{"report_id":"f1b99463-b377-4e5a-822a-805f4d7a723a","version":6,"status":"done","tags":[],"date":"2026-02-11T11:55:35Z","url":{"schema":"http","addr":"retconllc.top","fqdn":"retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"172.67.202.191","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"title":"Home | RetCon Investment","dom":{"size":43044,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27697)","md5":"33069f8cff0841090d7c75bd57ba335a","sha1":"e6641ab2462a83785d86bc169524316ed20cfcfd","sha256":"bcadf1b01ea1a0a965db40e49a98ea582117d0d73ad817fdabd9f90dd2f733de","sha512":"1a84f0530a8f64026c94b37472bdc1ed0aff7076fd5e2386004b52a22ef36379cd98b3d90e2b36db63f6390d44099bc2a056cdbb7376afb7b2fa526d6bd1f65e","ssdeep":"768:4jr8FYTbfsTO+LDGBPKHs9TvfqaSQXOQqGMWYWf:4jr8FYTbfsTO+LDCPKHshqa/XOl6rf","tlshash":"241396176780462c9c5392a8f399e54ea32df684ef6359eef7c62410c2d93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"retconllc.top","fqdn":"retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"172.67.202.191","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T11:55:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-02-04T17:44:15.375001Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-02-05T01:01:07.833646Z","alert_count":0,"request_count":3,"received_data":323868,"sent_data":1401,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-02-05T03:24:49.311662Z","alert_count":0,"request_count":1,"received_data":7667,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"35.159.44.172","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-02-04T20:04:40.16957Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ws-eu.pusher.com","ip":{"addr":"34.250.172.245","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1997-06-03","domain_rank":153698,"first_seen":"2014-10-11T10:24:38Z","last_seen":"2026-02-05T11:21:10.483616Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":635,"comment":"","tags":null,"fingerprints":null},{"fqdn":"retconllc.top","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-25","domain_rank":0,"first_seen":"2026-02-11T09:17:47.058657Z","last_seen":"2026-02-11T09:17:47.058657Z","alert_count":1,"request_count":1,"received_data":66167,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"investment.retconllc.top","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-11-25","domain_rank":0,"first_seen":"2026-02-11T09:17:47.039852Z","last_seen":"2026-02-11T09:17:47.039852Z","alert_count":27,"request_count":27,"received_data":1584283,"sent_data":13048,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.176.184.240","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-02-05T01:01:08.091986Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":613,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1127013eed7fec3cdc4c9ebfcb7938e","sha1":"508c6af65bbc496e961724915eb301cc717720db","sha256":"5d845f17c94d3ccf85e0bb1b76e5981cdaad15df12d73358b4a32823b5415079","sha512":"b02ef79fcd75977ae64285ef521811b43ab0bcd54a54ae42bc53614bbbd108f19e8be6537f7c222c85bb52f52da8f2fee12082a4eea4bb51cca0c979a073d026","ssdeep":"192:elHBbwsRQt0PHxUBXCICxUZ6QlxnKKGhYVxfdaW7pnyCDnECBVgcDEgq71UzLckg:8FeQ2ulCXHCv2tyhmGbtbeA+gAs5Td","tlshash":"faf2dce5361d9be1ca752254bff83bf425e9355b09d0ce9481c8693500fadb62a0ef23","size":36243,"data":"","first_seen":"2026-02-11T09:17:52.690557Z","last_seen":"2026-02-11T11:55:38