{"report_id":"ef7203dd-4261-40fe-aa9e-e6e058933965","version":6,"status":"done","tags":[],"date":"2026-02-16T14:53:12Z","url":{"schema":"https","addr":"investment-recovery-services.com/","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":0,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"investment-recovery-services.com/","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"title":"Investment Recovery Service - Get your money back.","dom":{"size":168433,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (24896)","md5":"2afa427972cc339bf78fe06cbe3e7b80","sha1":"2ad08baccd824aabf66ac5df6852cf24d6245302","sha256":"eef3abbcb5e34f9ef7b035e5d0925b21d7d3dcbf46303216087720c731a20a22","sha512":"8fea524dd051dbae380d6ae2c5e35dd32f60e184e13281150996415f9e8faa32801dadaa02aad066af40b5ace3fb026a104507d3ffa48e699b3900ac6682ff1a","ssdeep":"1536:TAS+nM4S2xPBAvxu+tTgw2OOOOOJOOgOOxfj+VrasmhGtMixD48YMbqH5xgUgirx:TASGpIefj+I","tlshash":"f5f3d01091f0155785938240bbf2d79b1eb09207de270cb4b3ec0f9aefd6e9d895b299","dom_hash":"domhash6a9238f8a85e389774f3d3533c3a697c","first_seen":"2026-02-16T14:53:16.527483Z","last_seen":"2026-02-16T14:53:16.527483Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"investment-recovery-services.com/","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":0,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-23T14:53:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"investment-recovery-services.com","ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-12","domain_rank":0,"first_seen":"2026-02-16T14:52:53.488911Z","last_seen":"2026-02-16T14:52:53.488911Z","alert_count":73,"request_count":73,"received_data":7522114,"sent_data":34578,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"chroma.js","description":"chroma.js is a small-ish zero-dependency JavaScript library for all kinds of color conversions and color scales.","website":"https://www.vis4.net/chromajs/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":3,"received_data":12370,"sent_data":1519,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":2,"received_data":101870,"sent_data":1136,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"investment-recovery-services.com/js/viewport.jquery.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb133064340f7c43c7533437f4c3dbef","sha1":"5af14719f1bfdd6e4b74e1d780c548a30a309137","sha256":"222227004ab2ee5c575a18e35c95739331439dff372d6de9784ee3d843b3121a","sha512":"32ca60339ccc4f9d709fd697f9f5372cc4f281ae256b7258cac407b3449641a8d4e97a5373bf8c89a0135b8afd35315ec6bf5d1254bd087bda281789f14ac10c","ssdeep":"","tlshash":"81319b8a3c9110109d33fb7a8f3f916cf7a98627014a91503ced83916f70b249a9ceec","size":1832,"data":"","first_seen":"2023-03-08T14:28:48Z","last_seen":"2026-08-09T07:22:13.223727Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/gsap.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9022c8a069e9f109e32ee43d3997c61a","sha1":"6000224cbf73f2d64c5b265d1350597a28ee40a7","sha256":"e1399e3d517bcae1a8bf5ebdaf04cf6eeca0616062f42c6a365492bea49f6c1b","sha512":"00f66d08a22c7ce4bf9692800821e1c3ea8b795c23d1e7a5d937bb79b16fd9b3e4c9477754b631e9aad500a5ffdc30f75d1a8358478c06569be4f186bb46ce11","ssdeep":"1536:G1BwKyDBpQvvtMOeqZ085JjhBhWDs06YnwoGSrC:ewNQPC8vjhBhLLYnwhSu","tlshash":"b763f9cd3292b42343965161447f0a0bf33ba998640f0918f269e5ce7d3c99d42bbf7a","size":71184,"data":"","first_seen":"2025-04-03T10:19:47.616411Z","last_seen":"2026-08-06T11:35:05.726914Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/main.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c91012e4266536ba36ad3b571c69dae","sha1":"bdd9bb917aeef7035cd6fa4ed28cdb68be8b7f02","sha256":"775f41073cc4d23e747930adfdbfc9e17f9a5a04f2f38ffd6c3fe225e3691552","sha512":"b44bf06ed3c671c6861bd586e3a2ce98a4b39e558d9cd4372569c2b3dc0603cdea342b7e843ea1dfdfcc3f0391af4b4d2e6efb51ba2851c2ae18ce72043ed560","ssdeep":"384:NNOFR49V8CTHxq/hTrV7b8Wm8p3FgP8KYUi:zOFRo8CTHU/hTrV7b8Wm8p3FUzi","tlshash":"5de2410991b620320177b13e5f9f9200b672414b9e9afd257e9c82580f5d73da2fa7f8","size":33373,"data":"","first_seen":"2026-02-16T14:52:59.626652Z","last_seen":"2026-02-16T14:53:16.581346Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/wow.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"164b265e6089f412b7927848018ae6a1","sha1":"1717e6b487126c5c3e992d47dba4c6c10f4529bc","sha256":"81c4cb0bc57b5cce1816bd704f7a2b12ec2b143c6a067402644d4a139b273350","sha512":"956bbda2e4f3069c72d8dbc003d04d02a6026428beb9b9c8b0b78eb1dcce9b73b6f619b5558a4eec9c6d681eaec6ebb45e4ecd504a77ef9ad69b9b95373a3270","ssdeep":"192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:iEE/Amu6qUxVBxGkAI///IR","tlshash":"58f1bba5374a70718a9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","size":8157,"data":"","first_seen":"2023-03-07T01:42:37Z","last_seen":"2026-08-19T09:00:17.542425Z","times_seen":3529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/bootstrap.bundle.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"257e555b2971eb40da996442f809e5c9","sha1":"b4572bcd3292314ab197e03d099c8aaa35bb2be7","sha256":"ce7d49ee399e02fce69c1c93845d4d78e85aec2aab0318046a837c2bcc68c7d5","sha512":"9a560c91ea95edabb1c3bbb1a7d1cc7e3eb33b53f2c9432c11b6a9b3116aa82abff73d8655afc05fef7f93ca41b608c91560f0b6fa5aaf376c0ee64eb22cf1fd","ssdeep":"1536:Hnw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU17B:HwXza3YCl45wZODZTbYRB","tlshash":"e473c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80669,"data":"","first_seen":"2025-09-16T10:54:55.187078Z","last_seen":"2026-08-06T11:35:05.723097Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/ScrollToPlugin.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba1e3a5690d71cf31ab5300f17530381","sha1":"fc076ee1d062d367f73dba8d6a6a77a7e0ec42d9","sha256":"afe542906a095e12b7dece5961098a768f620c156a3f0a9714530158afa45cdd","sha512":"f80a1d5df1913259804fb1e2ea29825fbeb1165baf19b770c2ecf417cb719d6bd0bdbcbe0c9e3f6c421debbef24f2b4c21675dc1d55d3f9f772634673d6b8364","ssdeep":"","tlshash":"d281519d7440f47261de06a9c11f578ab235643f362a4490b66decf9bc10b7b6123e8a","size":3901,"data":"","first_seen":"2025-04-03T10:19:47.671575Z","last_seen":"2026-08-18T12:04:34.027849Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/jquery.meanmenu.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc810858428745447b776d166ec282f5","sha1":"2f4bbb153631605fe642acceae1763a65abfed8c","sha256":"1df543ddc41bce98dee5d87d6a09c6b2ed02991870f51d8ee370397ad8721b58","sha512":"3704d5a1c2896ec02a5641c9a425e53f871a32f8a229e885603c604ff0ee96c72ed080b515795ed1ca28817e6fff8b2f56fd57a1126b47c8ad2a9df936ea96b7","ssdeep":"96:LtlVT5fG+EMiGbSJy4NnaToza990dBrW1iAodZZ7v69FFSonOP1SDiA:3VT5BhbqyOjciAeZZWjOTA","tlshash":"d1c1ed6bb17040f8a0bb6951b97af331b1f3660bf182d402317e64262f35a6114a2ff9","size":5997,"data":"","first_seen":"2024-10-20T14:52:38.634885Z","last_seen":"2026-08-15T02:57:15.748967Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/jquery-3.7.1.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a1b0aa0167c8a4df724d18d06814a8","sha1":"f3f468ccf735476c87e3b49e274eb3752a884607","sha256":"7aa6b0e08f48a0f95d8df7ea89e4cbfe1ef3d1e8c0f7373f7f25edfb4e4a325e","sha512":"05352a89084c3b747c375eea2107b9b3c660ffb5989d48f10ee30e4acf917db21fa7ce56f9b385de0fcfd0873c4c4e9d96c48f2f38e26d5cd5dd28ed792c3e06","ssdeep":"1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:vHNwcv9VBQpLl88SMBQ47GKO","tlshash":"3783f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87535,"data":"","first_seen":"2023-10-05T13:52:49Z","last_seen":"2026-08-20T10:21:44.041688Z","times_seen":7294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/jquery.magnific-popup.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-20T07:57:09.623452Z","times_seen":25060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/parallaxie.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a97352192cc0508c4f058de99ccf5b6","sha1":"8e46bfe8042e030867cc3990480a9b29a435ddd6","sha256":"cdcd31326b36cc8381111429ca1ea11bd3174c517516a21baf4440082abe9077","sha512":"094662ee18b850e32fb9893c57e940c6f00caaa3922b7bb83275d90451cbee7f4f6318146c71f546c70562934d7855bd42bbf2fa52fc540ef86381896625980e","ssdeep":"","tlshash":"3f419bc06413920b76fbd5e58f7e0900d23ac2171148aa1bbb3e62d96fb052c85c3ee4","size":2072,"data":"","first_seen":"2024-12-29T00:41:48.311446Z","last_seen":"2026-08-20T04:07:29.068217Z","times_seen":567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/ScrollTrigger.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d469515d6fa7768e0b5b5ba504e0e369","sha1":"97f09f13de70f3ba5ebed70bd9b74651f9a91aff","sha256":"e101c0c03e856f9ed31f93d2f1ee8524826a1bc620a909a2c65134b538154038","sha512":"c66705dee2406a32c936c1d99ca4dd8debb016ff14733f9db547265cc1cea0dad95d56e19c5e4f040412643f413d7f06f8d130648acaee08572e88b0431525b2","ssdeep":"384:oBdfDFqm2m+W5A/uJJFffJH4ukQIVK7FV8ZdrVbrha4L9vWqOMMtSyV9MsR72QIP:AdjYWJJRpnIw7FVA3x9ROMMtSQ79TFq","tlshash":"730308ce3244b07267eb62b9912f0206733614d9691f4068f622e4e93c7e57c877be9d","size":40607,"data":"","first_seen":"2023-05-21T11:30:40Z","last_seen":"2026-08-18T12:04:33.926409Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/ScrollSmoother.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"595c2528770a32b1a5a85d9d1ffacfd9","sha1":"38097b186282e96539787c31326c8a5eb03fbe7a","sha256":"a1cb2add7e6abcc9edf8322db72a05eeb806e5be364382dd5d3e92a29271377a","sha512":"0989ec37b551734406a51604d135496cf243dc499ffd7f59e24e7000a8240ae64954f439eb45c0c338f107483a9bcf1cf527853ce44a33726e255c8f4a019176","ssdeep":"192:Acjw7J0A+d6JEh0DATFAT2KACXp40IFwdljI8w89SjL3VbpJqyQ7R1cTPHu:s2QjDWxKAC46M3FBpNQ7x","tlshash":"f642c5a93245b0220bdf017ac56f6706b37154594a0e4424ea28ecec3c7c66d5bbbfad","size":12071,"data":"","first_seen":"2025-05-10T20:41:59.302987Z","last_seen":"2026-08-16T05:18:40.827291Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"investment-recovery-services.com/images/brand-6.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/brand-6.