1.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ac19b7f3ae2d0b35e5fb6fcd4fc4dcb7","sha1":"c889714738933242b4883f92a3bda539a0084d8e","sha256":"c09efc3006637962618f96020a09778c676305feb9d0667210ae1f13dd737f88","sha512":"1afacce2fadf6b9c39861368feb84d79b8387bf6e90c0011adeb077b8b510b5fad5458a3a9c62aa2635f968b14360c9e3c52b6098be4e9d0942ab75c95177298","ssdeep":"","tlshash":"75c08cc5a0c32d001612641014af24e490245026b4481b0a8cd5d8492e234b48233e98","size":145,"data":"","first_seen":"2026-08-28T13:57:14.553414Z","last_seen":"2026-08-28T14:38:39.721767Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9a5d455355b6184852cd2e3c455c0a61","sha1":"d58568293f733de12d22a3006b70ba770a45ad3e","sha256":"4736abd69d0993bd2c8252d62132f0e0c144c74c5a090cecea33e7036b4755e9","sha512":"42f3fb7e22d4f056599e2169099edbf23585c77053027e5819ebb5ed2e3f6bbcb7386fe79636f19e4cb4b13019bf9da273002234856f4e46463ea2d4643f6967","ssdeep":"","tlshash":"e2c08cc4b0c22e001642745024af25e8a029442a70485b228cdad84c2e620b48233e98","size":142,"data":"","first_seen":"2026-08-28T13:57:14.516106Z","last_seen":"2026-08-28T14:38:39.724112Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-29T09:40:09.04937Z","times_seen":8527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b1aef366ca7ab1b314f5f32ea5e1cc29","sha1":"63af15f48d550dbd054eb4cd8c17cd102e2c4bc7","sha256":"009a53c32050357228108fcd206b4ccbe36df2c70060d0321ab7fa3eb5748e7d","sha512":"fd9534901c54cd9327b543145538a2e64f1dce9b887b94788f7caab5f6ca8e62a8d52edb2e76d07a2f78fa59e916930a82831873655eb7686a8a0351ac346585","ssdeep":"","tlshash":"45c08cc8b0c32d001602655020af38e8a024842670481b12aca8d8483eb36b09233e98","size":152,"data":"","first_seen":"2025-08-16T12:27:24.168196Z","last_seen":"2026-08-28T14:38:40.011101Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e300945da3d54549b991004d010b4728","sha1":"114e3ead42f3470b0249be1d6a6a87a48aae1db2","sha256":"7615dd72e786899fcfae2e8de08a5417aff3888e0d5608643beac87c2307a6ae","sha512":"b24587e4674b1817d78bd51797506feb272d9e3343a92b03f7aab52a130021dcf8d3d6adb401367d189eebf5af0a0a869d08aaacb6d2ff60a684eada83dc74f6","ssdeep":"","tlshash":"34c08cc4a0e2ad011622641110bf24e89024402a748c2b028d94dc683e220b48233ea8","size":142,"data":"","first_seen":"2024-08-19T22:34:02.157135Z","last_seen":"2026-08-28T14:38:39.757399Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e45c6760f29464c1870dfffa26833e83","sha1":"0f864ff5fd53b03c87ea3faddf91dce0b801183e","sha256":"26c7db0a119392a12b8401157e557f075bd40f9efb273129d285a2833260a29a","sha512":"23550037488eaf2fe6d81822a29ed87e4803078866d48d75a8a7b73fa5dda179a6f04eb0de8ea2ce853de223727818163b18d282470e216a866cb23514b70731","ssdeep":"","tlshash":"35c012c4a0822a00170b699110bf29e4a028802674885a169ce9d8486a224ba923bea8","size":165,"data":"","first_seen":"2026-08-28T13:57:14.547618Z","last_seen":"2026-08-28T14:38:39.722643Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fe75af9c0c5cb05c5a6bcfa567beb80e","sha1":"1aac7181df378809f2b3c9dfc4d31b73814b1926","sha256":"228fea699ac6420b42802b72376c6f46fa33f7d2a5d43fefbf819c5bc037b901","sha512":"aa305a896a0f73d64d160b442e5b4baac0d29d4aa3a8147b681daddd9ea3b6648d34fbbf09a17c613e41b89be3dc62bdd6988e00c7112645f4157b5dd12a29a5","ssdeep":"","tlshash":"43c08cc4b0c62d101a02a42068af24e4a024402b70485b468c94d8492e224b08237ea8","size":146,"data":"","first_seen":"2026-08-28T13:57:14.499566Z","last_seen":"2026-08-28T14:38:39.702891Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ccd150b26b19436bf630d3e55d886c56","sha1":"b1b0a07a69d04c4d3fd477f645bdf45520f62f80","sha256":"c24d2e1417d4808466ba562ca2a899798ce86afc46131750f60e27caee231f57","sha512":"10c397a1dfd5c74118cfe0e9e2ebd5eaff92efb8aa9790b59149d433b53ed52b58f56be0a4ba2700f418bf659071fe8e9a854c0b42ae798f805c1c77cb64f4c9","ssdeep":"","tlshash":"3dc08cc4b0c26e105a02651014bf3ae490244036b4481b128cd4e8482e230b08233ed8","size":139,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-29T02:39:33.656173Z","times_seen":3141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8fbc9156060e0aee3f4c4efd9f3d1fd2","sha1":"76051aa0e1a29debbe5b4ef0fae08920d58928d5","sha256":"b899f5600c964e5c7936ed406f10901acf0190c596c359cc80ebf620f5e952e4","sha512":"e352232bc2724a8580629c646a1abfaf7bb6827d3522d915b2dafd59e66a428c5578773f311bb840a4dd37a874ab9c5a02ec0998d47d5be116d5d67119aaa493","ssdeep":"","tlshash":"11d097c6a0c22ea4830a0406567f2ad8a224003622ed0707acdcc80839228f44133e94","size":233,"data":"","first_seen":"2026-08-28T13:59:37.079013Z","last_seen":"2026-08-28T14:26:31.771163Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"03477d66b097e852f4709bdd24d57c85","sha1":"02c897f554c8c4a60fd96480f5d2aa0648b0e759","sha256":"a30f834355614040e3740f4dd418f079dbfcd8a6d5bf218ebad13e62f215e0a3","sha512":"02c4b193a13771e74cb92e7425bfcb23c3819d118dc1fa184f7c2c64c8f50938c84cd74c275d1dc3c04c82c13296893524a7242fd36ef029ea26bfc88c505b20","ssdeep":"","tlshash":"76c08cc9a0d22e001606642050af24e4a0244026b04c1b028c98d8482e220f08233e98","size":137,"data":"","first_seen":"2023-06-15T19:32:01Z","last_seen":"2026-08-28T14:38:40.127136Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f17c1889687e229b02a846084224f6b5","sha1":"a66c822dc4636141db9fa0ed9ccfa1a400c747cf","sha256":"13ed3f8dc74b9a5e8e9f8b3dadfdca3e5ad226bbd8d9aaef686ca74180674fbd","sha512":"4f46dd8061ef96d95b5c2863caa9f7f87396483f9c8651b9ed64fb01f832395b20b879fd6660ac8eac290ef66a2c0918827553a8cb154b8c6fb494df62ed86c4","ssdeep":"","tlshash":"9ed0a784b1932f24369b166871ef6cd46030846b759c26039ea8d8686bb65f4d237bec","size":238,"data":"","first_seen":"2026-08-28T13:57:14.545391Z","last_seen":"2026-08-28T14:38:39.820372Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"56e1c29088c7c24d658727be568842b3","sha1":"bf7e6ba0805b734c07146e34fd2d8e6feb0027e7","sha256":"65b97f4eeff4f6264d1c1327143411c9f3b0262bd911b3de5d9dcc53789ce6b1","sha512":"addc3db7fc7086a0d3b24c15d378fff2f1b2fd791746f34b687901799171d9131a92051707f0fd15f17af023867722482fbc8d600cfdfd18032fcc7f658d3346","ssdeep":"","tlshash":"efc012c9a1c23924560e595128af24e490254426644816569ca4e8482a6a0f44133d98","size":171,"data":"","first_seen":"2026-08-28T13:57:14.565488Z","last_seen":"2026-08-28T14:38:40.114492Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Mada:wght@300;400;500;600;700\u0026family=Fira%20Code:wght@400;600\u0026family=Montserrat:wght@500;600;700;800;900\u0026family=Roboto:wght@300;400;500;600;700\u0026family=Open%20Sans:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.106Z","timestamp":1787927145106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Mada:wght@300;400;500;600;700\u0026family=Fira%20Code:wght@400;600\u0026family=Montserrat:wght@500;600;700;800;900\u0026family=Roboto:wght@300;400;500;600;700\u0026family=Open%20Sans:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 14:25:45 GMT\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80924,"size_decoded":3886,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"846a0bb3181144baef23b0597660f097","sha1":"5c320a9cc31dcc752406660d40a1d2835fb71408","sha256":"f83deff68ee4a66f61fa854abbb9b84078e105dfa30ed88f51a489a2641fd04e","sha512":"f6e781ee1c6483be01e82b1f33a0357d8397fb54b0060984e0328631ff75ce7eac4d74815f2b8922a99342870ae68248ba7061f711899f6c98a8ce55ab6cd468","ssdeep":"768:uB+SpsLs+6hnwYzFCODS99YURRuWDyjooYhREHPM5svvYaR7AIdI9SSYXRuR5WPP:IVRNRLyl833","tlshash":"be831da1041b5440ab431cd223cebf36ee0fa2617044c079abfd5b9aaddbc66637835d","first_seen":"2026-03-02T13:09:10.239144Z","last_seen":"2026-08-28T14:38:39.517177Z","times_seen":57,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":38,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/index.27b98998.css","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.110Z","timestamp":1787927145110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/index.27b98998.css HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-145a63\"\r\nexpires: Sat, 29 Aug 2026 02:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1492\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WvBPKHgDdFiCVKjDnP32UV9E0g4qiEudcKmMVoopIU1T3%2B56SrA5T3FtDCnXJbv3jx9MwO0OIzr4YnnJ9io5Na%2F%2BD9eDhGwMwSECy3UniSR34n%2BaF8f9GssvDorkGeBIbecsxubwXw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323fcb0ec9235a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1333859,"size_decoded":296505,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"35e1c79bbe074e1a7ac86a077e19b7ee","sha1":"95e509625d24b46637a0543955d09953dfd50fd4","sha256":"db3f01c2e3f0ed494eb82e8f75b1ecddb865b5e23a2d6b7512481851dc798c8b","sha512":"48b3826e6e07e7e1d577332981dc352b587d437c9f97d3d9b15cbcce87339039d8c673cbebe2997c71b360c5941e9ca7feb04b9e342877413a1855df1a9af1ef","ssdeep":"24576:MqzDEsolh0/ZnwQ1OAPkWDL32ye5trKeG0mT/s:MqzDEb","tlshash":"fe2564a4e21a20fe7763d61f5b40ba6d9532f72ac8414f5af1c6440d4dc3aa43187fab","first_seen":"2026-08-28T13:57:14.448877Z","last_seen":"2026-08-28T14:38:39.655515Z","times_seen":10,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-3.4a64b962.