{"report_id":"eed791d9-9931-4bff-b44b-53b62a997537","version":6,"status":"done","tags":[],"date":"2026-05-17T02:48:04Z","url":{"schema":"https","addr":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com/index.html","fqdn":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","domain":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.244.210","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.rivamead.co.zw/404","fqdn":"www.rivamead.co.zw","domain":"rivamead.co.zw","tld":"co.zw"},"title":"DPD","dom":{"size":878,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (413)","md5":"b69798b862eed3d16566fd68fec973fd","sha1":"d544e433fd18930c62680a00d572259e919d0865","sha256":"2bac524229a72d06c922e8eb9c06d76687472bb677486e4232735893e9a4fd27","sha512":"80f4d09a973040583a9b6f4f0b326f9c9327c6e42797d7fe20c392a2536faf73c438fd50c4a53934de383934e2693da4fbfd23273409568a7839afe944452a36","ssdeep":"","tlshash":"7c11160240a1492b236306a1bcd1fb1575c5f70ed916ed11f2fa92991be5d82ccc747c","dom_hash":"domhash7c2793f7804835a0a9db4c8495cf0124","first_seen":"2026-01-26T14:06:49.478913Z","last_seen":"2026-05-25T11:16:33.940792Z","times_seen":36,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com/index.html","fqdn":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","domain":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.244.210","port":0,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T02:48:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"www.rivamead.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","ip":{"addr":"52.216.24.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2026-05-03T19:35:45.652842Z","last_seen":"2026-05-16T14:31:30.591213Z","alert_count":4,"request_count":2,"received_data":3709,"sent_data":1043,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.rivamead.co.zw","ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-02T12:09:09.367458Z","last_seen":"2026-05-16T14:31:30.987268Z","alert_count":28,"request_count":7,"received_data":1943092,"sent_data":3200,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com/index.html","fqdn":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","domain":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.24.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eed4dcd3a02d114f6609729c9e479d2c","sha1":"a117c654234b0cae770bd7af9dbfca80afb6989e","sha256":"6dc4921caba00b9131fec36af50718af4745500883641b4c2162d4f81c041e97","sha512":"a9102c513f2d3749453867b8d30b486fd6cb8721525e74c5946dce2e65918d355beeac76dbc289ce5ca4ec300692bdb6235688bf211f2e767447ef42edd5fd1d","ssdeep":"","tlshash":"1901125585c56a9fefece111a0547d5b0049cbdfe0ebc88f210211c70a48d90a8d4598","size":835,"data":"","first_seen":"2026-03-19T06:42:29.197378Z","last_seen":"2026-05-30T03:38:01.819368Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com/index.html","fqdn":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","domain":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.24.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"af641282be9d7cbc669066f5abf21600","sha1":"ca7537e0834f041e83ac7d92f2503ad5f3c6ea53","sha256":"43902f0591c56db2fd3a9f92b8a16f7067f7efd4596d7a96dc7367ebf197d2c1","sha512":"2085df2d2db8072ea6aee02c7279069e4edf6557f173fa3932a31c9e9ab5b0b74ec9bb2c711a27011a868f1e98919e3346f9b8fde1bd407e8b5ebfcb29acb096","ssdeep":"","tlshash":"7d31ea57f35a10f7ca4af811faa86b6f127d0c913016d69e1b066c2fc3c345b61d119c","size":1627,"data":"","first_seen":"2026-03-19T06:42:29.244171Z","last_seen":"2026-05-30T03:38:01.819937Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rivamead.co.zw/assets/index-Ca_tfik1.js","fqdn":"www.rivamead.co.zw","domain":"rivamead.