.246213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"96bc78c5776568f3311fd3a4700844c5","sha1":"9b3b3eed0bb26b0bf30dda4eb8d405e126f07ab2","sha256":"397a3322c9d4935aef14314326f1fb763971474cd616508d3c92cfc315430b6d","sha512":"a96f1b4a2131f2063bf8d31aaa88ddde99020b52bf185943b5014883bed02dde7c8315e759372e19e33fd9d08bb444d68c469f15477353938be89bf017dd28f5","ssdeep":"","tlshash":"2b316b02087fb3b2dc492015005e6df1d57e27afd1759194ad688c34a6fdab4071e47a","size":1481,"data":"","first_seen":"2026-02-11T09:17:52.69953Z","last_seen":"2026-02-11T11:55:38.246781Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0977d729ce250e29338ab78485f9e59e","sha1":"db92b9fd44915cfe6bd9110b7aeb5daef03208b2","sha256":"e1e4bfde174613779aef59ef6cd2d8cd535c81b5176818d39879e6fb06a562c0","sha512":"37fe0baef3749b685e47b51bd0a9b874835851194f2265ab149922472bc6c5ee9e7b86c68a5ae6b6110c81dd2dcc020294d82897ee162f6e4ab29a3b7817e22d","ssdeep":"","tlshash":"4231c91d9f8e35bdeee30050351b29c2936905fb215059d07c3d849d53e15b0073f2a6","size":1849,"data":"","first_seen":"2026-02-11T09:17:52.69685Z","last_seen":"2026-02-11T11:55:38.247695Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ea92a6c64c66c9f49fbff7f0f395371c","sha1":"cf8b7908825644d606e234c47e3f22e8074489fe","sha256":"a03280f5e186d4d9d761c6558ce8bfd4e5ca48527505c597024dbb7960c122a2","sha512":"5fc7c1d729ed30ded57500e7415c64e8ee78056b0281e2de3a42f443f763b7b2d31957e2b2c5e1938729e58421563e4b7a9665306c1e2d538a6df8a8c041e9fd","ssdeep":"48:rEL2IpQTMhZrbP988P6GF5ikqJk4VcMeHLRn:rELTpQAhTic4V4Hd","tlshash":"8881e86308dbf775fe156a0418f47e75f1dd776ed42864a2ad285e00e6a73610b0f02e","size":4152,"data":"","first_seen":"2026-02-11T09:17:52.689266Z","last_seen":"2026-02-11T11:55:38.248288Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DPeQuegu.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e8e460e4a7b5a4e1bdac0267191e947","sha1":"a1cf3748473f5309edfbfe1bd84c7d2761798879","sha256":"b81b8adf25044581520d741639f60e62fae743579ee2ccbf6e8de79ead435394","sha512":"18c3a79099a98321c76010a8a1c7bcc19c4505754a596330625ca630b141a7e09db9750a8011a9b02b4956719d79780df6bb5bbbf57a4583fc595137dc2b7a95","ssdeep":"3072:xapZYwdzJN0dcSSVBViZd1aKVnVwsz44rslm85uBTFSNElhPDU3DuG4ZgQuQo/uV:xDqU85ul+Exaz4ZgQuQgurJePR5VYY8P","tlshash":"605449d47295b47443a700e4507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283045,"data":"","first_seen":"2026-01-19T10:30:28.11344Z","last_seen":"2026-02-17T07:12:59.71892Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/js/manifestf3c5f3c5.js?id=3c768977c2574a34506e","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c768977c2574a34506ebd0fed7ae101","sha1":"767b0f9520ffb48179d55c570dfe59861fb93de6","sha256":"0938d5503cf14d3f9a5e612a52ebcda33e889f4e166a58eb2e59a445b8189bfc","sha512":"ca6d652886ca531a21d950d7c1d02e47b06deaa30088314a49386cfe4dbdfce932b0c2bf5d33cd0f92eac14c1084a9b52b0a611c10bcb603778753c3c8c32f12","ssdeep":"","tlshash":"533120d436e4f89c53931d59083f6006f2691d751679f4c18384e8b2bc6484e80a6ebb","size":1493,"data":"","first_seen":"2023-03-09T03:59:39Z","last_seen":"2026-06-04T20:21:10.153139Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b654542732bac08850f823553f07783e","sha1":"2de7cb13025352f078c4232c37a64c42c8db72f7","sha256":"bd70307162a8eef8bc22e4b9594a250c9f1cff0ae8c67e9b0c92ffa47d575fd8","sha512":"458cb41579dbbc782e8eaecae0f246f473129704e6b6077d934b06c2e19a13f2330