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.879Z","timestamp":1787927145879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-3.4a64b962.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-892c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5VSZ2I%2BQ%2F5CzwKE51i3XIj4vb3Hzboy4pM%2BmTkUOM1YYTtFIrRrcn%2B7W02BQIyhIjBc7%2BTiQZT9UVR157eWcNFCVDcG8Pm5ctMS9t4PXNSvwRzKelcQeFSZVXeIXNg5uLlEI5ozfw%3D%3D\"}]}\r\ncf-ray: a323fcb5bd3235a6-OSL\r\ncontent-length: 35116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35116,"size_decoded":35875,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52d00fd5ca59da03d81c9af93723056b","sha1":"47ecc9cd3dba8f8394accf12a699f48bf3cb47ed","sha256":"4a64b962587e1ac43dbe5b62560b3f0aebd867a7be917da08e6eac22daa63233","sha512":"6692f227b398d17584c80297e4f0d62065461f775bdc2da6343388aa0ebcfe303e1d9a439f4a6b44a9cb9eb490ad72231e3eeeaa8b82aa5bd54a3117d3bd3979","ssdeep":"768:DwNe81qLpkFVArG4L3gcQpe6cwbHZtKnDyWyZyS1EF:Dws8ITrJAYY5tKn2y","tlshash":"3cf2e1158916e7b43df2a03b185189400d2d18b299f57e586ae4dd4c326d3b4ecfcbed","first_seen":"2026-08-28T13:57:14.464171Z","last_seen":"2026-08-28T14:38:39.316071Z","times_seen":10,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-6.8af17e38.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.886Z","timestamp":1787927145886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-6.8af17e38.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-3974\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FcOzVVHXwmf1vaArMUE%2BJ4nQLcgLqtFDV7%2F6hTmqKjIFagh5O9lCXjLaWMp3iRxhTRc2lWL4cbKjMnpWjGIeRS84ikCMGGOMuFrBeZ4tLsFIoRibyCfQJUY%2FD9bvyhjrw8%2Fj5zkLg%3D%3D\"}]}\r\ncf-ray: a323fcb5cd3635a6-OSL\r\ncontent-length: 14708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14708,"size_decoded":15467,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"91eb0e5d487f4aabf86bb8b5324d4be9","sha1":"f1e1210abd06b9ba98d01f8f77f1624c7e0b0631","sha256":"8af17e3877a05c2fec883b1543fa220fb2cbcb907558f48985275264664578d9","sha512":"c9dd440903566bac8438e12d5e95081b4c665bb52e731098a80ed1d6d87e25ee4415a01833d05109c7ce01c5585a018bbb82ddc8c86893d00db34ff65ab6d350","ssdeep":"192:heb7huK5+4GegJJzSd2vofAllJjK1XPdWG24s0JRqLc8wKo/PsV7m82TYA1I1Uvj:heQK5+NdJ9JvofARjc1WNCHdAg8SPKIB","tlshash":"3262c0d26f3c7582b51a4cdb2ee5d9fcd0a586d576386f530e0234b89cd2b44236a60d","first_seen":"2026-08-28T13:57:14.423629Z","last_seen":"2026-08-28T14:38:39.618689Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-11.9242d2f6.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.898Z","timestamp":1787927145898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-11.9242d2f6.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-29fe\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2F8To19SnucWHAC8puaQ7LUEJJnzxyzW3bLZapAe6WZLOAYFyGydCDh9RBRXBgk2MFH0fl391Ub4x74S9eWRGieQW%2BLdxgadxxQUOzrdeUnQ1LbjrjAdF5iQlHEvL6HhF80NgpcG8g%3D%3D\"}]}\r\ncf-ray: a323fcb5dd3d35a6-OSL\r\ncontent-length: 10750\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10750,"size_decoded":11503,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6a7f4e84465dadb5854c3ac3db1220d","sha1":"366eaa468c50e25cb901dcca511af0cdf689ee2c","sha256":"9242d2f6b593e83cc6757d9dc80c70fd380007a48e4eb570b212244a39204928","sha512":"b7ab87cf5f85f68e71e0d81276fc909fcea020ad37a331419e306b613ce491fb2f6a81304553d3135f495df9d4982e02e3fb74bebb812303182090d5d5d4c3c2","ssdeep":"192:933EJ04hMDSXDimcyO07K9MdeqbLAi/2N9BAZzfe40iTUzhQPlFUqq/UbbojxlX:pU/hMADzcNiK9Mkqo3I5m4dUzTqAhjxd","tlshash":"db22bf51c4265a436561ce88d2f87d6f7fa2b947d78cd4624cf74d721302fa684f0ae2","first_seen":"2026-08-28T13:57:14.452829Z","last_seen":"2026-08-28T14:38:39.394177Z","times_seen":10,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-19.73cb7f8a.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.919Z","timestamp":1787927145919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-19.73cb7f8a.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-8cc2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3OjAjalZJAQPuSb9NH%2FiFji062fg6GIVqKwUtfT0DkPwBMbkYfIyvMyNl8kJkistBVMNbaJYmMRmKv99P3d%2Fl0f28Alpu7ttU2fxmXND2u7BUVwiFOVUBLtMbmqCQV7GdL1Pmw4Ew%3D%3D\"}]}\r\ncf-ray: a323fcb5fd4a35a6-OSL\r\ncontent-length: 36034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36034,"size_decoded":36787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1fd74f0daca0a056c2e2ebd2fa0ef82","sha1":"4acd3f60898da880a4d0473a80930ddd1748a37b","sha256":"73cb7f8a8c8bd8ecd98cfcee61adf0eb36264dbdde27a2af0773770a6709934b","sha512":"6451952d9c00526320d6cf6456bccd91809c33aa2b46f8e06e018aa1024a949e9d3b35da58670e35ad94537db6af76e725771ea6b9dc79439a11684fe0bea280","ssdeep":"768:dZ+75NGZwqAJnXdTfjXyM27XuSRI+DKr743ki/Qb04Cei:maCdX5fjXp2yyKGkKxei","tlshash":"6df2f162219afc80d1f05b18e73d73d3a56f9938c422a0ca9af582cf4b668961652272","first_seen":"2026-08-28T13:57:14.432679Z","last_seen":"2026-08-28T14:38:39.353675Z","times_seen":10,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-21.6000bd80.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.922Z","timestamp":1787927145922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-21.6000bd80.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-20c6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BlqihMMgCe%2BgGd%2BDBAvfG5dON217lCOzMJ%2FHLjfLp5Y9YqBFwNLdmt%2FEvtgspR7%2B9jYvdMWTcK4RXOmFKXdFF%2FFaWiEH2bEc0o10cGawWs4hi5g8zv2GuU3QfY%2FQF1np%2BBWUWvAmg%3D%3D\"}]}\r\ncf-ray: a323fcb60d4c35a6-OSL\r\ncontent-length: 8390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8390,"size_decoded":9156,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"695be5272a7edac07d790f5b1fc2689c","sha1":"1de215edaf007a591fb1d5daa842c5aff64709b7","sha256":"6000bd80d0c3312d4848e1f69ebcdcc3a0e39f5ccb61995b0cfc83d4ad1797d0","sha512":"35dfdde71f68a3d7f0641d792bb22a2ded88b0b99286cc318b779ece467dd603a4c0aebd3c1d2d2d5d10c80ad71282835a1372d002aade8b215bbcae4411db6b","ssdeep":"192:bNXo7+hVNpmoCZSCRNmmTFrByC8najxdJhjEZinbpvECFj:bNXo2Vq/NTxrkC8ajxdH5ECFj","tlshash":"b702af29eadaad925da0b44d60421fe4f9d09facb1c8ddd8b1cc8235e58b10c4a577f2","first_seen":"2026-08-28T13:57:14.433883Z","last_seen":"2026-08-28T14:38:39.505151Z","times_seen":10,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/slide-1.c9fbb947.jpg","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.931Z","timestamp":1787927145931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/slide-1.c9fbb947.jpg HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-10fd8\"\r\nexpires: Sun, 27 Sep 2026 14:00:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1487\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DgS4oBXKp%2B3nnPYdiRDeiqEXPZuhSlz64fJJsfmEbWy59vqCdyInLANjjml1dPHMCO%2B5d%2BAfn%2BxXGCd3mlYl6qctS1t3OwItG4EhtqTms8SGVnFz4gAZISzOAqfZHWxwronGPf%2FCFA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a323fcb61d5235a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69592,"size_decoded":68607,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1024x1024, components 3","md5":"014d1f5b07368222b7d73d0af3ea35a8","sha1":"f30de33106f787c0e88555597e526604acaf53fc","sha256":"c9fbb94758b1a7c72f07d76b27ec74d2a48306306fc9b31a15d607f9dabd64d9","sha512":"0f8cdcce951410072425de15c05b3e22f24ead59640deca3227cb093a593a6470bdf36d1bad43b727c32955a6739d5f4414a3e57825652dbec5bf355411d53c2","ssdeep":"1536:FsCm0f9d6wQCsQ1xGIVMHT/ZQ6pNaoC+Rh2rhfnlAkr:NmcbxwQ1xG68ZfHaP+Rh2rV3r","tlshash":"006302f01b950558ceacfe3752da8ff8852a692e5892ab1713acf55c0c644505c00eeb","first_seen":"2026-08-28T13:57:14.465381Z","last_seen":"2026-08-28T14:38:39.558804Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/index.49d07480.js","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.633Z","timestamp":1787927145633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/index.49d07480.js HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-c528\"\r\nexpires: Sat, 29 Aug 2026 02:00:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1488\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NE18XCQhqmxk9WJdzuU8ndUNWeGaAKGrB8gPtMWYpP3cxJiQQN39qQkLpIlz3V8HOd6%2F97Sa%2FNCkRQhulJrUqbBcKHxNHZbubQZv%2FTdqEDmpz8k6E1XRIouo4yMOkZPKk0cH8KZX%2Bw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a323fcb43ce735a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50472,"size_decoded":16951,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49421)","md5":"04821addf55b90ec3122ce906cfb332b","sha1":"f3e516fabd474a2e652dc8c16ad150febff015bc","sha256":"2a9490c77e3c49d9b7dd6d970accfb7289de1e5fd5f6c78f467b4ad95a9f55c1","sha512":"1a8e64541048f55008fd7701718e7b7972893ad41841592c5df5f0c48e6673cb466457d7ca65c9a301834deaeb902da90cbc6d7a01049ce6b72f5a9cd067e705","ssdeep":"768:g26shfDcxZl26T9fYKh8xkhmIQlQWHjMbw/LbYZkFmks:Ol26T5NmI6QXw/gao","tlshash":"9b330a81f18daa2553e752b4356a4400e03b5f58c086541db5bcdac53ff6e9863eeb3c","first_seen":"2026-08-28T13:59:37.051795Z","last_seen":"2026-08-28T14:26:31.687364Z","times_seen":4,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/logo-black.89a91302.png","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.874Z","timestamp":1787927145874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/logo-black.89a91302.png HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-4696\"\r\nexpires: Sun, 27 Sep 2026 14:00:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1487\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIGtEupugsXBhAcViZlkkEVrjgdSEq28fS6zg6C0iS%2B3uWohBFnU8gLEubhso%2Bv%2Bd%2Bt3FrRrSCsqIuBjSNsC8cu824byVzmBljqiY6N1nqBEJpXETkl2IQoxwVFs4AtBkCAQGrt3zw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a323fcb5bd2f35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18070,"size_decoded":18878,"mime_type":"image/png","magic":"PNG image data, 300 x 233, 8-bit/color RGBA, non-interlaced","md5":"d55e0d207ed60034dc4b7bcc0476e6cc","sha1":"07cbd5fb8e2a58d054fb4ff2797c09884e14a7ee","sha256":"89a9130270cf1f711159504a157cba937549665ce6eae2ca1d70ac47f1d08863","sha512":"4d42b864b5643e0e9de2de7bae677f62896912debe4d5541c0bad74cc9ed27933e1e00cf91b2cc7cc7362d39b6a0cc8230847082cda834fcb82d4f77c76e81bd","ssdeep":"384:wtLHZU2fQ8t0jdYsgXbHo50zx6r/SNno5/4s8naQMX3U:WL5hfYJkI5dDoo5/4s8abHU","tlshash":"ab82d03510026010ca6f783343d6bdea14add7fb627d566834bace682b8697c44e7b73","first_seen":"2026-08-28T13:59:37.065964Z","last_seen":"2026-08-28T14:26:31.688048Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-2.f9eb6883.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.877Z","timestamp":1787927145877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-2.f9eb6883.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-ec72\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6SGuVvWVBTg4U96NklxUxWhn70a3i2iFIacsP2xw%2BeHOj3xpAu3%2BVR11Swjz29AdoIDeM%2FwzkCQYJUrJMmT0va5wtcWwoWeIGvqmSQ2X5GutN0oax5Tg88DQK%2B1uAN%2FNRZ1GSLZRCw%3D%3D\"}]}\r\ncf-ray: a323fcb5bd3135a6-OSL\r\ncontent-length: 60530\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60530,"size_decoded":61289,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c7ffbf8b8d7cda8bd2fc8f45970e5ae","sha1":"06e5b65e09ac55a893929f48cb6f599c0c395c18","sha256":"f9eb6883049f1f923c304933b930530186cda64c1fd43682b6264d0b1ff4b1bb","sha512":"dd930dcb9186b1d7047148e8feae55230b4547371ea52c2e727399044b0682f8bcd2cfe6f4dedd992d98547000609d049f9bd3e401aeca1a53307547858d5651","ssdeep":"1536:EBPoNo7uy+GG5kub795xR3en5H1cncVPVNtPW:EBIRRp795xROcnkVDPW","tlshash":"6543028f35f3f8748aac5becac09a6877c70690089d517d936a569331b622f3d770039","first_seen":"2026-08-28T13:57:14.430276Z","last_seen":"2026-08-28T14:38:39.51813Z","times_seen":10,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-9.452a2032.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.894Z","timestamp":1787927145894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-9.452a2032.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-637e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3RUsXRRw9XkoVAIOb9rXCWQheZaAOI1NNLztvy9AGXDqBwchz7c4u0xSj4EIBc%2B%2FVsir6mch6FsoV5beQ9svPMHbuA%2FRgoQAvK%2FNfMLRc7%2BLHtDuED1e%2FT%2Bps90LrDjalYxNGqXL%2BA%3D%3D\"}]}\r\ncf-ray: a323fcb5dd3a35a6-OSL\r\ncontent-length: 25470\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25470,"size_decoded":26235,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"502278f3dbc574529eb90fe6116ff33b","sha1":"e8bd86f6854203d0869dffaef2520152accff9e5","sha256":"452a20323ad6172a9d2db43a43c24cd81be7359afdfa9badc368e028cccfa7b4","sha512":"630df3e8d90c07f8009a196182b8046f2471bba8f1edd2b27015822f06bfd5a486f56161cd1c71136925be612ca8b114d1706263b9d7cdacfbef9e1601de3292","ssdeep":"384:V2/NF5MnhlPfSyR6IaN3yJQiYS1HM7hoSoWtr3igaZUXD6nj1nMkn03yIM6SEhuM:CNFuXQo71s9oSD3ivEGjHaF9XU6jN/","tlshash":"22b2e16488cdba1377d4879509bcd84136a5dbdb72a7756ef9a0c40761204ece1ff0c6","first_seen":"2026-08-28T13:57:14.425073Z","last_seen":"2026-08-28T14:38:39.403062Z","times_seen":10,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gateapi.reriverapiue.sbs/society/common/progress","fqdn":"gateapi.reriverapiue.sbs","domain":"reriverapiue.sbs","tld":"sbs"},"ip":{"addr":"172.67.181.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.975Z","timestamp":1787927145975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reriverapiue.sbs","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:28:41 GMT","end":"Fri, 16 Oct 2026 08:28:40 GMT"},"fingerprint":{"sha1":"EE:00:3D:DA:E7:9C:44:D0:8D:C4:A6:FD:72:8A:DC:34:97:67:D4:81","sha256":"FD:D1:5D:86:24:6C:F6:E8:0C:C6:33:2E:9D:9F:C2:1D:9A:5A:47:43:E8:8C:AB:9A:BF:83:E1:37:5D:65:97:E4"}}},"request":{"raw":"OPTIONS /society/common/progress HTTP/1.1\r\nHost: gateapi.reriverapiue.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://revenueriverwork.com/\r\nOrigin: https://revenueriverwork.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:47 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-method: POST,GET,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,Accept, Authorization,If-Match,If-Unmodified-Since,XSPOT,APPVERSION\r\naccess-control-max-age: 600\r\nset-cookie: server_session_77bbc75e=e51637620967fb90611102bc46db00c1; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NgC3lMamU1gJ72JQGZHMiRXZFXoecaFNU2SYPdSL%2F35kyTtvp3n%2BBZ2yeZXBVjwriOsK1LeHfOMuALW2I%2B4saCTKlELHTViETcMp7%2Fe1s2JFb7Z4KEchyhJe0rRzc7IEkyw%2FbbPxpXuNQUU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a323fcb67d0f0daa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"server_session_77bbc75e","value":"e51637620967fb90611102bc46db00c1","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_77bbc75e=e51637620967fb90611102bc46db00c1; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70,"size_decoded":1083,"mime_type":"application/json","magic":"JSON text data","md5":"703671fbfbb34b8f66c49555ee8e6646","sha1":"d493f3a9698187de4f9077b09c02d55ba66586fa","sha256":"198bc8671b47347ce93c27aff441a3fac5e6aea86e6b69e3cba86ff83c43160a","sha512":"9c368eff4f9381cd248e32ba44fc5dfc111860bf098a8e7733f45fa5726b324d67d2d2c96c5a93bbb4b680721a95416805ed22c28ada7690e8386d4fe78a77d1","ssdeep":"","tlshash":"78a0026d37db149b0c15c190e541c40a62ec7c9010b42984c169a4cfb5ab8df9f20471","first_seen":"2025-07-07T05:29:12.231997Z","last_seen":"2026-08-28T14:38:39.45521Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1257,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":1234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T14:25:43.712Z","timestamp":1787927143712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:44 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4; Max-Age=864000; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6HOo%2BIXRD36RsHYjZLFnFRkkxiQXDy6%2F4%2B2Wxra2YbvIMT%2FeaaISme1hG6SKMC6cuAKv42Wup4gipTZxDgPsKE2P51tcnPYNIBzLO5nynII7s3FCZdLU6xxBgkWuZEWOmbdPgUqn6A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a323fca86b4f35a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"server_session_77bbc75e","value":"15bdb466b0529bcab7dbeb529072c8e4","quoted":false,"path":"/","max_age":864000,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4; Max-Age=864000; httponly; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1149,"size_decoded":1457,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (311), with