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0327d96a2c2f85b455e19341019a4820","sha1":"abee1efcdb7ddbac92fb6533fd65a49fdb90ebae","sha256":"35969636362a9cebd8224b0a8b49000ff794db4f01271bafa258ac6b9b49787a","sha512":"ed3d757ea8a267ae3e9a40f639668da18cae2c643fa1da4c906324a63faf7ae795cb34c319cbf086be3374e4bcea1e5af04539777994a12a9e9b346715a50ecd","ssdeep":"49152:tM+Cy40O8iQq6vRWbY6jQsm+2H4fBODJ7duM4yfIlT/5oeQquqr://E1","tlshash":"4395beb87281b4219ba705d5a4af0019bf392923780dc8a4f07cd99f79f5905a27bf7c","size":1922034,"data":"","first_seen":"2025-08-31T21:04:58.730709Z","last_seen":"2026-07-25T08:54:51.906578Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com/index.html","fqdn":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","domain":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.24.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T02:47:41.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QEtgHw6qvJ58eHFho2yQ9mIUt1Oouds1TsoqHXwKE7gTl5y5ap+jpubD6q2Q0wQTV3Lu3nyckkU=\r\nx-amz-request-id: N4E70G2RY2K2HSTT\r\nDate: Sun, 17 May 2026 02:47:43 GMT\r\nLast-Modified: Sat, 02 May 2026 11:30:32 GMT\r\nETag: \"485a4ae513edfeddc82b1e2d6af51c9a\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: text/html\r\nContent-Length: 2805\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2805,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2503), with CRLF line terminators","md5":"485a4ae513edfeddc82b1e2d6af51c9a","sha1":"9fe5992d4e71c3fd11a00925bc98cc49513ae7fa","sha256":"ee932405451559b8ce97cbea18abd2bc3b8080f1a9f65c1c594e45f054a61af5","sha512":"a521c66f33ea92cace7f77bbd03e516d40abeda5ab73d627a50f6bc0b40478d2ba25a2f693420c6041b5854da1abf0333feb323f131dd8d9aeefad455020967f","ssdeep":"","tlshash":"d951d863868668afcfe8f410f5a4bb5f41694ac6605bc84f72021c9f4bc2a52d8d219c","first_seen":"2026-05-02T12:09:15.8114Z","last_seen":"2026-07-19T02:16:50.002408Z","times_seen":9,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":345,"dns":80,"connect":93,"send":0,"wait":122,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rivamead.co.zw/assets/index-CQXkNJXR.css","fqdn":"www.rivamead.co.zw","domain":"rivamead.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rivamead.co.zw/","date":"2026-05-17T02:47:45.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rivamead.co.zw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:40:59 GMT","end":"Wed, 24 Jun 2026 00:40:58 GMT"},"fingerprint":{"sha1":"BF:6C:4E:D0:D0:92:1F:93:32:03:F5:0C:B7:08:88:3D:45:8E:A0:88","sha256":"E9:C1:BE:F4:FB:05:79:36:39:34:F6:7E:AE:86:E7:8C:5C:28:DE:AC:2C:C9:55:D9:F4:20:DB:12:EE:C7:BE:BE"}}},"request":{"raw":"GET /assets/index-CQXkNJXR.css HTTP/1.1\r\nHost: www.rivamead.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.rivamead.co.zw/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:45 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 30 Aug 2025 20:39:28 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 17045\r\nKeep-Alive: timeout=5, max=30\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17045,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17044)","md5":"fa8d320ab86e6df4dd2b6365efe9615c","sha1":"86a754a9382e1924db3b985b4d3580fe6415e316","sha256":"5dbf1fa8fb7fdd3be478b621699d84e390d690ac21b3223a030ccdbf371c0c94","sha512":"a14d7052675232a6551853a4fc7c4d08a33307ffb71dbd7a938f4ffce1130fd5147148b687f2c6c945d8bb4d5aba3b98449b9f7177bfa40fc6d4141d0467d88a","ssdeep":"192:L6vRs86l3DnixwOW9JyW9Jy96F36W1TQtn2thNUdHZNmH7A7:WR1wdFKUst2cZNmHa","tlshash":"be72541d6704143a7c5780faf4a4fe89b21bb5d1df2bd7eab8536610d7c23a21da2308","first_seen":"2025-08-31T21:04:58.726593Z","last_seen":"2026-07-25T08:54:51.905081Z","times_seen":41,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":219,"dns":1,"connect":106,"send":0,"wait":110,"receive":106,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"www.rivamead.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rivamead.co.zw/assets/index-Ca_tfik1.js","fqdn":"www.rivamead.co.zw","domain":"rivamead.