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 22:09:44 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1979\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2622,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 24, 8-bit colormap, non-interlaced","md5":"c98494cc05abc1562ac33d3ce87484be","sha1":"76532ce94c76e6561f0899463809b26c961f3793","sha256":"5332a34acfc9759c902912baafdcb1d871f8ac8e75918b60b1a5b770b385d431","sha512":"0eff482dd2a0f86e04308dd2a11ea4d53131734207ac05b827d4dcb7d559e59eb02e0c58bce2e4ee3db3c9684bb2067ddbbcc9862c06adb729740a69445da42b","ssdeep":"","tlshash":"7651eadd48e12835d7a49f6b90b6942cffa6f32b8232c2207359d157cd7d08c43a4593","first_seen":"2026-02-16T14:52:59.573199Z","last_seen":"2026-02-16T14:53:16.532099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":456,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/01.jpg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/01.jpg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 11:25:20 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":195129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 517x496, components 3","md5":"21b80367067a38c39f6cdb3cdc0aa61d","sha1":"b87f72c665ba52e84ba27015e27fba9d9c9cebad","sha256":"d14cbe8d14e9aeb275a89ceb8eb35df2b87f60555a94cd4b2d17b99c77825cb6","sha512":"5219d1d932fb29cb256cd5f9a98591fbad340e86a427c89458ef50c19950fdb3ad3025c7f402759e1b459255febad6245ea8812cf99f95aab26420ec526521bb","ssdeep":"3072:8Ov8bBmYNvu3DxdS3oUz/xMpm7+GN1x8iVf6qDw8IB74Na+zxdcp2R/vgOmcRfje:8FbBPNCdS3oUzKE7lNsmf6Dth4NBzfWN","tlshash":"7514124beec170c5c3a0193b67c593a17b452e2b4d34a498bac04f01d749babe9cc79e","first_seen":"2026-02-16T14:52:59.600952Z","last_seen":"2026-02-16T14:53:16.532911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":242,"dns":0,"connect":0,"send":0,"wait":38,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/10.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/10.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:30:16 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1632\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit colormap, non-interlaced","md5":"c67ba602db9100f85b57a9c78031367f","sha1":"f3a52ecef1afcd38bbb196d025a6dd1360ffcd97","sha256":"70b6f6358f1c36aee20c669d431a217ab2c431f751a1df15d8dd6491b52166e4","sha512":"44a2ed8cb81ef4e0c7c16385f762be12a35d061797a98358858239f62c36d62b4b3e6a4a7de9e0e48d506d97a44e6c0ee7caa09064239892b701dbfebf97dd43","ssdeep":"","tlshash":"05310a7e8d580f6cd04cac233daa5b37280666d2a658194a98f9ac18406480049ddefa","first_seen":"2026-02-16T14:52:59.594489Z","last_seen":"2026-02-16T14:53:16.53365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":314,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/14.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/14.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:35:32 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1892\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGB, non-interlaced","md5":"29e20ae24c5533eb9c7dc7d573be4079","sha1":"6bcbf2d4b38f6acd6004eaa6b21c1459f438df50","sha256":"60d46e3db25427cf6231cc2e43c1b29bbc8cae0774a3e7819666f5e4b1e3c1d8","sha512":"58e7916621e7515f37aeac35cc7ddeaa847253dccdd73791a1b6b5cc50335b19a02a99a3dbff736cb1d779f29bd0d060c03c4ae0d70c70032cca79cb77a370d6","ssdeep":"","tlshash":"35311bafc93a3875e4c65a1a3a188744b1f1109153daec40e23614f5750fd88922e5e4","first_seen":"2026-02-16T14:52:59.644379Z","last_seen":"2026-02-16T14:53:16.534604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":342,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/wow.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/wow.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2828\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8157,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8099), with CRLF line terminators","md5":"164b265e6089f412b7927848018ae6a1","sha1":"1717e6b487126c5c3e992d47dba4c6c10f4529bc","sha256":"81c4cb0bc57b5cce1816bd704f7a2b12ec2b143c6a067402644d4a139b273350","sha512":"956bbda2e4f3069c72d8dbc003d04d02a6026428beb9b9c8b0b78eb1dcce9b73b6f619b5558a4eec9c6d681eaec6ebb45e4ecd504a77ef9ad69b9b95373a3270","ssdeep":"192:7mEE6yAmu6qUxbU5C9nrr1GkEPIAeJ3KO4poIR:iEE/Amu6qUxVBxGkAI///IR","tlshash":"58f1bba5374a70718a9b6176c92f0202a532256e74d4c8ec747cddd4aeb4a29336bf3c","first_seen":"2023-03-07T01:42:37Z","last_seen":"2026-08-19T09:00:17.542425Z","times_seen":3529,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":162,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/fonts/fa-light-300.woff2","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /fonts/fa-light-300.woff2 HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 392136\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":392136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 392136, version 768.256","md5":"2cb9262f4870f225de120af23500828a","sha1":"0330732496c970248a96c6df732b4b6e8407246f","sha256":"d9c0c73c3e6a75d59ff20ce5e1d4bdec5ee8c6f2724ff0deb6cddb8f7f207dbe","sha512":"a7dadd4b34b2ee41b64798597778f639d8436e594a9b97c9dd7efbd751d7008d1b15e5e54dc60e75a631df5715ab5ff9a5fa0eebe1df935678cf9fe0dd5a97a8","ssdeep":"6144:DUfnfw0WCrkbEcqbPhKJhI/xF6/lWUcPzI47ZsQ/n6Z54Co3iG0n18qvfk2zk6Jy:DUvfw0VIb3hcj2sUN4Hn60R3iGu1Xvf+","tlshash":"4f8423a7d4def2edee2310d97336e1021de46d624212a02ea5582d9e4ed336e93741f8","first_seen":"2023-05-07T18:59:16Z","last_seen":"2026-08-17T06:38:35.902529Z","times_seen":906,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":34,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/15.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/15.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1076\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1053,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGBA, non-interlaced","md5":"3abbfdc8369bf2af950f15aaff7f3fe8","sha1":"3dc67488e1d9a0c9f14d40cd764db231bdf5d5f7","sha256":"5b478ed47227466765c2784bc095dd6f9be4dabfbc59740223c6d548aecfbfdc","sha512":"348de0a607b837f39e0838e9e3231e9ace1f07c470e4663b99a6747b176bff659a2c0a4829809de8a436c8a6a1995dbd6ffee62a7b56b2abdb08d24f0d880161","ssdeep":"","tlshash":"a211e5c3f34ad1a18104d1b2ce64a0da50e912cac19fb8ac3564b718296ecbb64dc3e4","first_seen":"2026-02-16T14:52:59.645949Z","last_seen":"2026-02-16T14:53:16.538988Z","times_seen":2,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":442,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/jquery.nice-select.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/jquery.nice-select.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1042\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2826), with CRLF line terminators","md5":"fa2a7892cda8ee313eed6f58db4df3c5","sha1":"127bf1866d0e3fa1ba35530af760f9f9cdc63565","sha256":"d7f9ffee067638a1decf762b4455f6e3c5d13876d1c8cc8b3e7a9f1f508a196f","sha512":"b09f50383caa389468c73760a141388191d692f2196fe2ad5c823d9fa544d69d6997a249401f34fb0b41394ca59d7efd83ebc6ed62f7ab203bf107f1ad073439","ssdeep":"","tlshash":"fb513f14b10122f648ff24d33912b143a075093dc82ac14ab97e86b21efec02aab6d4f","first_seen":"2025-12-07T12:43:56.224626Z","last_seen":"2026-08-06T11:35:05.742258Z","times_seen":5,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Feb 2026 14:52:49 GMT\r\ndate: Mon, 16 Feb 2026 14:52:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3449,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"818d326c6825eeba3027e424fee242ca","sha1":"ca79a5a9ccc0bde258f8f716f5661f13303a8c00","sha256":"920f031c14bc238f66ebadfb908217817f60ddb12d8e10e35e9177c28cc396d5","sha512":"b6b059867352e9548270c98a77f8ac2c211fd6d35440f7f2990041d7ba4767038ffcf1fd5dbf85fd0f2a0dab79b04605b3a00cd41ea14b35427e44ebe71518be","ssdeep":"","tlshash":"db61b4a0092f9640ea831dc663cf3e3a9e5e51a5705584f99ffd0858ec69c2a73b1b1c","first_seen":"2025-09-14T00:39:00.512778Z","last_seen":"2026-08-16T21:49:57.647455Z","times_seen":2017,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":83,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/rating.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/rating.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2727\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2761,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 299 x 62, 8-bit colormap, non-interlaced","md5":"580be2aafee02f3587e6aa1b6d084c04","sha1":"936b5a0b2b914823c63461475dbd4d39839e89cc","sha256":"98327326af0dfc46982f79dd54e9ebedba9ce9e0e413a613bd2656aa01ea7933","sha512":"d6e9b1872b6375eec6a694357afaaa88258cda0c1bd7d00cf51e7c24af3e7d4ddf8fa502bead65265f44096550a195b745c32fb80dbc073c96874adaf988ff3b","ssdeep":"","tlshash":"90514b4d17668ba8c3b426609d30f669edc61d11392aebb395ccf151ccb839d1b04ac0","first_seen":"2026-02-16T14:52:59.649324Z","last_seen":"2026-02-16T14:53:16.542752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":401,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/client-1.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/client-1.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 00:55:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1620\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit colormap, non-interlaced","md5":"0823a4a5eceeb8b99cfddc6110fb1140","sha1":"252add45dd6d0a92cfdba5d9ba23765dfba976ef","sha256":"68ade5fc28bba5fea0faf607a49cbf977ea1da554540029d934252ad6b5cb0c8","sha512":"e81d8bc332ae228f45ec9046ef45d6d4f916c20757a303611c3ad779e2a60ab87b673cafc8533cd6c7c8e7a87779fbc5d12a7862e669aa107f4acd4fcdb400a3","ssdeep":"","tlshash":"0a4180ffe8e36f6c4d4990d5813318c9dbea4e28248ba23a94e076c70f7d2178b12714","first_seen":"2026-02-16T14:52:59.554434Z","last_seen":"2026-02-16T14:53:16.544447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":400,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/ScrollSmoother.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/ScrollSmoother.