CRLF, LF line terminators","md5":"295f34468e1fe8833300e73c71774b03","sha1":"c602250999c91b11c9dabef4bee21b168f5a0933","sha256":"b7b837ea21296165f358f0af0335c28342f35207e93188abb4789f10707ec84f","sha512":"4e5998026c87a3c61105676ee38b3e78eb9be230becc36898e7c6a15c7a9b3a34666685a001985268afd98f6503dbef042bf27d6bec2d8b0cccc3b0c80c1dd6d","ssdeep":"","tlshash":"312123d63480844823705223fc92b819fea745b707099d6170b1946bdff87ce988b984","first_seen":"2026-08-28T13:59:37.050848Z","last_seen":"2026-08-28T14:26:31.690161Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1197,"timings":{"blocked":-1,"dns":12,"connect":20,"send":0,"wait":1164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/fa-solid-900.27437db6.4dd3561b.woff2","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.862Z","timestamp":1787927145862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/fa-solid-900.27437db6.4dd3561b.woff2 HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/assets/index.27b98998.css\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-42018\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ffDOCym7eJWlpg%2BFF0fWyRTIKllHoMmUmWMl4%2FQLU0ohF6Y2DYEu6emVEqispqhzxTQdTABWgIa5BnIcy4fDH05W8Wdmrdptx1g6B%2Bnarp3LbNQPyz3FZ41GNt6nTEGxRaLPQSw6oQ%3D%3D\"}]}\r\ncf-ray: a323fcb5ad2a35a6-OSL\r\ncontent-length: 270360\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270360,"size_decoded":271120,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 270360, version 393.14155","md5":"27437db6b41f3f3e3884c9a964839bf5","sha1":"6ddadf82f1ae1237799deac1bd915fabd9b59a48","sha256":"4dd3561bac1f21c70270e2f4d93e30b9eaa7538b5fb12b6f6d5d9a74033e5750","sha512":"de92cb165acb42fc2fa2a2f2f60a0c0f67335416e10161e9aa761bcf93a5b731c5e94327e54429e1bdb384bded2759b4d01274293269d859ae3e6b1d95d95560","ssdeep":"6144:nbOwyhnm677akgRifVxxfIBRX0EjreYeNJo0Sr76QjeCbugcEEvrcAC4s/Jfqm:naDARFDBveDo0u7pfb3cEEIAA5t","tlshash":"7744234b742fcac66908d646ac0b9035da2f3aca090eff47ee807515166dcfe91235db","first_seen":"2023-05-04T11:03:34Z","last_seen":"2026-08-29T05:44:42.158452Z","times_seen":486,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-7.47b2ee5d.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.890Z","timestamp":1787927145890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-7.47b2ee5d.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-17e0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iL%2FxLYJlucYVubbTUfrj73vY5sd%2Fw7MT91JsJkbluyDs6Ha29X%2F2jFC0VXWK%2FC0iGYUW7X6m6XHtN%2Bfbt7NywfirvAjwA9X5IW4G3jhgJKz89vWAFrvedy1b46TcyZQj9U8hv8kyuQ%3D%3D\"}]}\r\ncf-ray: a323fcb5cd3735a6-OSL\r\ncontent-length: 6112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6112,"size_decoded":6870,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"217d2510e5aba0b0374c28a70feab8ae","sha1":"52d82cbae3ccf0c37c2768f91a8522de70300f9d","sha256":"47b2ee5d07503717d48d16fb40cec44159a94ef08a76a46a2452d1579bfa7082","sha512":"184d83305bbab02204fea390f2febb0e88d009dada6015b3b35305cee27afd6d20a07fc2739212b6039b59822c1c7f3d7252baa2fc8a8884c0a49b05cb1cb19b","ssdeep":"96:YULsfyOzAb2Ef+vY8WwNoSghoDPxZNFhI3jvpxJSQkpLLPiA4z+ctS2VBAIeq:DLwIjSEzSghoDPxXjIzvpxJS56A3cQ29","tlshash":"6dc19e8cd97a7786bc403c59ab0cfc845a1dfa398025585e566dc9feaac62145cbb230","first_seen":"2026-08-28T13:57:14.472768Z","last_seen":"2026-08-28T14:38:39.379889Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-18.991588c2.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.918Z","timestamp":1787927145918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-18.991588c2.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-89c8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwiTRzR2y6uOtMF3PZ%2FT2JUaYhGIdBqqIRikALzoKmzfglo%2B6m62ZD2EyHrPDUiTnt5Y4shOuiB0p2%2FDa%2BBxm%2BiGvrMB%2FXdmN9pBcfLEjMR8in%2B73K%2BWt0OMNtTge8SRMdsAzX3mtg%3D%3D\"}]}\r\ncf-ray: a323fcb5fd4935a6-OSL\r\ncontent-length: 35272\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35272,"size_decoded":36037,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6dfe1c149dcc2480247c6b721d1c9a3c","sha1":"7321487bcf60ab7e5947f2be395c8c40558334b8","sha256":"991588c207b5977319d11b965e547c541c7624d49cdd5aafd57338be6aef7332","sha512":"56dbe29b76e8d48d9cdc78564b8c5be580c315342e550bfc52c6137f186da4ab509f898c436e2bf933eb623e36e278352b9fc4a49e851ea90e08df13bf9b99c1","ssdeep":"768:nInZngL6qnX2EI8tGWvrdW1z4wuaWX/D8JbZ2sCLW:eiGqnPttDvBWtluag/D8X2dLW","tlshash":"52f2e18f936a3f1d456d47eb3b10b990e7d784a7684313fca84762a28fbb7058209931","first_seen":"2026-08-28T13:57:14.426149Z","last_seen":"2026-08-28T14:38:39.416061Z","times_seen":10,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/quicksand.2add7d60.woff2","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.861Z","timestamp":1787927145861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/quicksand.2add7d60.woff2 HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/assets/index.27b98998.css\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-6e54\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cB6kuaokRJKoI%2F4YOvu0%2FshAdCVaIpKfD8rykx%2BibWTdeDlqH1O1Ncz5vOPdGMLO%2Fq0TuCWuAK519QIviSqnNFtf6AIq2Y9thDv8f2NOgtbWx%2BZb%2FNWwN8tyiNZ1visEbSMvK8m11A%3D%3D\"}]}\r\ncf-ray: a323fcb5ad2935a6-OSL\r\ncontent-length: 28244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28244,"size_decoded":29008,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-08-29T17:47:38.329332Z","times_seen":13911,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-15.433f03c5.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.911Z","timestamp":1787927145911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-15.433f03c5.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-ae80\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBlIG6Y4YeqeW6Aoy7erVP%2BvOQnOa2OmFLxCnkfi2F8mhLwVUr%2BkiIGVgdxDCG8N%2F9upHili1rgbQRM1D9rkDFIKsiQF2FSmClax8xo%2F0URM7IumIKeD55TOn6sQKgtO6j%2BtLqXReg%3D%3D\"}]}\r\ncf-ray: a323fcb5fd4635a6-OSL\r\ncontent-length: 44672\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44672,"size_decoded":45431,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2cb49463512c8d87fb4ac8e2747ef29","sha1":"ecb1447b9413ba15537426c3bcbb9eb90cbc35ca","sha256":"433f03c511feb23814db2a2d342b144d35274a6fa4eba21e9471de92d36ecb25","sha512":"909b91b66053aa239e84898caeecc2dfbab90ba95a79e151eb1ca71ceddae2259646848a54c6310a5fdf5fa188663703830cffb9f61bb9c6bcf1e0f3e9f7b506","ssdeep":"768:GqLE6S2KujWy2GkRpa+daJE7pOUH4if4d5mjeGzKEqOJgn2JyGFtvX0GfdEGplgb:G+S2KCt2RR7Vemgcj5KEq+gnKFtvX0Ug","tlshash":"2b13024cdc2b5e716129936f33558732b91f0892fc583de13aa3b0e18f3b5a2563429d","first_seen":"2026-08-28T13:57:14.441563Z","last_seen":"2026-08-28T14:38:39.55643Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-20.0a18a29e.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.920Z","timestamp":1787927145920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-20.0a18a29e.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-ad10\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSxnGnSPAJF7DPbIAwRFy7lcN95a9nKeSiqoNyE3bXm61T%2BBfXD%2BJfMFTyfGProzh8asulESHyXKPG6PTN9kSUVr8lwKgZcWXI7knMLDfbCqufqWq4s8n4HjCX3k6%2B0Y1OUqqoDKSQ%3D%3D\"}]}\r\ncf-ray: a323fcb60d4b35a6-OSL\r\ncontent-length: 44304\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44304,"size_decoded":45059,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"756c1ea8d7d65ebc463e04201c51fa6e","sha1":"136d4846bd69f555a1ac74f689199a44a9cc63d4","sha256":"0a18a29e217e1e35df8f23cdf6d81594822f140beeb237bc6478e89c8eff790e","sha512":"2bf47f10901b51b0f5b137a8e86033d014e78a3ba52864df986e207a5964a932695110df8dff9161dc639291caa6415c8f81665e374e9b51d844978feea01e00","ssdeep":"768:J35knkz5/6Y47xvViasAlPJElnlIyYJ1sLDS4YrTDaJOHemYjD9szz:3kkzZ6ddvViV2REkyYJSLDT8DaJpmYjq","tlshash":"7913f194988ea4bb7c6a562f1893f2445634cb8be467e09c38638fe0cc2d16115fead5","first_seen":"2026-08-28T13:57:14.455706Z","last_seen":"2026-08-28T14:38:39.317325Z","times_seen":10,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/banner-1.96bbf0e7.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.923Z","timestamp":1787927145923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/banner-1.96bbf0e7.