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rivamead.co.zw/","date":"2026-05-17T02:47:45.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rivamead.co.zw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:40:59 GMT","end":"Wed, 24 Jun 2026 00:40:58 GMT"},"fingerprint":{"sha1":"BF:6C:4E:D0:D0:92:1F:93:32:03:F5:0C:B7:08:88:3D:45:8E:A0:88","sha256":"E9:C1:BE:F4:FB:05:79:36:39:34:F6:7E:AE:86:E7:8C:5C:28:DE:AC:2C:C9:55:D9:F4:20:DB:12:EE:C7:BE:BE"}}},"request":{"raw":"GET /assets/index-Ca_tfik1.js HTTP/1.1\r\nHost: www.rivamead.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.rivamead.co.zw/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:45 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 30 Aug 2025 20:39:28 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1922034\r\nKeep-Alive: timeout=5, max=29\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1922034,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"d3072f95a1d0fb45f542b6727d02e816","sha1":"ba9cb7950bf6155a775128b0150d8dfe3b4d5c21","sha256":"d0ae5d4d381790559e54b3751ad836b3ceda0a5a732dd35010d3c1d923cab3bc","sha512":"2b4002e01cac3ae077df1c035bfcb6371d03f9e61fd3ed8b4bccd527d145d50f09a8849f5835d54aa58d5f2e3611825e58fd61eeb282b0f5bbe36968c390e8de","ssdeep":"24576:tMwVCy40O8EjQgT6v4kWbY6V5p6sm+2H4fBOD4:tM+Cy40O8iQq6vRWbY6jQsm+2H4fBOD4","tlshash":"24258df87241b42297a346e540bf040aff392917780d84a8f168ddde39b9549a17bfbc","first_seen":"2025-08-31T21:04:58.725507Z","last_seen":"2026-07-25T08:54:51.903657Z","times_seen":40,"resource_available":false,"data":null}},"time_used":943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":831,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"www.rivamead.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rivamead.co.zw/api/config","fqdn":"www.rivamead.co.zw","domain":"rivamead.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.rivamead.co.zw/","date":"2026-05-17T02:47:46.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rivamead.co.zw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:40:59 GMT","end":"Wed, 24 Jun 2026 00:40:58 GMT"},"fingerprint":{"sha1":"BF:6C:4E:D0:D0:92:1F:93:32:03:F5:0C:B7:08:88:3D:45:8E:A0:88","sha256":"E9:C1:BE:F4:FB:05:79:36:39:34:F6:7E:AE:86:E7:8C:5C:28:DE:AC:2C:C9:55:D9:F4:20:DB:12:EE:C7:BE:BE"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: www.rivamead.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.rivamead.co.zw/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:46 GMT\r\nServer: Apache\r\nKeep-Alive: timeout=5, max=29\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":152,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2f0af48d1b61bae5a5fad22003fc1423","sha1":"98d417c90c03370379197e0d3aa814af21eadd63","sha256":"0c2e58fa1fa445900790db9d85c8505747e313b48586fe22ca49c9729e72e1dc","sha512":"dce09c077a82235f510a2086530310310e7ec1c11eb9551f6a6752d8c0750f8f483403b03f1203da55d915dd2ec87032cede3f4f6490e048eb4e6ee03d13bac8","ssdeep":"","tlshash":"7fc08c0f0c060ab0c4480400d132fe02451e102230125088a17c71a4a074a8f012046b","first_seen":"2026-05-02T12:09:15.809693Z","last_seen":"2026-05-17T09:15:50.596135Z","times_seen":8,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"www.rivamead.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com/favicon.ico","fqdn":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","domain":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"52.216.24.68","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com/index.html","date":"2026-05-17T02:47:42.