c3a015679e729f1395f0f9c7a8bf30ce87d24847d1d8baaf0684e59a73920","ssdeep":"","tlshash":"6a21747531e8513ac78221a913bde36c3eb860623c07c040816edd68ed10e56d85fe7a","size":1426,"data":"","first_seen":"2026-02-11T09:17:52.691307Z","last_seen":"2026-02-11T11:55:38.249013Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d4bca3b137226d4c945acf3ded6787af","sha1":"39c327d21d78a98a704b39b7f3eda763f6b3824c","sha256":"3211c7cadd9235a315cf08f7e8bd1d1c8a7042cbf9f28176550fc4c24d0820bb","sha512":"ab8100851462a318ab2df926d28f3e61b38d34e65394626133504bceb3527b23ee6346ebb7f7fe661e360abdc6072ff04aea13f05c27123f5d31a3ea387dc45d","ssdeep":"192:rB938+BU4VB88j6Dkmypm/MldJ2m9Yvlw2Kh4e8:rBfB7bldJIlw2I8","tlshash":"a9d11e62a5cef5b0ee0b6095296d7874f46b16eed010a495f93c8c5c97b83e44b0f82f","size":6465,"data":"","first_seen":"2026-02-11T09:17:52.693665Z","last_seen":"2026-02-11T11:55:38.249648Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0981b406cf3d05f7c6f9541d8741a12f","sha1":"2c87529a186a942b4f70689b6e3e45411d3a04d4","sha256":"81e8b314b6567e3eb4ddf1bd2d961b2a0fc16ad42d22ff50e5e6a5feeebfb779","sha512":"0a4579d8ed6ac5398495233aca5b567f394d7621baf6913f3a18347a6653a062a7d2a0594266073e6fa07526f988183eb192922d40558322cd25e48f2c84cd5a","ssdeep":"","tlshash":"b5f0aca704ebbb745d02a57124eeafdae0590aab4441044855c88c6149fd7bc2f0f60f","size":579,"data":"","first_seen":"2026-02-11T09:17:52.700299Z","last_seen":"2026-02-11T11:55:38.250252Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/js/app1b3c1b3c.js?id=2a1a0053b015f816a5b3","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"013211751a084b91ba65621e792e0752","sha1":"969b2dd78ed73339d10e13843b0f1130775cab41","sha256":"0fc86160b6297be4712fba5650ebcb0922e2bfe437c7bdeb03281df6bae6ef18","sha512":"59673313867a2af230987f985f80e975a1f58a48eb91ef292eb6b8e513afa743f89f0369255d31a6b6c2924989f27a579089dce8c9155c6178a7b2af7e06a40d","ssdeep":"1536:/pUUM0gTYnSyfDn/eCBrOvVGQ0X6NiaIHFduQmKOyUIamWN7fRBEt6IaFaXAb0Yl:b0OVaHVan2p","tlshash":"f1c3f71d7292f2794f9f6130147f3528f07a1b98a859c053f238d8e16af4a49d62eb7c","size":128191,"data":"","first_seen":"2026-02-11T09:17:52.685492Z","last_seen":"2026-02-11T11:55:38.230354Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/js/vendor313f313f.js?id=f4d4794dc51b38518da0","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4d4794dc51b38518da0938d25df752a","sha1":"e90e217cfa20801f7ba39906e899224248527227","sha256":"b023025beb17bc51b2c4508b6d85d0c683345d5744bd68c6014e5d175b9559d8","sha512":"eae14635c052165edd9290b49f12a6f51c34a7a569d53c8d99938a3e3258ac86940d5f61a33080532fb23f25ee0894cdfd852a6b741cc3f5cea88831b48e9c77","ssdeep":"12288:rJA2Wzwd5QmRrpQANICqQdHkooeWjGLtQs3saUTWa7QZFBdsbPCMd8:rxWUd5nOaDqve/tQsaD7QZFBdsbPCMu","tlshash":"891549cdb286b432479720a5002f2a0ae23e6a65744f8894f771e4d6bc78d8d517bf7c","size":918321,"data":"","first_seen":"2026-02-11T09:17:52.70128Z","last_seen":"2026-02-11T11:55:38.251009Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8ffb7b154c231431baa290d601e01be","sha1":"05765ebc365c51698c12a4d38357aa86ae6f8747","sha256":"39b54792d374d5113f1e08bb208e81b61910f89144891ae9cf5aa1053936c517","sha512":"1d45aba475fa5a8c02f464d94064a12841562dbcf5261fc295ac3f94a7e78109a571696f57933dc3ddf1a3590e9b15332d46664c383e85edceec0907aad18ac8","ssdeep":"","tlshash":"64318c78aba3058fb4e7b383bd25518a08b5f15bca47dc053e1c15904fc2a29e15cbb4","size":1642,"data":"","