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-13ae2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDNU5kdgzTsoluoFIBMEEPX65B38DBn7pxN%2Bn0Dn9zKPSXmRfROSZ9dB1wZQFJ4ICwxfIDMd6RbyRJYhOnb92emBFfkezka8oI6AW3CkjyjAncAMLCGFduJTygRJUIjM22an61cVCg%3D%3D\"}]}\r\ncf-ray: a323fcb60d4d35a6-OSL\r\ncontent-length: 80610\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80610,"size_decoded":81362,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d19974293a8c03f44557289136e2a12","sha1":"fe0ef42304937595349129e8bf8a3da22612e178","sha256":"96bbf0e7d6ee6390a993e2c3617af8de1c2c8f972258581de3d12b946db86cc0","sha512":"14bf513fb62c1e2ef3963526483d97d640c2414d38391ff94b8c2911780206d1db7e900040d59cb841fdd3f033a0c0f2c3754edd006ad96909a5f87b4450a5e8","ssdeep":"1536:gGnuhbvfoBPYtkDOUT2jYzcQa+3qkcvmkKj7Re9R0HX5vFxrUyvfg:g/B2pUHkcvmkKj7ReIbhLvY","tlshash":"177301390a01184fe94a76124e4c077ec4eddf861af151bb459bd334fb1fb8a9b68329","first_seen":"2026-08-28T13:57:14.45687Z","last_seen":"2026-08-28T14:38:39.418754Z","times_seen":10,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/banner-2.583dc7c7.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.924Z","timestamp":1787927145924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/banner-2.583dc7c7.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-17cc0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35BXpPJQcXRV%2B8BPhQd1RwpKJ0Qzd%2Brq2OMofajLKic3IEVRoJpJNfre2TD6Zk1w29z4BGfLKPajtt5NZmLqDMoRxLysk3KgB87PssP%2FFTCfEjrr9hXDadKI4ALri6CSzvmZ3uoTGA%3D%3D\"}]}\r\ncf-ray: a323fcb60d4e35a6-OSL\r\ncontent-length: 97472\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97472,"size_decoded":98228,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"efbd7a692a5cbc8811d6a0f1811d9773","sha1":"7ef80855d649fd74e1ccfca75a10e35d8b504ca0","sha256":"583dc7c74bc92fb7b2552751bd9d83f55ed281a6ec8984dca1de64ba370699b9","sha512":"eb27a9c1d9904adac028e9f16d8af971984733b91d17880a3f0b57356eecb4cc0ec4c4df679cb4041d1db89eb2d1fa99bff79ae80917c58ab9e85c3fbf9175c1","ssdeep":"1536:3WmTWN+iSa/bldggE1pqNcjtDUZMVd6gjOUnxr0CxBZNd/JURfGRFNn/79nARLbQ:3WSWNJfDYVnqGL6g6UnxrTPdGcR3n1Aw","tlshash":"519302df563cbc6eede0d4304b5a647a0c7f9508aa2a0291ded8348478de9a43836dd3","first_seen":"2026-08-28T13:57:14.444972Z","last_seen":"2026-08-28T14:38:39.512404Z","times_seen":10,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/slide-2.580721d1.jpg","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.932Z","timestamp":1787927145932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/slide-2.580721d1.jpg HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-b153\"\r\nexpires: Sun, 27 Sep 2026 14:00:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1487\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVfWD3rFyOplwj83teTnDZUK%2Fg%2Fo1Q2z0NGfDAP5CpHsHr41mxhsD%2Ff78V4X9IhMAjePx6yYrA5f93q0%2Br51vbjveK4cpUXPUEA9yx1Ez3svFkG3tAfY2af772FpyRlxTrwDv08yzQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a323fcb61d5435a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45395,"size_decoded":43163,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1024x1024, components 3","md5":"f18930f16ccabf38a68472f0f85ca3c1","sha1":"79a9c40bfada8e352629392624db10ee4271a971","sha256":"580721d10ee65062ffcc3748f844d8e4306be16c1ddd122fd028e02b39344586","sha512":"b485f15d8b973f48f6b1953327942115d7e352dca1c30b555e9b95ccea298858b87d56423d7d22dab0438306fc34c70d091aef2d1bf27df55b97f5ae97d1476e","ssdeep":"768:1i6t3kGzOQPl1WDqZy46C4Vu2N9WtcHAzhzkJxoVC7UEplZvow3+T+g6ot:Rt3bdVZx6VLD+jUmC7nlZHBQ","tlshash":"cb13e1028ff54380d99d5e7265d20b7e6323d62722faa413c021dd12b55a6fcd8b719f","first_seen":"2026-08-28T13:57:14.466586Z","last_seen":"2026-08-28T14:38:39.356502Z","times_seen":10,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/slide-3.4b9aa477.jpg","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.934Z","timestamp":1787927145934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/slide-3.4b9aa477.jpg HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-132fa\"\r\nexpires: Sun, 27 Sep 2026 14:00:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1487\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lB5NZXZMNUZ992Efbb0NfoHh8FmFhb1psN%2FKX%2FsVP1VkVgj8rb%2BTxy4MjbF7EeH9u1VogjNpWAxaMN7xe6O%2Ba5SyVjpvRd25Kao0gYgVwz0ShpXjby6n8rk6M%2FZ6rikWXDxoXvimlg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a323fcb61d5335a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78586,"size_decoded":72431,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1536x1536, components 3","md5":"7d2b8756067cbca86a63d5f5120170d8","sha1":"63d29be700a1bec4136f55f6ac13d5fe6f9c5dac","sha256":"4b9aa4776cca1ca9fa48a2492f8eba0de8f57bbfd8725fa03c4090e024b9b646","sha512":"fd3416369f35793abdeea41b23f832f8d425da55217fec108887df176747803d02221caab35be21a7746905775132b4e156be2f8f7175f94e94c400a350b6510","ssdeep":"1536:BqHURMQU8WHGai0A1n78s6pkdU8E/EFl4zGikMEp8brJ4rZZ1F:BqH8MQyH5iv8kO8qyKJI","tlshash":"0d73f196c7f64ec7c3a16f7880e7224fb627453b234441b369682820edd7a4e7dd225b","first_seen":"2026-08-28T13:57:14.435509Z","last_seen":"2026-08-28T14:38:39.434327Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/logo-v.45a3f87a.png","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:47.733Z","timestamp":1787927147733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/logo-v.45a3f87a.png HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-1a26\"\r\nexpires: Sun, 27 Sep 2026 14:01:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1487\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFPxZilK%2BAp9Mpq2560dNPR%2FfFcad3oZEfpDIhWz9Nk1hEgvOyXozCRWYlT7N2xBh40GUlQaC2A%2FyQU25bUrquvDuYhITKKaKB9ccU8S99hNh1ihfUJMiQrLzcJ5dipxtBh9V7UoxQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a323fcc15f7335a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6694,"size_decoded":7520,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"7da52c542d69deb4bd8f67638df0123e","sha1":"3322abf8cb96cfd5c99ba621b11a1e16a0e281c4","sha256":"45a3f87a0a1b3c747952c8e2714ad416a3f27a823a633485d9f8876ef962a705","sha512":"da16c5505bf5e1fb307a344c8650c5a06c055f06f0b0152ccfc3c67f8c03596f336049390d42a47028095f9ead6ad9ea4ffac227dd17875d9e58fee3c7881bda","ssdeep":"192:K+WEegjBtGWNqtOx1hmFRt5PN+MQw/34yJG:K+WEegCWNqI/hSRvc7w/348G","tlshash":"13d18de3b9a0e5a5fbe130ced015cac8bae930d0a8351a5dd8bdaf0444c7b4f1d55297","first_seen":"2026-08-28T13:59:37.059994Z","last_seen":"2026-08-28T14:26:31.696252Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-5.87fdb6cc.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.884Z","timestamp":1787927145884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-5.87fdb6cc.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-160c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWThA4PXbjiV79JlcVt1j%2Fex71vZtYTQ3EtLvhJBAgHFtxLVZZZa020kMJjJXpdrGSPP7XnzefEMglbZQ2ngqYYaDwj57JpoVwgc4%2BJ1tW3kSkVwyHWEPazmHJqSfWlRv0E49m4G6A%3D%3D\"}]}\r\ncf-ray: a323fcb5cd3535a6-OSL\r\ncontent-length: 5644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5644,"size_decoded":6398,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"edac93a17e14d7654d8833b679b70c87","sha1":"6089468cf090793284f5db7a7bd4b329ce8224ae","sha256":"87fdb6cce11888772040ecddd1847024413473d6d7466cb3711603e9fbbc16ec","sha512":"3ee192daa5bb310aab89b60258616bc541312d42d5f8b03543a7dd59817aab44c2a2477eabe4b2fd8aee3344b4b4d7936046c48fd2e36b58d3183ba1e989c2f6","ssdeep":"96:p1q44seFj44KhFNg/hNmXGv8iDStx+J9xPLwvuGoQN3XgrXUkocD8G/Z0IT3f+bO:pY4vnhFKZFvmeFPCuG5NArom8GB0IjWy","tlshash":"dac19e24f029b06e6d09a5e15109fbaf909c242402c77808852faee997be73fe59432d","first_seen":"2026-08-28T13:57:14.479152Z","last_seen":"2026-08-28T14:38:39.491397Z","times_seen":10,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-13.828f3ac4.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.906Z","timestamp":1787927145906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-13.828f3ac4.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-486c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnsgeqknlLINEiuajtbINapwGMg23xqc7JkYWHrTKDVtjSfE%2BtOfcy7ot9DMWKDxHpadTfPcM1JeXg9Zj0iwybBcN8ZQUwdFtjVS0X3j8AJzNYXFa%2FPdeAyhkPWK%2FWBGK8N8Zgmj9Q%3D%3D\"}]}\r\ncf-ray: a323fcb5ed4435a6-OSL\r\ncontent-length: 18540\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18540,"size_decoded":19295,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"277e6e10d001619a07c13e258cd9ee3a","sha1":"e802c600775f081d4dfa68cfd8b2238d156af25f","sha256":"828f3ac47d4ca4f17e8e3641d6a3b2d6fed391340f600a642c1895bf1e9cebad","sha512":"68075477de28ec6cc24269d70b3e018bc9c71bf2d185c9cd96a4c736c2ba2bbd74f4e046388aea69f12ed0efb53621c36681274f15bd2e72dbfc711179992b26","ssdeep":"384:16R24VKTI3IhYvV1zx2jpltYcDurN/7VdSChwQT7QuFIjiaLFDLkfW/gi:R4wTI3I0xOpJDuJBdSK7XLcz","tlshash":"e882e061b4f74ddb41d98192fa4caa151c48afd264ccb88b4428ff1c6bf8869d08fb48","first_seen":"2026-08-28T13:57:14.45416Z","last_seen":"2026-08-28T14:38:39.531682Z","times_seen":10,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/banner-4.8ba890c7.