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nx-amz-request-id: N4E9HXEJNHRAJHH9\r\nx-amz-id-2: 3Bd5qefsFLUszKBzRsrqCODpDrh7GTUQYMtes2jU61WqCx0rOb/rQwcfx968GnAILnJYx2Bfjks=\r\nContent-Type: application/xml\r\nTransfer-Encoding: chunked\r\nDate: Sun, 17 May 2026 02:47:41 GMT\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":243,"size_decoded":0,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"6e3ab8e9130f474bec466733ebb16e32","sha1":"1917e81758312a3575721bb9124592e0581db929","sha256":"a700695e2c5f74f7f3b07247347436c97c9b030cc351508cf7ad56f2de5cb620","sha512":"5e31e2fa6b4107994025aaaa638c4a013f13aebef63a6e46727799aa46212fe03eba7391fe8899c874a9d188f75bd4b0f51785bd33e40e4cfd56e19d001fe010","ssdeep":"","tlshash":"97d095167600141d0591c434f72efa377754153811c41574a5811687db912810d2c651","first_seen":"2026-05-17T02:48:26.087339Z","last_seen":"2026-05-17T02:48:26.087339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"setupussser-b4nljkqvdpd-dcwwzdf7.s3.amazonaws.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rivamead.co.zw/","fqdn":"www.rivamead.co.zw","domain":"rivamead.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T02:47:44.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rivamead.co.zw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:40:59 GMT","end":"Wed, 24 Jun 2026 00:40:58 GMT"},"fingerprint":{"sha1":"BF:6C:4E:D0:D0:92:1F:93:32:03:F5:0C:B7:08:88:3D:45:8E:A0:88","sha256":"E9:C1:BE:F4:FB:05:79:36:39:34:F6:7E:AE:86:E7:8C:5C:28:DE:AC:2C:C9:55:D9:F4:20:DB:12:EE:C7:BE:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.rivamead.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:44 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 30 Aug 2025 20:39:28 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 513\r\nKeep-Alive: timeout=5, max=30\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":513,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"3a0e8ca123f03fe7b4431b5c368d454e","sha1":"0142df046f3c07bb5933708b0074b25a9fcfb14e","sha256":"1030dabf7b195c4356ccdd4b559e1d61c9d4ba4e7a20bab24adc589fcf192022","sha512":"04c9fbd66a72ced7c2525b0a83dbc6d6a996363f0d3d7623178ee3f5d04d21a3d4496d7748990ebd0f482a20f4304ee52963b213cdeb23084af682d3accbcc2f","ssdeep":"","tlshash":"a2f09e1214c08d1813309664aec2f518d957eb4347496e0572da317f1fe1781cdcf464","first_seen":"2025-08-31T21:04:58.724417Z","last_seen":"2026-07-25T08:54:51.902269Z","times_seen":43,"resource_available":false,"data":null}},"time_used":1737,"timings":{"blocked":812,"dns":589,"connect":108,"send":0,"wait":112,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"www.rivamead.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rivamead.co.zw/dp.svg","fqdn":"www.rivamead.co.zw","domain":"rivamead.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rivamead.co.zw/","date":"2026-05-17T02:47:46.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rivamead.co.zw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:40:59 GMT","end":"Wed, 24 Jun 2026 00:40:58 GMT"},"fingerprint":{"sha1":"BF:6C:4E:D0:D0:92:1F:93:32:03:F5:0C:B7:08:88:3D:45:8E:A0:88","sha256":"E9:C1:BE:F4:FB:05:79:36:39:34:F6:7E:AE:86:E7:8C:5C:28:DE:AC:2C:C9:55:D9:F4:20:DB:12:EE:C7:BE:BE"}}},"request":{"raw":"GET /dp.svg HTTP/1.1\r\nHost: www.rivamead.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.rivamead.co.zw/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:46 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 30 Aug 2025 20:39:28 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1569\r\nKeep-Alive: timeout=5, max=28\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1569,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d159f7df956a2c9bf33400f556689ba2","sha1":"6a2383d56ce4115ba67bdb9fb36ad0f86d395061","sha256":"de847025d79184353e6920162729ce6cf67580f841a5631a754ffe633c322bda","sha512":"1b871cdb14fbb8234008e0c679b67560ad25da23663b36e7fc4f5d9b765339bb72cb4b4509c44760b86e500caa23f329075558aaa691c29a5ea2d986f56ce354","ssdeep":"","tlshash":"6331d039c3598a3fdd0f8214daa4495b62b1c197a590d2c4f76a662cfd148d3180f7ec","first_seen":"2025-08-31T21:04:58.727634Z","last_seen":"2026-07-25T08:54:51.898465Z","times_seen":37,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"www.rivamead.