first_seen":"2026-02-11T09:17:52.692844Z","last_seen":"2026-02-11T11:55:38.251737Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"45a3f0fcd59cb7cd7ce1fd9af144460f","sha1":"7cc7752c20c60e887a669d2c18c80effb7f4661f","sha256":"4fad07201461fe76bbabc00e8e41cc79057c01474bb242c9300eba23842dda52","sha512":"64152515efd63a97f86602029a0c9380b85b2853252233c2a9c1cb4448cf050f076cd9f4e35bbc50fb4a2d60488247ca75c59b947612a7040b8dd3c1ab16e115","ssdeep":"","tlshash":"1201fd5684ab7bb099512010606d2ee9a0b922bf421804b5391ccca483bdbb0bb2f09f","size":819,"data":"","first_seen":"2026-02-11T09:17:52.692134Z","last_seen":"2026-02-11T11:55:38.252361Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a396d4fc8192590714789db8ee91d746","sha1":"69e7cbbdf208dc67e069a4509c62f7d2eb6722a7","sha256":"bf49bed5cbeabb60f98b929b6894d4439f877944b839ca8a62fe1c7a48fda1f2","sha512":"58da159b445d22f8cc083fe98f545cc480ff41738112674df5e8d7fe605b1d4f9795d9f76557ec9193d1943def2f47ecf5d58010e1810bca7d40687a25086f3d","ssdeep":"","tlshash":"af215eb300dff276de0a2909545c3da8f09e2d6e8405a499f62c6d44d3aa7b45b0f46e","size":1146,"data":"","first_seen":"2026-02-11T09:17:52.688127Z","last_seen":"2026-02-11T11:55:38.25309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cd8c3cdbea4ee8f78c0b0ca17a3e035","sha1":"594293136560820d93133ca0bff681e0f221d434","sha256":"fdd58e0127beea8da39d3a5dfd2448a6284c4ee9b4ae2b9cc72103b076ff24c7","sha512":"91d1543f4743204936a33502b8284575255c8c13e09a6597ea5566b10e951c06f69dacaa014c53f4cb6f81545bf335e6c4b52fbeb0fdada761346d84be933201","ssdeep":"","tlshash":"14f041e2319680b29511076983e6631c3ab0b8a4ac13c804858bee31ee10fe2e64aa15","size":583,"data":"","first_seen":"2026-02-11T09:17:52.702064Z","last_seen":"2026-02-11T11:55:38.253662Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57c3ce29b004f5f1768f82a3dd34b71e","sha1":"508b4c84cd9b4a49bba1a234c46299b828cdff75","sha256":"0c903c93aa1cff23ea129397b1c8939b7110448bef20be6e2b181c2b02a1e954","sha512":"c5f3d44b7f68b67d1b1e966efd23e066dbef131f4ea5b425943cbf2c8c46435aec6df5842b1ba30597f8ad2d5b340ddbd4b0f2c6e1a543f2f44312c0241a501d","ssdeep":"","tlshash":"e7e0617a7c74405547c314b4d1a7e62c3d1a30b44455d85798bd9c3968b0edebd055d4","size":409,"data":"","first_seen":"2026-02-11T09:17:52.698258Z","last_seen":"2026-02-11T11:55:38.254351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a7c6ba2d4497f5ed2e07ff1c449c180b","sha1":"bc2e009fd49d0930c6b215c9a0a79447384fb1e7","sha256":"a6235d1b98c128227e148788e5c7268af4861020af66a3a41476c4cd9e3b0bdc","sha512":"59cde34c3b93f8286f484196e51bfd8f73a9b40ac6d97e49955512622c5fca361d53e5828e094eca37117f24de2d7f862d0e7ce4d570a19d2daafe1de2871240","ssdeep":"","tlshash":"c1c080df20dda011cd45365561633d45740e01ac8954d98dc55cdc7975c2330566d0bc","size":180,"data":"","first_seen":"2026-02-11T09:17:52.687427Z","last_seen":"2026-02-11T11:55:38.254988Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"86525b0ffdde92a5193d14f0e916c3ba","sha1":"f6333f163f3de49a1fff78612d68b68a8349cae3","sha256":"b88dfa2056360f8cb52953049588c339f851f26f5188dc56a6d944d9a78c745e","sha512":"82e9c927265a65e6e1802d5430977f775db41212b5117f8975b248eedc356d3f3213c18afeb41dfe337bb3adaa63a2480b16b00774697dd20155b7089f83aa1d","ssdeep":"","tlshash":"17114c12407fb573dc0a7516045eb6f0e41b16f9d278c0e9e978dc7461ada742b0e06d","size":859,"data":"","first_seen":"2026-02-11T09:17:52.695217Z","last_seen":"2026-02-