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.937Z","timestamp":1787927145937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/banner-4.8ba890c7.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-a9be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7CHihJ0gGlxR3Qp%2FoCMhlMq1tBo9jiLMG%2Fr6AvYQ3NgsRelh%2B2Sl1SvW51NVrR30rOqcrJ33VZvo9m3jCyrLQfs2kyRVs3j8llhNn1sRDf8Ob80ZkXWWJd8HG%2FS1Hskx7o5O0tTNg%3D%3D\"}]}\r\ncf-ray: a323fcb61d5835a6-OSL\r\ncontent-length: 43454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43454,"size_decoded":44211,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f934c75f42934c33b2867536e184936a","sha1":"4aad8f16ff27d9afb9b38cf24eab177a9d56a9f1","sha256":"8ba890c712c55b1ffa9e4204ae69165a90b767386273cc4faa618a248d783cb3","sha512":"b3a63e49aa0b89cdd1a1b030e9172bf688503617820cfb0dc8e670a3563508fbd55ab28cb8081bb18c108129224a40ba0bc290253c9701393b30de4ef834010c","ssdeep":"768:d1A24/vOQjGdKKVhWDwya+Clt9J5dhyLvTOBNJs2YMvZ2:6HPTjaTtL5dMLCBHZY2Z2","tlshash":"6e13f170296937049235b32576d79f3a9a88236d22ca0cf8dcd7daf0810312d59fef22","first_seen":"2026-08-28T13:57:14.467772Z","last_seen":"2026-08-28T14:38:39.38939Z","times_seen":10,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/main-desktop.720ea387.mp4","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:46.008Z","timestamp":1787927146008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/main-desktop.720ea387.mp4 HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:46 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-3acc0f\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1487\r\ncontent-range: bytes 0-3853326/3853327\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PidSOhhqJDRQay6X9LamCNq%2BlWAySSml0UVrpKBtyh0p0QsBaOR3UV%2FWTlSOEqSXrM2UlaJWb3VIlQf99xYM2zCmCvrRZaCP7%2Bd6GIF0lKp7fpTf9dmSkUgRUtoAAoAlxu70Xboe%2Fw%3D%3D\"}]}\r\ncf-ray: a323fcb68dbd35a6-OSL\r\ncontent-length: 3853327\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3853327,"size_decoded":3854108,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"7dc55a3994581db3f8739c231362565c","sha1":"ae089c6d38d0c9d19c9d0a5a4bd54ae32b91ca91","sha256":"a663141f3a577e89100474f034b882e04ffb9a444ef8027e7599066c1e39092a","sha512":"c5505132ece2ef224b93e4b80c246a3bf78639b806dd1f4448149e711b0f713b10c56d834b5385d1f0d6155079d21226296ad4d02661c6e060f595640df54df4","ssdeep":"12288:HnM88/U/QhSIynhm7UtDdcI45z2nxDlK4CWjFk0KaQSa/orfFIoZ:HbWyn0Iddcx5cxc98CSa/cFII","tlshash":"ea255a216df22dc1928ca28fc5d8b8157cd713d3c9aa0c87fbdfad514f1194859ab0ab","first_seen":"2026-08-28T14:25:47.260977Z","last_seen":"2026-08-28T14:38:39.392588Z","times_seen":5,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-1.e72db6c6.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.876Z","timestamp":1787927145876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-1.e72db6c6.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-13770\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KIZzhTJzToqwcTu%2F7bepmOP7UZQ6PYOc6RO9UG9Itn%2Bm%2FlcMzddEDwEZW89JnpSE3yqWnN07JyXeZaaqsrfxblDY2nBzk6VW736uvm%2BKY3KHVSKFemUEucp3ejWRHnpzw%2BTyyKduWw%3D%3D\"}]}\r\ncf-ray: a323fcb5bd3035a6-OSL\r\ncontent-length: 79728\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79728,"size_decoded":80488,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"85b23eac0070bcbb2241c189da0e1f1f","sha1":"1aa4bf6c21c758e0a1e3f478a687e4ec7eb808e8","sha256":"e72db6c636bcf3173d20722001df073beeb60de8accac54e1acebb1754c3ea79","sha512":"b5f7b94bbb46005293fa3beaa4e0f0172365e03bb498f4a730104e5d4f2104226cfd6e971dc7a78ef2e0cd1b0eebce40f5bbec0f7d692d9d38901aa8c5b10bb9","ssdeep":"1536:c7an+dHjAljRP0rhpqIvPdN3zKp5b2W760RpP1N2AIY6:4a+dDAldWDqGPdR+p5bx7JJ6","tlshash":"297312652cb85dfa05b4898824ee32c5fbd9aa91dbc8d15f3f7805add03473071ba889","first_seen":"2026-08-28T13:57:14.488667Z","last_seen":"2026-08-28T14:38:39.333495Z","times_seen":10,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-8.95d27dc0.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.892Z","timestamp":1787927145892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-8.95d27dc0.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-3b4c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFMPna70%2Fv5gKVEBj5eYNu07U3SYROhlQOGKYSCFj0FeOuKNB9s4dZUC2PYOJnRdhD2ckb8LchYZXJNomc9mUfpd0goWerloRU%2BUgwznlFvjtfRnHDOLOg7MOANnocaZak7mErjjEw%3D%3D\"}]}\r\ncf-ray: a323fcb5dd3835a6-OSL\r\ncontent-length: 15180\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15180,"size_decoded":15933,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d52f55ae3f3f7c042510391dbdd6fe5d","sha1":"e6e71b97d9f7bd93d3bda36d564387be69948f99","sha256":"95d27dc0796567ea0e7d6b1cead4de61f864405072a29964ee90cf7c136bdb03","sha512":"b6184736d7ce93be8c746e1a60ec6d8d8485bf46c3d1050f9654d1a6dabcc552067355e7f9cce7e69345f3f456d55f5c56cca171d86a66ea21ac11c4feef5420","ssdeep":"384:2yPqNT5397Kly9+g2qBBes34pKo+MRltu/IDoN:TqNT19oy9jTBosI8o+AlsWoN","tlshash":"0d62d15e2db95028ec174876044849db0aef89c1bbf114bbfc5b684a1f81f895721bbe","first_seen":"2026-08-28T13:57:14.484007Z","last_seen":"2026-08-28T14:38:39.649421Z","times_seen":10,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-14.ce24d190.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.909Z","timestamp":1787927145909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-14.ce24d190.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-53ce\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uOC4BKX7VtURsrHHzK4p%2Ba1cFouEE%2F2rcehxwWr6n9MnskwXbb3GVnNdSG5s4%2BgUEyi2%2BAJPjLif7ZFJUiHmUS5XlYN920Z2s9A3SBpnlKTLBbRKbMHQua210tK5DgkkwI2UN2Dwtw%3D%3D\"}]}\r\ncf-ray: a323fcb5ed4535a6-OSL\r\ncontent-length: 21454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21454,"size_decoded":22211,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"21e070c9b19cc916099bc15f436544f8","sha1":"566ccaf2b77c75920bef4b8cd1e468007b4a1762","sha256":"ce24d1904bd071dcca53b73f3e3c1f2f963c39a99ce7f94f23fde88769e76f0b","sha512":"13ed5b936dd23c99b2facf1e9f81552a0b05ca52da33b5443dd94936c5fd978705365b9def767e837a5cc06a11a3e9c2daa863b118d6a2e26f6df76684de385b","ssdeep":"384:yH9Ro82LOhcFCZ3vVgzOJDgo7jaKnGhfhlDpQ48H+++vC438qS3BN4i:yHEZM/SKJco7hyE48e+DbqS3B6i","tlshash":"d7a2e1461b220f45860247ff8b59abbe24853f29ca20e87aa49843e19cde4f975bf501","first_seen":"2026-08-28T13:57:14.486372Z","last_seen":"2026-08-28T14:38:39.516366Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-17.4ebf5b74.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.915Z","timestamp":1787927145915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-17.4ebf5b74.