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 5030\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12071,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11673), with CRLF line terminators","md5":"595c2528770a32b1a5a85d9d1ffacfd9","sha1":"38097b186282e96539787c31326c8a5eb03fbe7a","sha256":"a1cb2add7e6abcc9edf8322db72a05eeb806e5be364382dd5d3e92a29271377a","sha512":"0989ec37b551734406a51604d135496cf243dc499ffd7f59e24e7000a8240ae64954f439eb45c0c338f107483a9bcf1cf527853ce44a33726e255c8f4a019176","ssdeep":"192:Acjw7J0A+d6JEh0DATFAT2KACXp40IFwdljI8w89SjL3VbpJqyQ7R1cTPHu:s2QjDWxKAC46M3FBpNQ7x","tlshash":"f642c5a93245b0220bdf017ac56f6706b37154594a0e4424ea28ecec3c7c66d5bbbfad","first_seen":"2025-05-10T20:41:59.302987Z","last_seen":"2026-08-16T05:18:40.827291Z","times_seen":192,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/SplitText.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/SplitText.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 5301\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15601,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15208), with CRLF line terminators","md5":"fa010f4209712a17437a4dacb4b998e4","sha1":"4df18fa7ea7bfc2b7e10614fc5d04d38ee9f0f7a","sha256":"ae07c1b089e31023d6b12b699fdfdca22d49a4f1044fb74cccf2071617b2351a","sha512":"faed95d34a4393827d933501a0ec6a3876ea1533542eb8f1b6ea2014b3ed36ace86315afad4b6849c14bec90265b0c98f13633dbad7e4d19de4ed2e2bc3af2a0","ssdeep":"384:yrEawZ1w8LNjr4lQWszZus4/CaCKgiLEG:YwvRmj+aCKgiL9","tlshash":"5b62a6b010316f21657212538956171ff0a8590be523da37ebacf0ad7340934ebd7af9","first_seen":"2023-06-13T18:42:40Z","last_seen":"2026-08-18T21:44:22.839579Z","times_seen":416,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":105,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/css/bootstrap.min.css","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:24 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 34457\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":310146,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"a37af25e84b5ae05ea3f238dc65603a0","sha1":"c7d001ae114df0a6b775a78498797f7171a99093","sha256":"827163653040b1254c7ebf18b3d469d1bf3f754e36b978db69ef7dcc9e24b65a","sha512":"378c787160ba8e4f5f35e00e0902cfc6419ca17a31d6f2ab2f03633c91c6cbc6d71f82274903a479a7feb5dec453d8defb777cfec007f7e3b48aba9703533f4d","ssdeep":"1536:HAhd1dkilHeURP8I8yKHmlhm6n5HW+TUH0Ebh1GB7LP/B7/fd2HvEOMzl5O:4bPP8yKUUXdQ17Zh2HvEOMzl5O","tlshash":"b764611ae981346a1d73db79a7e5beaafb791093ca018550bccf23104fb53e15861ecc","first_seen":"2026-02-16T14:52:59.577175Z","last_seen":"2026-02-16T14:53:16.547858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/07.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/07.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:26:42 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 457\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit colormap, non-interlaced","md5":"666622ee56146658c28d85c9cef2236d","sha1":"21cacbe06d5cc97260727677dcccba6862c1ff86","sha256":"9d2bb5b56fc274cf57f806a40e052021fa13c7c307e7137498889e6a5e393178","sha512":"abd1b58fef17ea4ee6f62fb7930bcaaac27c665685d24b2be910abfa458cb7d896cf9dad345c8f0fb7f5c3571b85c3d2d47fef739076a50c552905fbd1c422ae","ssdeep":"","tlshash":"e1f023edd503e57de45803313117ba5968745c4901fb470623434c683b4510aa2d4ebb","first_seen":"2026-02-16T14:52:59.652351Z","last_seen":"2026-02-16T14:53:16.549406Z","times_seen":2,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":304,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/09.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/09.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:26:52 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 618\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":752,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit colormap, non-interlaced","md5":"0989f879223611fb995a5a605e58017a","sha1":"48a843ba0af27730bb95d04a4b4b463fcfd6d63d","sha256":"47dfe23145458e75d6358730df0a2e6a17badc9f0da13617f16ab8fb0599a7bb","sha512":"dafcbda8b0fc713961ba1e23ea8bf55f14cab7a9b98359087c8f1022f3e1aba392b8b1e9b19ad810806fb7e8c15e921ea3f16e7f50828f48cc8f5cf2861a8eee","ssdeep":"","tlshash":"da0141eb91591e2da62e0af732fe071cc8062fc42ae5cc09315fb4302d63be88452db1","first_seen":"2026-02-16T14:52:59.582022Z","last_seen":"2026-02-16T14:53:16.550745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":312,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-16T14:52:48.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:48 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 12 Feb 2026 19:45:56 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 10323\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"chroma.js","description":"chroma.js is a small-ish zero-dependency JavaScript library for all kinds of color conversions and color scales.","website":"https://www.vis4.net/chromajs/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":89894,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (423)","md5":"074c173647e3ba339cbbf7d13002c0ca","sha1":"608b4243d45f90a783602177a7603d170fe40a11","sha256":"074d6472371a89e64644c93fe6f9053a054cfcc163fb8bd9b0dd9e566d499d76","sha512":"3fe7b0eaf4e998d1fefe1645c66c297d6a756acd53db0f036ecd80939e0bc8d17da5f45006689e51828f4b1991ff33fa9b4686831e339bfd1cc465692fb5a00d","ssdeep":"1536:2AiAmnBIOOOOOJOOgOOR8n8YMbqirYcbqw:2AizBI8s","tlshash":"3d93c82060f16177419281d17b666f2bafd1e647d92b6a0472fc0bd98fe3d87cc23259","first_seen":"2026-02-16T14:52:59.590512Z","last_seen":"2026-02-16T14:53:16.55277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":103,"dns":0,"connect":44,"send":0,"wait":54,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/css/meanmenu.css","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /css/meanmenu.css HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 818\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5f73d441e332f86cbf27d9ad7433c64a","sha1":"3eb0f7187fba873d276ae0c84b58e05582359286","sha256":"1f4e0a1c00de4208ac1b59f7f9fdc2b5ab9d52c25f1346e14014f89aeb284523","sha512":"c6369c3610ce2f9b9e41958b7d6892d1e81fd942a50d2b2deb019c5fc9dbac64829e2e92b5b01e0cd79ba535216eb86b7a9eb71ae573e044c4ac2962b0b6cb0d","ssdeep":"","tlshash":"19516810db270001ebbe96789ba18329f9e4609b9f0b80a47eece550cfb53589590fc9","first_seen":"2026-02-16T14:52:59.571516Z","last_seen":"2026-08-06T11:35:05.733616Z","times_seen":3,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":30,"dns":1,"connect":31,"send":0,"wait":33,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/08.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/08.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:31:24 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1378\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGB, non-interlaced","md5":"7e7793a30eab62630c205eb78d01206a","sha1":"1aa585e44d65adadf72588fc19e9e6a123a7ec68","sha256":"2cc7ac002252c669c40ee0ea81d7fcc40546d58d45bc449333c74a001cdefc51","sha512":"bce18d4503ace91560d22e1b7972ea5de27b46992e4bb925518cc02bce9d7e91532f4c3a1485dd03bb133594e32394458953325b791d3cf60d094be11ad22cf5","ssdeep":"","tlshash":"25210b92e3f76076433e5939004d706aa4b34f5c70872001c211d8b8981f72c71799ab","first_seen":"2026-02-16T14:52:59.557055Z","last_seen":"2026-02-16T14:53:16.555563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/viewport.jquery.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/viewport.jquery.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 700\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1832,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"eb133064340f7c43c7533437f4c3dbef","sha1":"5af14719f1bfdd6e4b74e1d780c548a30a309137","sha256":"222227004ab2ee5c575a18e35c95739331439dff372d6de9784ee3d843b3121a","sha512":"32ca60339ccc4f9d709fd697f9f5372cc4f281ae256b7258cac407b3449641a8d4e97a5373bf8c89a0135b8afd35315ec6bf5d1254bd087bda281789f14ac10c","ssdeep":"","tlshash":"81319b8a3c9110109d33fb7a8f3f916cf7a98627014a91503ced83916f70b249a9ceec","first_seen":"2023-03-08T14:28:48Z","last_seen":"2026-08-09T07:22:13.223727Z","times_seen":166,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/contact.jpg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/contact.jpg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 10:54:56 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":425299,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1860x865, components 3","md5":"0224fb6326928cbd7edf2a6bb57f9dac","sha1":"b10121ce53217f3f7c64ab0f6655d1df9240ef9b","sha256":"bd0b0027bbf5a0bb6ef0a2496afac10dbf2f59d1291c594c35887559d78121b3","sha512":"ffd262ecfac46daf51e4916ee627f9c66e2234f9388ecb5470d344fc74a920f73e797c5fe56f3c5f4cb1b1a2d97f6813af9692dbb9f88d49c151e04ef5dcbc5f","ssdeep":"12288:87GwRjiyDzSc+Ks7lA7q+tLQf01mslRVEcppsF:87tVs7W1t0mmsfvc","tlshash":"5c9423048fb9e995dfb642bd5af7bcac022b356e0494337167f14a48c82984379727ca","first_seen":"2026-02-16T14:52:59.546726Z","last_seen":"2026-02-16T14:53:16.557675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":50,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/client-2.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/client-2.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 00:56:16 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2632\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"21f8aa328269c14c32dfa751427c3450","sha1":"403ad3a9935e317e58527643a2fcd38845be6ac7","sha256":"a69e482a8e3cb4597c3371254d98278a390cc6dd3d20732df7f07ba0bcc3bdd3","sha512":"8e4cbba2905512981f3bd70604861cf17206b65d9d4f28fcb8f01fc531f74fa1a24e3642a158cf9fcea69d2d91edb27f98728bd8460497a9d2742e41be0c2f8a","ssdeep":"","tlshash":"9a511ceec6809c32db0df1794aa10a010577b7a77451052222e03b6c8e9dde63427bce","first_seen":"2026-02-16T14:52:59.59607Z","last_seen":"2026-02-16T14:53:16.559004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":427,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/02.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/02.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:42:12 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1561\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGB, non-interlaced","md5":"009bd8ea23b70df459aa01603c214878","sha1":"e90c3580e512e80f98bfab68b8ac3818cf1b24e1","sha256":"1e2674ce688c1924615cd7109db89ee5705bb61bd67145bce62d06bb8873076a","sha512":"fe417710f883ee58de9c723e47c4d95d0ff7b22d765e54a90f5f5d3b400b3353bdb04159f3480a0dd3bf20835a3eeec2cd427959afa7d9ea6c650f82af7464af","ssdeep":"","tlshash":"1d310adde130d638b5a8d44550ea7251b82c9389f02369c4e0d2bc5d3609633237abba","first_seen":"2026-02-16T14:52:59.659866Z","last_seen":"2026-02-16T14:53:16.560191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":251,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/06.