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rivamead.co.zw/api/check","fqdn":"www.rivamead.co.zw","domain":"rivamead.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.rivamead.co.zw/","date":"2026-05-17T02:47:46.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rivamead.co.zw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:40:59 GMT","end":"Wed, 24 Jun 2026 00:40:58 GMT"},"fingerprint":{"sha1":"BF:6C:4E:D0:D0:92:1F:93:32:03:F5:0C:B7:08:88:3D:45:8E:A0:88","sha256":"E9:C1:BE:F4:FB:05:79:36:39:34:F6:7E:AE:86:E7:8C:5C:28:DE:AC:2C:C9:55:D9:F4:20:DB:12:EE:C7:BE:BE"}}},"request":{"raw":"GET /api/check HTTP/1.1\r\nHost: www.rivamead.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.rivamead.co.zw/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Sun, 17 May 2026 02:47:46 GMT\r\nServer: Apache\r\nKeep-Alive: timeout=5, max=27\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eeba55746c1ac85b715b1f5a6d761de9","sha1":"a8b9659c3f72062732078ddddafcacfaa2bab627","sha256":"90202b1d54ecf91fd1df30cd53bedc9e1f30cf7a889b0c15d444d297e6b2f310","sha512":"1bdb318529d8c652d1abc52e1969f16907832b8bb06e70b34a410653ca940627470df8ccdfe9cb2da76fa5781f5f9c21131533e9d4b5a6a1d995f0f073d3c550","ssdeep":"","tlshash":"cb90020c13840009036b07010f93055810501270e9102b016ef4106804024464423051","first_seen":"2025-01-04T14:09:57.907294Z","last_seen":"2026-08-14T11:30:50.046878Z","times_seen":166,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1144,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"www.rivamead.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rivamead.co.zw/api/bot","fqdn":"www.rivamead.co.zw","domain":"rivamead.co.zw","tld":"co.zw"},"ip":{"addr":"69.175.99.163","port":443,"asn":32475,"as":"SINGLEHOP-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.rivamead.co.zw/","date":"2026-05-17T02:47:48.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.rivamead.co.zw","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 00:40:59 GMT","end":"Wed, 24 Jun 2026 00:40:58 GMT"},"fingerprint":{"sha1":"BF:6C:4E:D0:D0:92:1F:93:32:03:F5:0C:B7:08:88:3D:45:8E:A0:88","sha256":"E9:C1:BE:F4:FB:05:79:36:39:34:F6:7E:AE:86:E7:8C:5C:28:DE:AC:2C:C9:55:D9:F4:20:DB:12:EE:C7:BE:BE"}}},"request":{"raw":"POST /api/bot HTTP/1.1\r\nHost: www.rivamead.co.zw\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.rivamead.co.zw\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.rivamead.co.zw/404\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 17 May 2026 02:47:47 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: https://www.rivamead.co.zw\r\nAccess-Control-Allow-Credentials: true\r\nVary: Origin\r\nAccess-Control-Expose-Headers: Authorization\r\nKeep-Alive: timeout=5, max=26\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/json\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":24,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"936879557ac2f2020b31ec4ac574180b","sha1":"cc21a239a20f61c5dca6d84b4ee5734369a0e9a9","sha256":"2a4b7ac210a142c078d9a49b11222d95f6e092b0e544a7bb70b3096934a55dea","sha512":"cc051d9bd73e5d954220dde3d6cea9564c877dece197eba019746956ff4d991dcc647be2b9cb08093eaceec30eaeb6916cd16a0411a3cdaa94e778afdf561567","ssdeep":"","tlshash":"49700022220a8ece2000228280280c0020e800b080008808c03c00088e000a030a2008","first_seen":"2025-04-08T11:37:44.740552Z","last_seen":"2026-08-14T11:30:50.050392Z","times_seen":191,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":657,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"www.rivamead.co.zw","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-17","alert":"Phishing Block","trigger":"www.rivamead.co.zw","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}