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-279c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2FyYHioT4UOqhlrOSCiiu4VBlqFjFUm9XowWarV3uuEPhGTEjaoQv7lyarwaykg%2BklOBIBsABrvtiG7xXG%2BvW%2FcDcHnOqP0C%2Fqh1rqod1mRhBjzl%2FuaXF7V9xp7KfpNhvTROE7zF8w%3D%3D\"}]}\r\ncf-ray: a323fcb5fd4835a6-OSL\r\ncontent-length: 10140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10140,"size_decoded":10901,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce7e1289c61dd132a28c0f41ccd7e3a6","sha1":"60cf80413ba20e92958a46a663c315992ff0e7b8","sha256":"4ebf5b74ed5a00a2b2c23374ccfb76c3757644cf6d700312ba0491644211d910","sha512":"669eefae40170176b19b00112ccbfa65b29002f8d2d96a35f546b17284635912427f07e12a514bfdc7965cc154872fab04d09168cfdbaddf718b228c2eb28a3b","ssdeep":"192:aCLf5UywabAdOeGWnBQ2BB2T43hwTjTQvBtWRTQjvDREY7gKnpaWDI68:awx0a6jtQ2T2ErFPCh68","tlshash":"8122af35252995bc6d73ead604e0a09338c973d24d7e3eeb8beb8ed43297197630844d","first_seen":"2026-08-28T13:57:14.474911Z","last_seen":"2026-08-28T14:38:39.38233Z","times_seen":10,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/slide-5.e31e79f5.jpg","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.936Z","timestamp":1787927145936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/slide-5.e31e79f5.jpg HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-2349e\"\r\nexpires: Sun, 27 Sep 2026 14:00:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1487\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqmn0n%2FhoFTakMViBtqmRrcYuha8R%2F4UDo%2B4AR%2Bqa5KeXIKS8NcnfNXQq1BlJIir52nomfr6GDrsF07IU9vCLsMRAZRbqy16VW2Gfe3VCTvy1H6YYNaiQJc1mIfbOLk8tNyau1%2FA1w%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a323fcb61d5635a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144542,"size_decoded":140848,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1536x1536, components 3","md5":"bf454f54fcb85eb7139c05c09a3a411b","sha1":"e8023d84f1545d1464a9efce5a58f6d6c38d4683","sha256":"e31e79f5fa014b3096e3f33e85c8a6153f4f1842de4e28f35d2b3828cab8e1d6","sha512":"124db965f3e44bd3a067a4e0a55234495b4a7a358c0b96c4c159a4b7eed69474896a57a356e29e17045e6bb67e0c876efea4538313981f0a9d8b8b34b47acaf9","ssdeep":"3072:ugchvFG6JALPmOW+oc3ZXyyA6ZshkbxsUu6FS9S9yjvaX6obNq5:0FGCALPmO5ocFIkbmUw9Yy+X6kM","tlshash":"52e312552d395f44ef63eb71aac3474f3f81df2a1060474d0a52ea4a3ebb7b19872068","first_seen":"2026-08-28T13:57:14.437978Z","last_seen":"2026-08-28T14:38:39.654518Z","times_seen":10,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/favicon.ico","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.708Z","timestamp":1787927145708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=riSkZfY2vYSWSkhE8zSl7Dy2TXlkpIdYZAXaUmPR9MGx2pK0XldCdl4PzLPJZXLSqUHjku9Yb5aBLc7ttMIvQARXXg1SzQrsH93FPG7yK%2Bw4J3%2Flzr41MWEbnyfe3w16ERmTaUcbHQ%3D%3D\"}]}\r\nlast-modified: Wed, 20 May 2026 10:41:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\nage: 1490\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a0d8ff2-1a26\"\r\ncf-ray: a323fcb4acf635a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6694,"size_decoded":7445,"mime_type":"image/x-icon","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"7da52c542d69deb4bd8f67638df0123e","sha1":"3322abf8cb96cfd5c99ba621b11a1e16a0e281c4","sha256":"45a3f87a0a1b3c747952c8e2714ad416a3f27a823a633485d9f8876ef962a705","sha512":"da16c5505bf5e1fb307a344c8650c5a06c055f06f0b0152ccfc3c67f8c03596f336049390d42a47028095f9ead6ad9ea4ffac227dd17875d9e58fee3c7881bda","ssdeep":"192:K+WEegjBtGWNqtOx1hmFRt5PN+MQw/34yJG:K+WEegCWNqI/hSRvc7w/348G","tlshash":"13d18de3b9a0e5a5fbe130ced015cac8bae930d0a8351a5dd8bdaf0444c7b4f1d55297","first_seen":"2026-08-28T13:59:37.059994Z","last_seen":"2026-08-28T14:26:31.696252Z","times_seen":4,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-10.7c3c6de4.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.895Z","timestamp":1787927145895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-10.7c3c6de4.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-5312\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwAC0g%2BZ8l%2ByQT5mU%2B7qzVscdzXIriM5ozUTL1enG3lHVtG8Fj2eMdy7ogEacAmevAih7J0fvcy477MMmPiITsCQsreEAjJX2xKUGM6oHuYqTTWmeO840e8RHvt09xxjmk0lxC8NBQ%3D%3D\"}]}\r\ncf-ray: a323fcb5dd3b35a6-OSL\r\ncontent-length: 21266\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21266,"size_decoded":22021,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3a98c644fbceb42ca2f26260a3a98a8","sha1":"98bab19cbf64cae3c1a98786b95657bf41a9ec89","sha256":"7c3c6de49deec38a2ae880e0e1e0606caffd8321f859cf7d03f9e7132927f972","sha512":"92410fdf1b3243656fcea9f7770210be0e74d07d827ba8af296c2b1decabf046f7e4fb94ab349e43f668a4db73634c48d610a6dc00ad3279fb82702db0f3f5ca","ssdeep":"384:i4UqepJ8YucL3sfoDAwji4kOiD9vaHXbmGT0l7LbnnL78KM7kssCBK:iL8CiNOipvarTT0l7HnsvVswK","tlshash":"8aa2d1ad52391e7414687c043b79e8b17f6dca381370f4a17ac0dae15933fd781ac1aa","first_seen":"2026-08-28T13:57:14.480418Z","last_seen":"2026-08-28T14:38:39.500723Z","times_seen":10,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/icon-1.c67b4fe7.png","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.927Z","timestamp":1787927145927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/icon-1.c67b4fe7.png HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-14d26\"\r\nexpires: Sun, 27 Sep 2026 14:00:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1487\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0DsM2GxCTZlTozN6h6QdvFRPbiv3hAqYmQ0QVrHsblgwLArPDNgwm6qSSEgwPYHENVAJzEQ4uxlMlKZlkw07rKxlYzu56kyQrkRpMJLkNAj%2BcbQUl25TTBmTW61GZeMYgaNHBM3qrw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a323fcb60d5035a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85286,"size_decoded":85537,"mime_type":"image/png","magic":"PNG image data, 618 x 606, 8-bit/color RGBA, non-interlaced","md5":"c9b3bfd248c9e7a9e585aa7a1286ce20","sha1":"9d72910cf18298be2dc3234433de46df193afc67","sha256":"c67b4fe7f5de4bc1d7f293e2e7d4da53ba6b38dd9b041cf2af18eebcea96ee0e","sha512":"c675bf7d412296e75f1178f4646e107990f6972f0a08589be6fae8a2c6f16e23921410024a07a7426e57f357dd6a98c86015a064ab92da9e26a0545a4f574ad9","ssdeep":"1536:kfksDiRIr2DoKyAiZGV434LJSHX9ojgfeCn8q/ipfVzcg6t3evsBiS2e91Qvp6xW:ukBR6bAiZGVC4LJEX9rfV/iplewSF22c","tlshash":"e983020971ed48bd0e1f897405b323af1b4cc6de67cf324abce8c1f9d2b5521a868855","first_seen":"2026-08-28T13:57:14.476272Z","last_seen":"2026-08-28T14:38:39.515328Z","times_seen":10,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/slide-4.efc5d173.jpg","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.935Z","timestamp":1787927145935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/slide-4.efc5d173.jpg HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-2fa4b\"\r\nexpires: Sun, 27 Sep 2026 14:00:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1487\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ffWPYKQo34oy1dwJSrFTKkGKCVoydHKN6wZINg5h8hbDiAnIVKaDHFI6y21V1LT43rCeXDTtoTLjxx2ICYooiNpJknnSAHxX0zA9jB5fOrw2X3rMiAGbmECh0ZN99cuuMhUjBNDBlQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a323fcb61d5535a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195147,"size_decoded":191930,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1536x1536, components 3","md5":"7499beb5448182423004f606439d8284","sha1":"a27a23d520d1a9978d59876599ab71346cb53740","sha256":"efc5d1733d06df2f9e8ea65bbb3c814288c9006752ba173d8d1185d7ab96adde","sha512":"38d0a7a4a6ea1dba576140a7a522c6e52a5bb81fd4263d1f6a8f206e068ba8f77677dac29ed13896654b918688cf068d3c5870b9171d362af736a117a990b040","ssdeep":"3072:qjll70GHfLefKib6refpS2P9cuT8gnBSeKhLOOj2OYpPg+Iw5azK6:qjnzBsCefpN1dIqVKhLOEYdXR2K6","tlshash":"bb14228fdc38e579e1958d75718792f349b56077075be30cfa84fa84e6c3389a232829","first_seen":"2026-08-28T13:57:14.44649Z","last_seen":"2026-08-28T14:38:39.388614Z","times_seen":10,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/banner-5.d90dc9b5.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.940Z","timestamp":1787927145940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/banner-5.d90dc9b5.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-208e0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nCBZLO2xTrZajhwxHHaZCqkc7EIkFEvshe6nwCJ8NFegUSH8hagsZBP7N6cjJGSGzp6BOnWo5g%2BecTM2grlsM4GbE0xi49PpjWacfGbLwTF7DbZKqL03smn%2FuYi16ZmpPJ5fJ6Y1hg%3D%3D\"}]}\r\ncf-ray: a323fcb62d5a35a6-OSL\r\ncontent-length: 133344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133344,"size_decoded":134099,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"877dc65ab667eaa0e7e7a2cb03929539","sha1":"09570b91635c93652c50536552b7659a4984e071","sha256":"d90dc9b53c351ede979468e7d6cbab04277d5acf91c3be5a97eebe864f7e8b91","sha512":"ffe4ac1ecb55c9c970cdc48fa3f570dd34ca27d461b2efae8516e95de40bc45caf97e3d4f3554ff5d5a70ad9f73467df46e43ab2a8f5a2ad95753af5459701da","ssdeep":"3072:z5U5w43x80/8NnnOWJ8os5sCHuOqgM9CcK+OdT3Y9Pu6TPyh:zq5z2885OOBs5spK0CcKCLTW","tlshash":"f9d313691f45517a873436347a7271bededad5c39bb77963234701caa0f13c1b82e260","first_seen":"2026-08-28T13:57:14.477623Z","last_seen":"2026-08-28T14:38:39.449155Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/index.23aa5ba1.js","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.108Z","timestamp":1787927145108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/index.23aa5ba1.js HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-2e938f\"\r\nexpires: Sat, 29 Aug 2026 02:00:52 