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/06.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:26:58 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1192\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit colormap, non-interlaced","md5":"94e5e034a6fafa9eb14b7001c5c48265","sha1":"bf37e575d9a6e6e10303820f46db9a4068882fa4","sha256":"247f8794f5c0a890423c2da13949b8de056024b94de0172e6d71fabbd4d96757","sha512":"3364810eb7f37e6f87f5c90c5c81dc2ea6b1b58e430c8e1586d981ea2f964e1f983d7af7fe9a3c0307893a46ef7f533bf2d699a6346883cadf78af3b43113f9b","ssdeep":"","tlshash":"f721c64fd7511aaf50550b93d2c317126e8e2d6dc28661c6c373f8b19d3e10042059a5","first_seen":"2026-02-16T14:52:59.587867Z","last_seen":"2026-02-16T14:53:16.561349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":280,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/17.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/17.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:45:38 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2213\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGB, non-interlaced","md5":"5a4410df051791a9c8e3ae31cc6e9301","sha1":"89fa158dc666b27f1396a516cb629274d0b279f4","sha256":"1ce582f2b7384798338fcb9969f85c813327584f446bd6988593274e612401d8","sha512":"54ad6b5dfdbe099786707bf0c33d6fa889b5ebb78c07430265fe145f8e293e7cba8748e1228ea4bc8c227e08d4db68922c5b083b4c83d134e4af413318882420","ssdeep":"","tlshash":"f1412be6e05c2df1389cdb168056453a047e1546fb12e8267023cd490d97e5ec0d8a01","first_seen":"2026-02-16T14:52:59.574769Z","last_seen":"2026-02-16T14:53:16.562775Z","times_seen":2,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":473,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/swiper-bundle.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/swiper-bundle.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 39573\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":143294,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65271), with CRLF line terminators","md5":"b68603943544cf3f3cea8f5b4b4299bf","sha1":"1912415316a501edf7895f10af1fe70a35f6e5b9","sha256":"02107108e23c6f9a93210e9956d5d3a5e024f1081281c39dcdf46b02831d75a2","sha512":"bc6242dc3f8f42f895eeb65be28dee2df22c9b143fef0b5018e7b4a5595232bc85dc15baee3f46e9b24a00aff7c399cff5f4e6d2b153e9785869ecd278481d87","ssdeep":"3072:eJvSjMdkbrYnafpoy9v8cIWyUaV4y+oGeJUqEfrNK/Mx2:eJvSYdkbrYnafpl9v8cIWybV4y+oGMNB","tlshash":"44e3f8896360b1a552e3268b93a9c611e3b51400b409c4e871bd4c9b6d7ed9813ffffe","first_seen":"2023-03-07T12:02:47Z","last_seen":"2026-08-20T03:59:53.685566Z","times_seen":253,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":63,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/hero-1.jpg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/hero-1.jpg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 11:10:18 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":414176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 527x602, components 3","md5":"f5bd59f07eeff43e53f9e54996b0add7","sha1":"a8a1760c8114ad4ec297a60233b6a44195ef7573","sha256":"780fc0abbc62d50df867ffa3d6c2aa92dfe193a4565ade093ac5a503842355b6","sha512":"a805c52eb4dfaf5191e65fa0f57fa7e8d65f7803eef21276f3b088035efd3b6e85d96f58d4beeb7b1b9ba7c81069b9ccdfaf5ac893d2d18428006d917a708402","ssdeep":"12288:Wov7PQaVDKZxfu7sB4dtAL9VwjZcwhXQhiS:HjPQ127sgtAL9Wg","tlshash":"0994232d4d8434f0dc411bf696fb7e01b796e83d606e43d470902b829a84ee8dd2f87a","first_seen":"2026-02-16T14:52:59.592009Z","last_seen":"2026-02-16T14:53:16.564791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":570,"dns":0,"connect":0,"send":0,"wait":38,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/gsap.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/gsap.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 27677\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":71184,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65231), with CRLF line terminators","md5":"9022c8a069e9f109e32ee43d3997c61a","sha1":"6000224cbf73f2d64c5b265d1350597a28ee40a7","sha256":"e1399e3d517bcae1a8bf5ebdaf04cf6eeca0616062f42c6a365492bea49f6c1b","sha512":"00f66d08a22c7ce4bf9692800821e1c3ea8b795c23d1e7a5d937bb79b16fd9b3e4c9477754b631e9aad500a5ffdc30f75d1a8358478c06569be4f186bb46ce11","ssdeep":"1536:G1BwKyDBpQvvtMOeqZ085JjhBhWDs06YnwoGSrC:ewNQPC8vjhBhLLYnwhSu","tlshash":"b763f9cd3292b42343965161447f0a0bf33ba998640f0918f269e5ce7d3c99d42bbf7a","first_seen":"2025-04-03T10:19:47.616411Z","last_seen":"2026-08-06T11:35:05.726914Z","times_seen":46,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":45,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://investment-recovery-services.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 21:05:30 GMT\r\nexpires: Sat, 13 Feb 2027 21:05:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 236839\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-20T10:09:50.699034Z","times_seen":20670,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":101,"dns":1,"connect":16,"send":0,"wait":42,"receive":10,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Feb 2026 14:52:49 GMT\r\ndate: Mon, 16 Feb 2026 14:52:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1976,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"088db76efa98026bd11b8f029171186c","sha1":"6177d3f52760165b79c0b1355b5ec43e91cbd550","sha256":"2614a3d5e6ff3d396553ddb38ef6704f1f8f5cc8210c4dfcdd0993faaf36a5fb","sha512":"076ef6c30cb093459373b5cf0834734e26b67d8ce64a658a0fbe863c4c81f3f39f67797adce99a39d06a5d778928157034137b8c855a8199906663ef6306c33c","ssdeep":"","tlshash":"5941dd811117a500eb470cc523df7e26dd4e656334a0c1b9affd5c98ade9c220b35b6c","first_seen":"2025-09-11T10:08:50.529872Z","last_seen":"2026-08-19T13:01:27.17123Z","times_seen":199,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":243,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/css/magnific-popup.css","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /css/magnific-popup.css HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1831\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7306,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f518f30da3c64f8f5bbd42d892922ff3","sha1":"39319329e7be8d81c1f1975ed98c6574ff043d29","sha256":"e694e388601c199bb1b5b2f802aada046a6e2c0fb0e5dfec4631379692ae5873","sha512":"345a479c0433e5fca0a50fdd040d35686791ff280aab42d6901f317671176be2d3ab9f1b84b821767b15c5fbc5ffda2aeb478ccf62b4d5e41dddf28bc2807860","ssdeep":"192:NN4yXVyp9aXwf0RykYeBpEbxHq98Z/vzz/89aO:WqVt8xH2","tlshash":"2ce1c016db213346e537e7b4e7938729e7220063e303046bbfd15846ebeda484261fd9","first_seen":"2025-07-01T13:15:02.188719Z","last_seen":"2026-08-06T11:35:05.717619Z","times_seen":14,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":31,"dns":1,"connect":32,"send":0,"wait":34,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/css/swiper-bundle.min.css","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /css/swiper-bundle.min.css HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4585\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16478,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16213), with CRLF line terminators","md5":"295a893c7499a9f23b4179bfed895c4b","sha1":"28d4689d54c61bde88d465910a4926281062bafe","sha256":"4e2352310338eeae08cb490fcbb3da33aff603834112346bd81f898aab18d2d9","sha512":"6972905113131daae4e79597648ea10f324c7b3f4c9d79d08c13a030c98a39c17b2a00423d4985b41e23e3c5db67715bdbc59384db07b95ce25a9fb0f5f7c00a","ssdeep":"192:8CC1mUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:82UbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"097234681340282753274f374b71cbb9ddb444d24b93896ea1c0ee88d7b6cb9136f6e9","first_seen":"2023-05-07T18:40:35Z","last_seen":"2026-08-20T03:59:53.477332Z","times_seen":242,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":45,"dns":1,"connect":43,"send":0,"wait":47,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/about.jpg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/about.jpg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 11:16:14 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=86\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":192223,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 423x426, components 3","md5":"ed205a4d7b094e88b8355580b167d9e3","sha1":"b449412f2b72cb769cc76a8e6d27055bc8d220d2","sha256":"c8653fc31fb2681a518a531652c0963b24436d8b6c2176350ea2c1224efa9a66","sha512":"530f739446e8ea4df89ffbc05feb2062cf5a9a226a758f62e742342f7a8fafac12469fc55e417eb81aca0e779525089a716467e80aaffd2a25c02988ae35b453","ssdeep":"3072:AITbYv7WY1QRDtnms7YjUIGo09lm48y791YW0ldW1gyNIF+riXsNcG6/v8TVKaj:3T8TERJnQjUIe9P9q1ldWvD8G6XE3","tlshash":"091423bfcbd12dcdf26e1b73a92cf0c365760625884dddc86da2996acc4691412f4c8b","first_seen":"2026-02-16T14:52:59.580457Z","last_seen":"2026-02-16T14:53:16.569196Z","times_seen":2,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":563,"dns":0,"connect":0,"send":0,"wait":37,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/jquery-3.7.1.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 30368\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87535,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"c9a1b0aa0167c8a4df724d18d06814a8","sha1":"f3f468ccf735476c87e3b49e274eb3752a884607","sha256":"7aa6b0e08f48a0f95d8df7ea89e4cbfe1ef3d1e8c0f7373f7f25edfb4e4a325e","sha512":"05352a89084c3b747c375eea2107b9b3c660ffb5989d48f10ee30e4acf917db21fa7ce56f9b385de0fcfd0873c4c4e9d96c48f2f38e26d5cd5dd28ed792c3e06","ssdeep":"1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:vHNwcv9VBQpLl88SMBQ47GKO","tlshash":"3783f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-05T13:52:49Z","last_seen":"2026-08-20T10:21:44.041688Z","times_seen":7294,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":52,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/bootstrap.bundle.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 23788\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":80669,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"257e555b2971eb40da996442f809e5c9","sha1":"b4572bcd3292314ab197e03d099c8aaa35bb2be7","sha256":"ce7d49ee399e02fce69c1c93845d4d78e85aec2aab0318046a837c2bcc68c7d5","sha512":"9a560c91ea95edabb1c3bbb1a7d1cc7e3eb33b53f2c9432c11b6a9b3116aa82abff73d8655afc05fef7f93ca41b608c91560f0b6fa5aaf376c0ee64eb22cf1fd","ssdeep":"1536:Hnw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU17B:HwXza3YCl45wZODZTbYRB","tlshash":"e473c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2025-09-16T10:54:55.187078Z","last_seen":"2026-08-06T11:35:05.723097Z","times_seen":12,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":54,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/TextPlugin.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/TextPlugin.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4148\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14527,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7196), with CRLF line terminators","md5":"1d94dee76e020af59c7dbe6d089b692d","sha1":"d5dac08e0acf63ac2601fdb859d8ab50745fc59d","sha256":"fc1ab303b7686ca3db23dc2ac5b6b024ee346b8780282e6ba2ff76553739aecb","sha512":"49146cdad4cf25d006f15fe6663f82ab3de4b835543f8e8930d72a6878384016fb2d644f15b06f346dc86fd2a583fa60f9525865ba2df224a7ab3dd8208039e4","ssdeep":"192:2arEaLjwZ/9w86q3UBjNdtXzo4H8m97FLhfgBxb+tYerCco5sI6Vspxpo:NrEawZ1w86ySjtJZ4exsm","tlshash":"b0621c6457126a2970321207cd724b0ff0b8591be527da76bbacf0887374530dbe2af9","first_seen":"2025-10-30T11:59:44.368112Z","last_seen":"2026-08-06T11:35:05.705432Z","times_seen":18,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/brand-1.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/brand-1.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 22:19:18 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1753\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 118 x 28, 8-bit colormap, non-interlaced","md5":"a6249244f29003b2213b586f8e3af588","sha1":"f8ecab2804ae5b7faa9a4e33db5039334e9c5f90","sha256":"44fe6e3f6ab279a6e6a627ede2525988c58b606e16141e6f1eaa3c8acd0773b6","sha512":"8dc1cded48592da2c6654d5d867218aaadd04d85c60481d2f378402b2b4e64b150d4fef0ad8928700670fdf0a98ac8ac845a1ac96fd8799e7d0c809ec6d73150","ssdeep":"","tlshash":"ee41b8f981c46e5fe76a63a47181144dc39a18cb9af2fb1629294a370e2754d958900b","first_seen":"2026-02-16T14:52:59.599557Z","last_seen":"2026-02-16T14:53:16.572518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":428,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/jquery.counterup.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/jquery.counterup.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 849\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2181,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2181), with no line terminators","md5":"5fb55a9e16c2a112a18989f1b0b08485","sha1":"eb9ba6ab4abd6afde76c714542fa1906b867602e","sha256":"d35fc86bdb6bf9102349bb4de42fd68542ba69dacc1b80b0d9629cc4841a75dc","sha512":"0ebacee7410c0028d70af4ec10a011d804c09d5baefaa7b9bed3bbc1e7d1a93b5ea2ae531de303475e25c585283af87ae9b3a47959ab10f754467e4bbb59df58","ssdeep":"","tlshash":"cb419a72682b298d2fb1f6ae769f73595332f9284400d81e61d554d01ed2b7f2383b39","first_seen":"2023-03-07T16:31:28Z","last_seen":"2026-08-18T03:22:44.444443Z","times_seen":1501,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/jquery.meanmenu.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/jquery.meanmenu.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1656\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5997,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (397), with CRLF line terminators","md5":"cc810858428745447b776d166ec282f5","sha1":"2f4bbb153631605fe642acceae1763a65abfed8c","sha256":"1df543ddc41bce98dee5d87d6a09c6b2ed02991870f51d8ee370397ad8721b58","sha512":"3704d5a1c2896ec02a5641c9a425e53f871a32f8a229e885603c604ff0ee96c72ed080b515795ed1ca28817e6fff8b2f56fd57a1126b47c8ad2a9df936ea96b7","ssdeep":"96:LtlVT5fG+EMiGbSJy4NnaToza990dBrW1iAodZZ7v69FFSonOP1SDiA:3VT5BhbqyOjciAeZZWjOTA","tlshash":"d1c1ed6bb17040f8a0bb6951b97af331b1f3660bf182d402317e64262f35a6114a2ff9","first_seen":"2024-10-20T14:52:38.634885Z","last_seen":"2026-08-15T02:57:15.748967Z","times_seen":303,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/bg_1.jpg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/bg_1.jpg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 10:39:20 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":951809,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 2752x1536, components 3","md5":"93a1bdb650f01d1c99473197e00c3a04","sha1":"103355074fbc6860220f08e75d7c3c4b01bfca2a","sha256":"2c11e386eb543e7a1aca097b8500e41ca08b000f1e13945f689d117ee78c518e","sha512":"7ade9c5546683d5c8f0fc383b2bced01bc50cc16866876a6a3f60fc289acd52e1d2535175bb590beeb2e831efb41f10c2eb7d6dbdbcfd75ac5ed8e0b53ec5023","ssdeep":"24576:hDRoF6u/X07k2ziFlpy2aBpLf2A8u2HQz3SNlox00:PodXAkeiFlpy1pLz8uP3Sjo+0","tlshash":"9515f07caba0914ee49f9d66d0388be303732759e25e41b1e400e9cb93b37917b66d1c","first_seen":"2026-02-16T14:52:59.636482Z","last_seen":"2026-02-16T14:53:16.574852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":41,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/favicon.svg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:50.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/favicon.svg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:50 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 12 Feb 2026 19:43:56 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 6989\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e5e59e2a744c12b5b0835d58efa6b4a","sha1":"6dc1e37120d49617c4f6a09a5b2f97f862601c82","sha256":"c1573d3d1596f5e4cfedd79b1bf9a977eb7e915e1a019031f7bbbbd38a80a05e","sha512":"b699013a0da705e534f7ad64dd26745d264287f898f55e3473b2bba6032a148728e43cff2f9c8d569e8296c478d7e168a60555a7751249727198377c82ca3498","ssdeep":"192:RHuAkJ+dHuBK3XHuja3QDsu/4OpiUW+Wz3mhXwrpNrh:b+Fa3ssu/Y+Wz3CXqpJh","tlshash":"3ce1b766536582f4b76e01584cf604973ae900bbb210b28cc3597c81e9b7df1549dddd","first_seen":"2026-02-16T14:52:59.629324Z","last_seen":"2026-02-16T14:53:16.575774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/brand-5.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/brand-5.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2896\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 41, 8-bit/color RGBA, non-interlaced","md5":"9a7e3ffe0cfec5775b343f2f2f34c7c4","sha1":"31e2e689555f023cc4ecc46391b8ad32c83e274a","sha256":"28498a0196ef8f414a5ce19504c13f77448edf446d586611357686232d33d862","sha512":"e73b620b3ed4d327e021fa451aca649b52673f5acf1d3592e698e39867edfca600fa86c9b78fa93ea60aa0942d9ff369a12544fe993ef66f3ae2c2406c31b2c1","ssdeep":"","tlshash":"72514ae4ab144e8fdf9397d52a3b10c0f26ab46a3603c58ed444ef3ee920314eb08e04","first_seen":"2026-02-16T14:52:59.638714Z","last_seen":"2026-02-16T14:53:16.576795Z","times_seen":2,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":437,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/03.jpg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/03.jpg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 11:37:28 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":274410,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 517x496, components 3","md5":"c548e656a5a3f2e35a9fb6d7ddcc8e30","sha1":"fa940a7ecc07fb5fb0b2cee93c596ff8e78c6bd7","sha256":"90bcbfc00b0209fb1f32491b4eae18ef8584821a327d3acbd67499b282b15dec","sha512":"c32375fecf89dbf7de015141a8970eaa85b91b8aa965238d9da27883f63cfc7886beabe7d32dc2571b7ac112b0dbccc364cec26b6a69d5bab1f99146766976d2","ssdeep":"6144:rtegnW9/fJ+zIJBoCr4v4dMMn1YOcVOFlWyQPNPiR2RAyO4IQW:rtxWBkzK6j4Z1YOcVOFlWLP4r4C","tlshash":"3e44237a4f778598ffabd2bd538907e09aeda5c078471060acf72a42f3da51f4208c55","first_seen":"2026-02-16T14:52:59.62216Z","last_seen":"2026-02-16T14:53:16.577699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":240,"dns":0,"connect":0,"send":0,"wait":37,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/01.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/01.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:40:52 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1254\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit colormap, non-interlaced","md5":"f9493f8904a3de25d993cbc9b1b2371b","sha1":"185b23d2c46dd6b6f06b0c1518657baee311b020","sha256":"612101ea9e02b4dd5b0b7c7b181625953e77f0e18409ae73aa9e71ec51a02f1a","sha512":"ef6d61300c3f3f8abe2b41cbd94478cff15baadb0b619c44f7e22b911d400fa27b0728e43d08d645c5a68e6db215a60738d3c082c74d830463edddf7c1e5bbf4","ssdeep":"","tlshash":"3621b7ecb9b9862d50951ea3824dbe3718ef9b1b2306478dc0d5483bb222994ca5ca94","first_seen":"2026-02-16T14:52:59.565463Z","last_seen":"2026-02-16T14:53:16.578616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/chainalysis-logo.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/chainalysis-logo.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 22:35:30 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 11463\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 163 x 65, 8-bit/color RGBA, non-interlaced","md5":"7215eacb2438f5a0bd0bb960a35e276e","sha1":"a30d11459cdece72913d646d041212d2152b9665","sha256":"2b01dc4ed09a26bc797f45a1d36a4032188a97adb7f53c8af58cc2a1cbb292bc","sha512":"a2a5904e5ac1b5e9c15386560dcd44dfae756eb67f250e803347f61f5fe8baa47b012830c21458ab20dd1e307e3e02e89803010e79f1cc9cb1e5bb98f85fbce9","ssdeep":"192:r0aIvm5WxUPNwHcwxhAOlzQd4eA2KekxG33UCaj14L:ryvm5WxUVwhjzQieA2wxfC5L","tlshash":"1e32c14099276378d583f9c53f8c8df1834ac5209d71bb9b7ba467c7315a70ca0256ab","first_seen":"2026-02-16T14:52:59.653693Z","last_seen":"2026-02-16T14:53:16.579507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":371,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/trustpilot-badge.