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1492\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVhqrJeodTn6si%2Bci2rO10zaqtPCuCCg6k8aLJTPqx%2FFDwj2Vo7FQU7bA%2BdVIrUXoMbqhfF60EFvcyxv3mM9vFiKbg3ruIhVQeQaWW9pKVi5RQu76Loy9Re4J8eHUZ5k8fLsWM6BSQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323fcb0ec9135a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3052431,"size_decoded":980118,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"86d48244a897edcf146466b892e5fb9d","sha1":"334cee286e60a4ebcdca82d55fdcca25afbc23fe","sha256":"7c66ee299c5b24ec59304c919528f3c150e8377a9ceef050c6fad79d32d5d46a","sha512":"e5af9d0554842bdf55fdc36504d136f35e9aef8644047ac446040576f27bbc8eb3be795b8db43823bd4aff8a6dc493ee8615a048c60b28ef43ebe84272a7cb4c","ssdeep":"24576:V5eLNO73ITrVdteWKwOxmPqa7t5Jn//qtsQw/l:V5eLNO73ITrVdteWKwOxmiSXJnqt8l","tlshash":"1d255a943099b02193fb58d5507b0405b22d2b59f40994e0f1fedea93aabc14a2fbf7d","first_seen":"2026-08-28T13:59:37.065082Z","last_seen":"2026-08-28T14:26:31.712364Z","times_seen":4,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/index.423c6dab.css","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.635Z","timestamp":1787927145635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/index.423c6dab.css HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-775\"\r\nexpires: Sat, 29 Aug 2026 02:00:56 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1488\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZEbVYdgAifSOSmGK1AqkqyEDnAnUrOF6b6rBGIev9QLiTcqABtz3zK91xc7vTbbeZYSQr9V1sESwAk1KAxz12%2FhjOYBxcuC8apNLN3qzczI9VqHd%2BbT7EGCcNlorag0xzkC3SnNlWA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323fcb43ce835a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1909,"size_decoded":1444,"mime_type":"text/css","magic":"ASCII text, with very long lines (1908)","md5":"33f14477d63664754ddd35ed36b36296","sha1":"f548c2421508f611b3eb70f14633bd2c6a2ec4f4","sha256":"22c1a6bf42484be495c110382086da3c4a14fd76776be225b6ae6d0de39a3dc1","sha512":"2d5c28ad2fa967b949ee81d0cec0889d22e84db7fcfc005201dacf74a47dfbcdf2302bf5d289e5118b1f7a50cb0bba547f791ade550fde3ec3c3138cdeb2a9dc","ssdeep":"","tlshash":"19414a3e86592f9c837ac3539fc0ce58322b97916bf2399f23c4a79547019cac15da8c","first_seen":"2025-01-14T14:50:15.348471Z","last_seen":"2026-08-28T14:38:39.323238Z","times_seen":16,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-12.aae51c28.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.904Z","timestamp":1787927145904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-12.aae51c28.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-4192\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rmwfx%2Ba0xqRbPLyDHB21spgx3ML3WINgFJJseIonbpSYnN4DrNCxoH52EI3JkYElwmysGUvNu2i6id6mV8C%2FCb2F1ol5VOxNSFwaLxTWQviKThc%2Fo63MWWW1tVvp%2BGSpW71KfGa42g%3D%3D\"}]}\r\ncf-ray: a323fcb5ed4335a6-OSL\r\ncontent-length: 16786\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16786,"size_decoded":17543,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"111e1681e240b9c960da7fcc70d0b670","sha1":"27cca73144820e6807087963d4efbb050e79e11b","sha256":"aae51c283d0e621516fee6f36aba2028538d171952d4645067a886e5d4526acc","sha512":"4f58341d842b8b519c783ef25e6cd36e94dda5d2ab585e0dcbf849d2281fecc99c88a5524f5392bd83433a3eb19cdcdc458d084eb02d819ecaeda879c5f7cb99","ssdeep":"384:p/N+rNkPHDzQD6O+NT2+WvOLBjNtgn/CKLCqmHmTta0:p/oYDzaw1iAtg6KWqmGTI0","tlshash":"9172c09a750aa32c9c657a1a22f92343c50e35ec719ccb7a64e61db03f6d5e78214ecc","first_seen":"2026-08-28T13:57:14.460912Z","last_seen":"2026-08-28T14:38:39.336866Z","times_seen":10,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/partner-16.f562f578.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.912Z","timestamp":1787927145912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/partner-16.f562f578.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-2858\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wp%2FCYG7%2FkjLoRjsxDMpBLlxlAEW4utJFLi2%2FY%2Bz36kQ0nTuXfx0xTms8gc9F8pPdbEcAio%2FOt1hFeTvQEwbq4TSE372XT87UUKl3eRynACy6Hh%2FhJrPggUjlEtSS9emb9cSdpweJPg%3D%3D\"}]}\r\ncf-ray: a323fcb5fd4735a6-OSL\r\ncontent-length: 10328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10328,"size_decoded":11089,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fb5865a2f168b597178e266054d1bed","sha1":"5293353db8ea6b76045c48268c4a4d1761b9b993","sha256":"f562f578805473f7c59422a8f2cb95e77a3999221dbd46b373802d8e2888efcf","sha512":"d06aa2c9661360340e05e735eea064ffa5418d61e172b07ea4156e0b0dbf1e707256bbc4164f6f1f0274120c6bd0141178655ac75d6cc8555ae72adbd223ba21","ssdeep":"192:od0TLDu/vPKNEzWtTnNU9NsOwMtdS9yxe0UJD0qPBYZdTvp3CFwjVMyg:xiut5Owv96UdTP+jlC8Myg","tlshash":"ca22c09e54e1dcc36803c855142e36bab99f20681c3fade23a5a305f44b5488fbd6559","first_seen":"2026-08-28T13:57:14.442938Z","last_seen":"2026-08-28T14:38:39.338472Z","times_seen":10,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/banner-3.0f9934ed.webp","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.925Z","timestamp":1787927145925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/banner-3.0f9934ed.webp HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\netag: \"6a85fd07-1142a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1487\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dws2IbW5WgFPyUesR6O%2FeQsWHFDqCA8PiLx3Be09q0nJrzGVPmlCzIs5utkOIUeF7dAPZAYCMVW4QMyroMIQLMl3IR5BAIRwHFNq9ixhTjAfa6K0LC7tq8H%2FmS1Ds16entzHaEk%2BQ%3D%3D\"}]}\r\ncf-ray: a323fcb60d4f35a6-OSL\r\ncontent-length: 70698\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70698,"size_decoded":71454,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"faa5210512aa3b72054d87ec32067b65","sha1":"55c2f2a70861ddb48961476a6cfb5a0f56f18cc0","sha256":"0f9934ed0c39550404c5453b6edc0154151649a809b482e3550b94ea2f6b68c5","sha512":"9889250136d3e82ad04223b20b8675b110911c51c197ad27bc55ad0508d26b858de53b4f061eef00dd6266ea05c6fd11962fd1f46f77c4a8756ff55a15744b08","ssdeep":"1536:cpaHm6fSvM9tGl7VailhmNnN3dxoqLFn8bKjwSd:cyf7kpaUINnN3PB8Sn","tlshash":"0e6302829811077ece3a7a3b4ef946f5bcf07b094924a98087e5d7945a3bd0ccde3654","first_seen":"2026-08-28T13:57:14.485286Z","last_seen":"2026-08-28T14:38:39.318388Z","times_seen":10,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revenueriverwork.com/assets/slide-0.8fcd5a9d.jpg","fqdn":"revenueriverwork.com","domain":"revenueriverwork.com","tld":"com"},"ip":{"addr":"172.67.217.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revenueriverwork.com/","date":"2026-08-28T14:25:45.928Z","timestamp":1787927145928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revenueriverwork.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 11:37:53 GMT","end":"Mon, 26 Oct 2026 11:37:52 GMT"},"fingerprint":{"sha1":"74:05:4D:EB:F0:8C:00:DA:8F:30:46:A1:AD:7B:E6:03:C5:0C:F7:D4","sha256":"72:05:45:C1:AD:49:60:E1:A8:12:53:49:2C:23:C9:5A:76:66:08:E5:77:C4:E7:2D:87:E5:D3:54:E4:89:A3:9F"}}},"request":{"raw":"GET /assets/slide-0.8fcd5a9d.jpg HTTP/1.1\r\nHost: revenueriverwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://revenueriverwork.com/\r\nCookie: server_session_77bbc75e=15bdb466b0529bcab7dbeb529072c8e4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 14:25:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 19 Aug 2026 18:59:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a85fd07-a854\"\r\nexpires: Sun, 27 Sep 2026 14:00:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1487\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ul4XUSLO9S72gnne6zk65EsWSgKE3q1t%2Fyv9ET5VrClK3g%2FLcqnspKhRew9NWpE6pGHu5N5EGUgqSscdNe%2BZbYo95nQsSkvIo%2BPH14R4QQB6jfMxizVctDzo3jlAkejQDlVtHBC9Ng%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a323fcb60d5135a6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43092,"size_decoded":41453,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1024x1024, components 3","md5":"400c1835468809a0011c657d4ff5904a","sha1":"925644a652a19d37e7917e8d4a7d695941e96057","sha256":"8fcd5a9de2abe15cc8e276ebeb15b945a681d150b8cb0c85dd15a7be28d6c972","sha512":"8ada337a5b48f9b05bee3677e903c8e1a1a28b4a4aa0ecd10f81d3be304c79b69e6ee02717c43041a43a864c0781b7934e0d6e14d7209d0b16ff4e81d4003246","ssdeep":"768:Q8kL/dcCLAdLV8VpqLCRXO3+9RNrpGpo7fFsjIUq/+:Q8kBcfVowLwO3+94poujz","tlshash":"9313e1bb2770cfdfd8bd6fbb86894610bdcd7494661f919a6338ec136642ad06c40350","first_seen":"2026-08-28T13:57:14.459137Z","last_seen":"2026-08-28T14:38:39.32099Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"revenueriverwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}