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/trustpilot-badge.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 22:46:32 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 8333\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 131, 8-bit/color RGBA, non-interlaced","md5":"6fbc760ec1bb337e677de320d834b832","sha1":"a060406ce708956a64fac4bef9e0083761abc529","sha256":"36d82c923cb3609f1eda08c7166d136f5dd94a200112786a25d3a9702772d1b2","sha512":"d8d7152571eb627384d8b989b21309c1efce70d8d78cd6ed7a6fd5613de6f93643c9bc8091f33199aecdef0f183f09fdd7b9b945554ca8b55207af3b1a3a617f","ssdeep":"192:kPW+NLzi+gSU9qj/FLJKmo44JL0Hgi20c7IxCeeZpvAYaUPbgJ:k5NnT/UIFLQIA77oC9MYL8","tlshash":"0d029d8ac1e3e565b2cf835651bfe6f107f145bf443c89a9a25a42e3c13406e419bbe8","first_seen":"2026-02-16T14:52:59.605921Z","last_seen":"2026-02-16T14:53:16.580425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":501,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/main.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 12 Feb 2026 19:43:56 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 6710\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":33373,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3c91012e4266536ba36ad3b571c69dae","sha1":"bdd9bb917aeef7035cd6fa4ed28cdb68be8b7f02","sha256":"775f41073cc4d23e747930adfdbfc9e17f9a5a04f2f38ffd6c3fe225e3691552","sha512":"b44bf06ed3c671c6861bd586e3a2ce98a4b39e558d9cd4372569c2b3dc0603cdea342b7e843ea1dfdfcc3f0391af4b4d2e6efb51ba2851c2ae18ce72043ed560","ssdeep":"384:NNOFR49V8CTHxq/hTrV7b8Wm8p3FgP8KYUi:zOFRo8CTHU/hTrV7b8Wm8p3FUzi","tlshash":"5de2410991b620320177b13e5f9f9200b672414b9e9afd257e9c82580f5d73da2fa7f8","first_seen":"2026-02-16T14:52:59.626652Z","last_seen":"2026-02-16T14:53:16.581346Z","times_seen":2,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/css/all.min.css","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /css/all.min.css HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:24 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":465644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65355), with CRLF line terminators","md5":"35a1ff231f60108fdebb4d079b6a0b36","sha1":"9442f887cd4f413c7e898ca6e8e7cf7bf07b245f","sha256":"87d82efdf0fda0467362e5edbf1322cff3f2af974606dfeb28d0f564ff5074e5","sha512":"8caf5c17dd578fbc2823b08b6d306f58389af4f1c42b5fb56c8b99cc8e6cd1d63e223c89b0558e72b2a933bbf26a7154b5512b49d9362898ae732ffc5e7e1110","ssdeep":"3072:/lCBy5vzoH+oF/6iC3UMA++r6aJN0ugNcHE/9o4pZQd:9CBSzoHDF/aEb6aJcNcHE/9o3","tlshash":"11a4c6a0a05510dcb3d7e60f5b02b629e4b7f33ed9814f4fe1d9484e0dd3a6871867aa","first_seen":"2023-09-04T03:46:35Z","last_seen":"2026-08-16T10:13:04.672712Z","times_seen":188,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":27,"dns":1,"connect":30,"send":0,"wait":66,"receive":63,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/black-logo.svg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/black-logo.svg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 12 Feb 2026 19:43:56 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7877\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7877,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4aa65842b212bb4fb52e58ff21751ce0","sha1":"561a4914a7f1e3a744d5af8ec4a4960c237c7290","sha256":"897a18d85424eb1f59fc2ab5bd6f14a13d2eb6f88dc4fa64b957ab1aea667e7c","sha512":"fb7559ade77a470ee0ede64848c327d23244b9b57c906658513345e6a006aeafd96775fa309ed4e5ab21e1ec1e4c2263e7fa78d3bbcd593b0a158cad60879a97","ssdeep":"192:ZHuAkJ+dHuBK3XHuja3QDsu/4OpiUW+Wz3mhXwrpNr3xx:z+Fa3ssu/Y+Wz3CXqpJBx","tlshash":"c1f1c522535982f4f76901584cf714977ee800bab204b7889369ac80e9fbdf6549aacd","first_seen":"2026-02-16T14:52:59.64115Z","last_seen":"2026-02-16T14:53:16.582782Z","times_seen":2,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":403,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/05.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/05.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:38:46 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1644\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1621,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGB, non-interlaced","md5":"91215914286f9b3e1972e8a428022b93","sha1":"4384a5ad8ec7a8754e72bc5a343cd80a0d8884d5","sha256":"0b160b9766f77e09d211ceac0e92c84589eb0e89ca579b01cd25021e1b598e8c","sha512":"a43e4180fa1c8cdbddff6c70659ee9f1ca4218cae45d02737963da609b4752d31e3a0d9d748fbdcdadec9eb9deecd21a3d220aeb3c9aaa928e7009f3c32202c2","ssdeep":"","tlshash":"c5312c98b57322ed847e1341ba898e7db1d20f345b0b7f3265d2cee91e5a00018c0375","first_seen":"2026-02-16T14:52:59.602546Z","last_seen":"2026-02-16T14:53:16.583632Z","times_seen":2,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":272,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/parallaxie.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/parallaxie.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 680\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2072,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1a97352192cc0508c4f058de99ccf5b6","sha1":"8e46bfe8042e030867cc3990480a9b29a435ddd6","sha256":"cdcd31326b36cc8381111429ca1ea11bd3174c517516a21baf4440082abe9077","sha512":"094662ee18b850e32fb9893c57e940c6f00caaa3922b7bb83275d90451cbee7f4f6318146c71f546c70562934d7855bd42bbf2fa52fc540ef86381896625980e","ssdeep":"","tlshash":"3f419bc06413920b76fbd5e58f7e0900d23ac2171148aa1bbb3e62d96fb052c85c3ee4","first_seen":"2024-12-29T00:41:48.311446Z","last_seen":"2026-08-20T04:07:29.068217Z","times_seen":567,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":157,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/css/nice-select.css","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /css/nice-select.css HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1112\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4226,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f0b60c3e8761d1bc2c7e711331955f43","sha1":"59b77b3efd3840aa072c96668b45f862517e9caf","sha256":"4f663a6d9976cde1ab7be7d180dce9cd1ce099282594e29e67bd7849407dd6e4","sha512":"e023332ec940d46f1fb1cee3ec4addc664ef9e8d9d74a0399d4ebc7eb9e855bbeb927b1ff97ebc26171b6a21ea6490a6686b7edb9e779583d45535145779990d","ssdeep":"48:Ep7tvrmkPCWFXJ/VP6H6xf6pWU3IfiuB33SVaDSR8A7WpsBTkxstQE+feeG89GsF:a7tzZPSaxiZ4FiLUsE2i1pFH","tlshash":"b6910f26db004042113a877fefd35b18e639c143a52246acbbdd96078f3d95ca8a5f8b","first_seen":"2025-12-07T12:43:56.207837Z","last_seen":"2026-08-06T11:35:05.762195Z","times_seen":5,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/css/main.css","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 12 Feb 2026 19:43:56 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 24672\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":202306,"size_decoded":0,"mime_type":"text/css","magic":"ReStructuredText file, ASCII text","md5":"ddffc20e8d134c07ab476491d1b27735","sha1":"4a822d62062eb595f562da5f7642137325301b6b","sha256":"e183ab6f06132eb2e59814a70f7d6fd572e51e06577aa4251b42fd0902adcf17","sha512":"cb5ba0cbede4ac151367276ae0402ef4bd22671fa1e935b65cd4bbbac716e0506b07b2ed075314015dd5eb290f47b26033720cc9f06756f17bcd1a88b0fd3816","ssdeep":"6144:0h+WAmF7/7qfDnyMExfNzoA6ih/YAJWFB0CpGzZivmBT6B7J7b2dsoy48qTsHoLO:0h+WAmF7/7qfDnyMExfNzoA6ih/YAJW9","tlshash":"d61465556af5065c7527a1286ddb6b1873acb042d30eeefcbae4601ccfc87e9523224d","first_seen":"2026-02-16T14:52:59.615215Z","last_seen":"2026-02-16T14:53:16.585815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":48,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/12.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/12.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:47:18 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 774\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit colormap, non-interlaced","md5":"c653bb19f5dc5613fcf1c1b7b5182c88","sha1":"4b7237f73342689a561e6e5de9b9320557cc2755","sha256":"20f371047dd72fdc2fd641b7ed1984e5d11f604ef14882a3999cb6c19d50c74d","sha512":"31007e13347305aa455808158c549503d2b66f45ab9fc5a6f8b19c5f7659c1854c3c99c1beb16c48fcb788405eaca36fccbed9688724609feab636accabae301","ssdeep":"","tlshash":"260165e15f74a0accdd90d25a7363cbc85624439de4e9b9807d7467e6443a4444d85c9","first_seen":"2026-02-16T14:52:59.624201Z","last_seen":"2026-02-16T14:53:16.586611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":338,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/16.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/16.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:34:16 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1047\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit colormap, non-interlaced","md5":"32a9f84409d68694d0d495f76d8051b9","sha1":"5d39dc73fe0e5ba75b3cb40f69e83c9b162680e1","sha256":"445807d6fd985c0ea72db0d54972fffb280b8bed84e68935968c75d3df97d154","sha512":"56ed23d4922434f0d389eb23705c043719cbda958260010e1a1491255ddcfd118e8b41f73cca41c9ff647475f6859f97c01254cfd4ca24118c442776f1e5d573","ssdeep":"","tlshash":"2511c8dfef8f8906ea1104fd050540825079327c04bb6cd8b562b1691e96ce17d6fed6","first_seen":"2026-02-16T14:52:59.567289Z","last_seen":"2026-02-16T14:53:16.587438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":441,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/ScrollTrigger.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/ScrollTrigger.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 16589\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40289), with CRLF line terminators","md5":"d469515d6fa7768e0b5b5ba504e0e369","sha1":"97f09f13de70f3ba5ebed70bd9b74651f9a91aff","sha256":"e101c0c03e856f9ed31f93d2f1ee8524826a1bc620a909a2c65134b538154038","sha512":"c66705dee2406a32c936c1d99ca4dd8debb016ff14733f9db547265cc1cea0dad95d56e19c5e4f040412643f413d7f06f8d130648acaee08572e88b0431525b2","ssdeep":"384:oBdfDFqm2m+W5A/uJJFffJH4ukQIVK7FV8ZdrVbrha4L9vWqOMMtSyV9MsR72QIP:AdjYWJJRpnIw7FVA3x9ROMMtSQ79TFq","tlshash":"730308ce3244b07267eb62b9912f0206733614d9691f4068f622e4e93c7e57c877be9d","first_seen":"2023-05-21T11:30:40Z","last_seen":"2026-08-18T12:04:33.926409Z","times_seen":266,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"16:62:FB:B8:FF:3A:46:6C:9B:6D:CD:92:D9:4D:14:3B:59:48:25:B1","sha256":"85:9A:F5:D7:C3:BC:CC:6D:01:3A:9C:71:F9:24:07:98:12:7B:61:7E:2F:43:CD:26:EE:39:8E:AB:76:AE:FE:B8"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://investment-recovery-services.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 18:19:57 GMT\r\nexpires: Thu, 11 Feb 2027 18:19:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 419572\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-20T10:15:48.979589Z","times_seen":32330,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":98,"dns":1,"connect":14,"send":0,"wait":19,"receive":25,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/03.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/03.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:44:42 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1150\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit colormap, non-interlaced","md5":"46909d87c83916c811d9cb370c99f999","sha1":"d85ff3d29994848bc8397e4daed0bc5119f77441","sha256":"7d14e44ce382afd2b37e1927942360326692efc8b67743b10f7c85f591146815","sha512":"3d934b1c49fc4b182eaa3007b56de11c42e08f2349f358e87f0384b35514bc74c3e12c56a717d62b304c8d5cf472f1368bf72e1226fac9b3626f8d91ced5b2c2","ssdeep":"","tlshash":"e621f9faf53184b3594218f68262e00380e19c0269c2b16381b14119bf8d9ef6f3d0c9","first_seen":"2026-02-16T14:52:59.642919Z","last_seen":"2026-02-16T14:53:16.589518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":271,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/13.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/13.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:37:00 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2270\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2247,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGB, non-interlaced","md5":"60750d4e86a30807d38acb1c8f90abfc","sha1":"5bda8373202a8c892707a2f7ed0c6f374e175802","sha256":"690baa93a41d659ffdb0207fc3bd6bc09267c2be9dfac09cee01d1dada498737","sha512":"9245a04f64d471e1611baf22e9908e8ba7f1eb0a23fce2c2e9294f1788d44656f31e35973ed9599db99acf23bbfd1d635841b861b934a0bf889edb7c5868ff32","ssdeep":"","tlshash":"1741199a9a56c1a790efc04189830daba9a81d6ab363932507090f90c762e70ef75b43","first_seen":"2026-02-16T14:52:59.604136Z","last_seen":"2026-02-16T14:53:16.590389Z","times_seen":2,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":342,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/ScrollToPlugin.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/ScrollToPlugin.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1865\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3901,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3582), with CRLF line terminators","md5":"ba1e3a5690d71cf31ab5300f17530381","sha1":"fc076ee1d062d367f73dba8d6a6a77a7e0ec42d9","sha256":"afe542906a095e12b7dece5961098a768f620c156a3f0a9714530158afa45cdd","sha512":"f80a1d5df1913259804fb1e2ea29825fbeb1165baf19b770c2ecf417cb719d6bd0bdbcbe0c9e3f6c421debbef24f2b4c21675dc1d55d3f9f772634673d6b8364","ssdeep":"","tlshash":"d281519d7440f47261de06a9c11f578ab235643f362a4490b66decf9bc10b7b6123e8a","first_seen":"2025-04-03T10:19:47.671575Z","last_seen":"2026-08-18T12:04:34.027849Z","times_seen":156,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/hero-bg.jpg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/hero-bg.jpg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 10:40:06 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=88\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1807493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 3168x1344, components 3","md5":"73ec02ba2bd1de16ae9a5a548aa6e9e4","sha1":"d4d501dfb0c552e973617fc2c8ad3e0e97f7eee8","sha256":"100ca20b11b661c247853bb6d59e9bc4b2faa3ef065611b1afad9d97c99de9a4","sha512":"964de10a3da4578c53d163cb9438cf3c0160053868a309d921fc2a702cb111f1cb03517895da330159983652e92203d4313f15d6dfcfe217784e33f0f69e5c8e","ssdeep":"24576:wa8bjNOCdWD0soFgDwpm3PbYUo3fVisbH:wlLgcpmjQfVxbH","tlshash":"e0253330832fd539ae9c3f28bc6a0400a7f86add43b7aec90d45959b67406c57e70e67","first_seen":"2026-02-16T14:52:59.562675Z","last_seen":"2026-02-16T14:53:16.591881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":45,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/css/animate.css","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 4355\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":76809,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d212b97236b2c9ecac13b2918ec753eb","sha1":"1a350ab68259a8c493cd768c898ca96168784f79","sha256":"7f83bb120febabbaa9db513b450456e74072252ceb0c587cd4953701ff741d67","sha512":"efa4ce762238fe3b7aa5f093153770ca567b0938fd94f35a13a454793e0daf1994697a88aced1c790933c98f47edb3ef332a8c8b39915c6bb196ea5f590cebec","ssdeep":"384:5d1A1oYIYc1x1tYNYZ2x2Ivvvz3KVDV5YMYiLR0tftGxcfT7WdXA:L1A1oYIYc1x1tYNY+3KVDV5YMYP","tlshash":"56731d5e1d41118447724b29d7de8e28eb3d917318122eee72ce588b8fb6f6813c9d4b","first_seen":"2025-05-07T22:21:41.432072Z","last_seen":"2026-08-20T04:07:29.100847Z","times_seen":680,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":28,"dns":0,"connect":32,"send":0,"wait":38,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/white-logo.svg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/white-logo.svg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 12 Feb 2026 19:43:56 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7871\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7871,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7999a880f63156c1785a68e5ab0eebd","sha1":"ad0caa08a8178a37ba7d4339a0082a497a6edf96","sha256":"c3bcf0f74a065c934314700d6ef251ea0064c9c9221939712048bf29509bf846","sha512":"05420f0f9c0f7abb3850bbc02b636b31c057d5321fdbec8da61a63186a66a4d3fed04ba2a953522374e52c0c0b5d9d365a940a248bd2b5ed4864c818aa69be3a","ssdeep":"192:ZHuAkJ+dHuBK3XHuja3QDsu/4OpiUW+Wz3mhXwrpNr3I:z+Fa3ssu/Y+Wz3CXqpJ4","tlshash":"e8f1c522535982f4f76901584cf714977ed800bab604b6888368ac81e9fbcf6549aacd","first_seen":"2026-02-16T14:52:59.658455Z","last_seen":"2026-02-16T14:53:16.593397Z","times_seen":2,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":402,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/client-3.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/client-3.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 00:57:16 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1535\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit colormap, non-interlaced","md5":"8505d5cba2b078a3a8d37103f93a08ad","sha1":"1faaa9a71b2c0029d222ce252baf4e4e635ff0e2","sha256":"9f8895707f99bfe8d93393f57975ce9a2f680979a5f0457d3aa28f447a4d06f0","sha512":"d3f8c73dbc51dcae9d031f3e1c4eed0c7d5c48dc0e60a9376fd294bc048fd5d66fffab11818ab504aa0e0f26466406bb60047b95583f4abd042381120468af09","ssdeep":"","tlshash":"093195f88b54d36a4a07f92bb831e808a3db1d1d74c76a09bab175f5ec36082513b0a1","first_seen":"2026-02-16T14:52:59.598034Z","last_seen":"2026-02-16T14:53:16.594231Z","times_seen":2,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":430,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/brand-3.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/brand-3.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 22:16:44 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1412\r\nKeep-Alive: timeout=5, max=87\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1999,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 118 x 28, 8-bit colormap, non-interlaced","md5":"85f70a5f6f97e57e4c4d990fe20355e8","sha1":"a73ceecbc979a31d3f18da057cee15b4d2ace54e","sha256":"e7bbdd32528231217092b2b6b38e816ccf63cd09ebf763cc8feb077eae0924dc","sha512":"5bf128fba88db4705e582537372960051bb4db7ca13eafcc3e8f9a4376cff64b739616f205a073a52a5573d2b74d7b1c85919eb591f3df6391010fa03d40d348","ssdeep":"","tlshash":"4c41b674e7e1e562f3343b079277404ea7e516971133e53ad0a20057afcd9d628ca2b0","first_seen":"2026-02-16T14:52:59.578996Z","last_seen":"2026-02-16T14:53:16.59509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":526,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/02.jpg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/02.jpg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 10 Feb 2026 11:25:12 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":295260,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 517x496, components 3","md5":"9ccfd6a9b064632bb4a6aefcf8fc9153","sha1":"80b339ee5304db78e61a5b33b617124b73ca04eb","sha256":"78d4e1c65ce39a23b1a00f513ff7128c2ba5575d91031c7dcc91f7a02fe938b5","sha512":"29fd646b0a4f1fce3b2d981735fb07fc9846f330dee9f9831f3fb0a457e92a5cbd05222cc3d48359d7d3897c272500899d8a6c2b6402980eebf757907f35a260","ssdeep":"6144:vGU1DAuKCxLGH7lI6w5NS0TIRVW54GIq/pAoDcIPQWLWnf/Hu8e:vGU1DA1CxLGHJI6+jTIjW5X/pAo3PQvG","tlshash":"3854230d3f9bfa8df8322636d48de1eba16b00c75a725a2167b1773cbb584c32425691","first_seen":"2026-02-16T14:52:59.593274Z","last_seen":"2026-02-16T14:53:16.596075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":241,"dns":0,"connect":0,"send":0,"wait":49,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/star2.svg","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/star2.svg HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 343\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/svg+xml\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":343,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aed9ca26e3f81fe0c11ad394fc03958f","sha1":"0f87e521772f4da12a1ff49e22bd194299ba5844","sha256":"2ba613469421a9447d4c61a9e665104014378c4bd73c2e25a71a97886bcbf6a8","sha512":"628e91953c37ea126f782377d2210dfe7d1a262cf3a833a6890540d1e65b34851ed6e6ff8c3438c5f025c709883724d3d5fd94314e82faa9841ccc1581ff8a77","ssdeep":"","tlshash":"54e0c0e5235c5a142009ebb0851e7418363330f0f29c0c5b73c146627aa445e0d2f6b4","first_seen":"2026-02-16T14:52:59.619277Z","last_seen":"2026-02-16T14:53:16.596946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":485,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/pci-dss-certified.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/pci-dss-certified.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 22:35:30 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 17888\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 163 x 65, 8-bit/color RGBA, non-interlaced","md5":"40f8badef88cd81b8e8fddce31a3dce2","sha1":"67c9f9d2f7c091680a7d26dc71dd294c158dbca6","sha256":"008d79d43864e0832d6a59d7910c0a8cf6527c96acb7450d52e358c7cb526527","sha512":"8b96aadf2d9cb9937d734595973bf290c0cfa3195394987c3fb5165f902e72adb612e544947cf0e4c0f18ba581aa12131d4d3338adce89538960ebef4b88a31d","ssdeep":"384:2c6wJ33GuQrC6BiufgwELjrPFXQDzjxWGD0AUmBKrLA7oTxVCIg:2EJ33GKwBEzP+DzoR1mYQesN","tlshash":"0982d1a3d3b0eca9f7c4b29d8de4c076c6a514317b28c51cab17369b514bb24ad3ce90","first_seen":"2026-02-16T14:52:59.610643Z","last_seen":"2026-02-16T14:53:16.597874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":366,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/ajax-mail.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/ajax-mail.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 12 Feb 2026 19:43:56 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1166\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3630,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"dc7a3c29a51291d28df3af877be573bd","sha1":"693b32705927a030e657e7442d0087fd7a8b8aa7","sha256":"92bdd21681f6b1abf200a2f0e7d987bb0606e01f21576f7700cb7d8e2394a288","sha512":"0339a910afaa33447e25ff04eb8efb3ff576fc2020e58781fb7b6adb2c714b7ef78149f41afce1b060030cb4d8b7443d05747911f7a52a9c7cd6b55fbca21997","ssdeep":"","tlshash":"d771c088beb524c96e332b7a3bb69605fb6901238c409312bb9d60732f71a443640fdc","first_seen":"2026-02-16T14:52:59.569883Z","last_seen":"2026-02-16T14:53:16.599387Z","times_seen":2,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":162,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/brand-2.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/brand-2.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 22:15:26 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 824\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1210,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 118 x 28, 8-bit colormap, non-interlaced","md5":"ee98598c51c1dca03e2c71426eda4fd2","sha1":"0619f51957fe066cf9b357682bba5bfe06f9dd9f","sha256":"e45331de4d7aea186c2885e89f3b87d13f83bb5b82ac40951f321b99a78f138e","sha512":"1fde80be5ea3e283412cd2c29a144b5e89cf0279416917ff491c1614aeffce20f0ede2b98b09549c111262ae864203f683c8be85690802d14e9956d7d2e04e28","ssdeep":"","tlshash":"e221864c5bc5b88fa32813748112151cc7cf195f1834f5c3a4b8860f2a0ba7442f80b0","first_seen":"2026-02-16T14:52:59.650844Z","last_seen":"2026-02-16T14:53:16.600259Z","times_seen":2,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":428,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/brand-4.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/brand-4.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 22:18:04 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 1646\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 118 x 28, 8-bit colormap, non-interlaced","md5":"d3c8d17a78a919f372f193b327dba167","sha1":"99da93305f5981c61698a844b81c155760ee48cd","sha256":"fe4f9d8a9eddc47ca4918dd5bfbb1b974bb6bfc23a6edd5cd008cfbd7a2d648a","sha512":"fb268521b7e2cc90b50af0166d89ac834ecb0fde8ceebb5fd67cb4be40046eadefc6f3338a096c805691843635d3e631e1544ba88b76ec3219ffa50aad965a87","ssdeep":"","tlshash":"7c4107f8aaca6a284f0647bda282418d43d1a0573871c389c4818493eca7d11fade325","first_seen":"2026-02-16T14:52:59.617139Z","last_seen":"2026-02-16T14:53:16.60112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":549,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/chroma.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/chroma.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 15308\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39052), with CRLF line terminators","md5":"34cb764ab513db68add9bd33ffcf4783","sha1":"dd626cb61a511917769308ccc734e2514c4ccd4c","sha256":"2898828bfe722c892381ec89ec5faff9caca94f4c8897983304aa6b290626e63","sha512":"534bc4ae6756096f00d6a9bc66c0865c24405a22383c3dc11915a7577472961af21f8a5f0902f4136dce0e2e0837eaa1fb1329412074e6e1d3145aac61231681","ssdeep":"768:YP2onsMMM1SMBvfs0WLt/dI1iMdjnBbHTCma:YPNnDMNmfs/Lt/dIsaBla","tlshash":"2713c7d471c9b1e587c29820146f5287e03fbe947d0e8a55f109f3d1bcb8e89506efaa","first_seen":"2026-02-16T14:52:59.634202Z","last_seen":"2026-08-06T11:35:05.755585Z","times_seen":3,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/jquery.waypoints.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/jquery.waypoints.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 3717\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4e6e8d220dae342b68de30a91bb33935","sha1":"ce0d6bd21d5e2d82c3deed8b757898e3638c6282","sha256":"fda7339b6a574b18621121fbe5516e6b55b0b178112b12c9664c56f74e7358bb","sha512":"c2ea66268cfcb1fe79ddfb1b3a2d496c221a24d70cce8eb4fedb02e9b15a435d6de9dc3b42559a338cabdbce8311f595c5cf2eee378d65dd653210fdd4db2b69","ssdeep":"384:IxKwIRW4NkxN5N6IjmMcmQVOhzCVBx1j22x0a83y9QufSAJ97B9IwFwKOeT:IxaI31aDJ3SewKOeT","tlshash":"7382ca482d9b2012abbb63b9fc076249f737403b50d590a738ec95d80ff11251ab9fe8","first_seen":"2023-05-22T11:56:20Z","last_seen":"2026-08-14T10:57:33.410449Z","times_seen":267,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/js/jquery.magnific-popup.min.js","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:22 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 7348\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20219,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-20T07:57:09.623452Z","times_seen":25060,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Feb 2026 14:52:49 GMT\r\ndate: Mon, 16 Feb 2026 14:52:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-08-20T10:15:48.978924Z","times_seen":21026,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":73,"dns":1,"connect":7,"send":0,"wait":31,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/fonts/fa-regular-400.woff2","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 357732\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":357732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 357732, version 768.256","md5":"aca950cc283a103f77e0001fb67043b7","sha1":"bf0d2965fbc75a8a23ca081c7094a95535d46ca6","sha256":"d2d786476ddb1827a07bc0ac83e78cee6d262a16092b6064c166091132f09b65","sha512":"688dccb8f597517ea3c93ddfe5c888a5257e141887cd7df4642935e62f308f8fd8bf091346d1594498267212e97d10c8d3eead5766a334f5f9d2d6e28ea769b1","ssdeep":"6144:xOpEwksQBsrLv4JSkgbLA95gvi0vtVpGLE8Im+tqm5VaIBPXxDMz53yHSJG:xO/YWrLImfA9iKI7pG+tqmrt453iS0","tlshash":"1f742311da330b5a100abc22bf603cec49fa5bb51e51954eb94a34d85edc4f1a7cce6d","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-08-20T04:05:18.155714Z","times_seen":1366,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":45,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/images/11.png","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /images/11.png HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 21:37:54 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2562\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2539,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 45, 8-bit/color RGB, non-interlaced","md5":"e948f8bad10e412b6c8c43232029a977","sha1":"41e0c87bd12abcb24b61ce189b4061dfc3aabbd6","sha256":"7a0781e4d9c61d62abe218d9e4043bf3128a3094bd449647d79e0c0dcfe39b86","sha512":"5a383a891483f3ecac85369626b3b2255a5dea3eb414004139c5669f5af3ce1e179bce95f703fd3e3e8b0f0056540275d897f82ec7c6c9cc3cd30c5af7c8a51c","ssdeep":"","tlshash":"87511cab3890d03786b255f80f0db52323bf2017235ea27ac88f9d1cb44960d0dcae87","first_seen":"2026-02-16T14:52:59.631927Z","last_seen":"2026-02-16T14:53:16.605881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":339,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment-recovery-services.com/fonts/fa-solid-900.woff2","fqdn":"investment-recovery-services.com","domain":"investment-recovery-services.com","tld":"com"},"ip":{"addr":"185.181.165.238","port":443,"asn":50673,"as":"Serverius Holding B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://investment-recovery-services.com/","date":"2026-02-16T14:52:49.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investment-recovery-services.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:53:31 GMT","end":"Wed, 13 May 2026 18:53:30 GMT"},"fingerprint":{"sha1":"B5:71:FE:D1:50:3A:3F:25:53:FE:AC:A0:6E:54:00:44:D0:75:9C:4E","sha256":"53:E2:07:BF:98:60:B0:A3:BC:8F:3C:38:D8:3B:39:1E:57:7C:04:24:53:F3:D7:66:EA:F0:2A:66:3E:D5:F4:1D"}}},"request":{"raw":"GET /fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: investment-recovery-services.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment-recovery-services.com/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 16 Feb 2026 14:52:49 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 17:41:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 303544\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: font/woff2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":303544,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 303544, version 768.256","md5":"78863e0f6e65fbe6175866e6d5b6f18a","sha1":"8cda0fc2a701bd6dcfaa94261178fa78df1d15de","sha256":"82877c6d33c5d786db4815f756437c3e853e08bf8c6c267fd246760d2a96d029","sha512":"c28bb3ee26ba58f4fc27cd29ac1daa858c34d6b4768cd1d23836c81f3c62d8aa0d63f34aee682be251dbdadbbfefad9ef8bf212a92a9986e946269831487b644","ssdeep":"6144:KTzLBqpLbENUL2vcSb4gb1RbkH17zCHoV3467yRwOBy6xneKfa6Y4JNTAYvTouwk:KTzwFuiSUgx98vhV3467y9/HfNLouw5C","tlshash":"465423290192e53f1be321decccbc1797006ed6b876663508b51a6cf4bd06acd22b693","first_seen":"2023-04-27T20:28:34Z","last_seen":"2026-08-20T10:25:19.903241Z","times_seen":1588,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":33,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"investment-recovery-services.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}