11T11:55:38.255604Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"efb9ebd1e0b6391ece62a935825d6117","sha1":"cd89cbd1aa14a8fff6a7f2725fd039e388a3e120","sha256":"5e129b5e1510353184ae5bbd338cc38534325b90e237f28b7ce45f0bab94e088","sha512":"a72874a194fd9b98d45ff16d6b5d15f072729257abbc91648d7be00694119ce7bdf0fd17a47442c28f2cda3f976314aba6b6f928c24f55bbeff1d92a6e36a2bb","ssdeep":"","tlshash":"43216b03496efbb4dd472041441cabf0c56a1afff16461a0f52c8d2991b56f1632f26a","size":1148,"data":"","first_seen":"2026-02-11T09:17:52.69442Z","last_seen":"2026-02-11T11:55:38.256385Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible5615.js?ts=1770796800","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"757ecd80c2f8855885ad033a489ef10c","sha1":"b37bae549a5079b1416f26edc45b2dd66ccc3231","sha256":"cbaef0865225a9921efdd5b729ffaf87b081d1fa3ddfa6e09d6dd457b9a3b07f","sha512":"b9a6203fe5126549dcb55f3034bdf9f8a324413447ae6ffd8677f74b8ff93b2ffe4d3bf4a14ed92316ed0d761a0f4ec471eff7e5a9d445d441253a92c7cb4ba6","ssdeep":"768:VAPlYWeqSgjk4pyjHCgJaWu0aQEOJgNKleN8urbu:Vlj/NjH9J5uFQEO7Ubu","tlshash":"9ef2758a71deb16612777975016b704ba1afedc8741c1a10d230d8b8bb7471ee0aedac","size":34682,"data":"","first_seen":"2026-02-11T09:17:52.67373Z","last_seen":"2026-02-11T11:55:38.242705Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DPeQuegu.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:17.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-DPeQuegu.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://investment.retconllc.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:17 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"696dff7f-451a5\"\r\nexpires: Tue, 19 Jan 2027 09:57:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwH3A24eAAwBuUwKEwH3DwAAAAwBWd59LgG3AAAAAA\r\nx-77-nzt-ray: fdb54123471f2363256e8c6989e63603\r\nx-77-cache: HIT\r\nx-77-age: 1994243\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"2e8e460e4a7b5a4e1bdac0267191e947","sha1":"a1cf3748473f5309edfbfe1bd84c7d2761798879","sha256":"b81b8adf25044581520d741639f60e62fae743579ee2ccbf6e8de79ead435394","sha512":"18c3a79099a98321c76010a8a1c7bcc19c4505754a596330625ca630b141a7e09db9750a8011a9b02b4956719d79780df6bb5bbbf57a4583fc595137dc2b7a95","ssdeep":"3072:xapZYwdzJN0dcSSVBViZd1aKVnVwsz44rslm85uBTFSNElhPDU3DuG4ZgQuQo/uV:xDqU85ul+Exaz4ZgQuQgurJePR5VYY8P","tlshash":"605449d47295b47443a700e4507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-01-19T10:30:28.11344Z","last_seen":"2026-02-17T07:12:59.71892Z","times_seen":1002,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/css24c94.html?family=PT+Sans:wght@400;700\u0026display=swap","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/css24c94.html?family=PT+Sans:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 13:01:44 GMT\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VrzTGj%2FOaGtdjTTmZMLbU0PnuLIRURZKYsLMjFLAtzQ20vHanNNdPVp0ltp1ogSm9vqSeYxFJWn%2BiEXVsU%2B2c35f8EnyAuLB8LGojzQ9T%2BrMKHIpm%2BcUlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7fcfcdcbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3309,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2349), with CRLF, LF line terminators","md5":"c4e7d7b2dd8e065b56f62c44db2e77d4","sha1":"9f7e8525c86ab2ebebaeefc725e529449ec5e88a","sha256":"61c34d536455d49405792d5e9120f4320edb39c65867a8dbbdac2be0535e3026","sha512":"7298114fa8d80c949c46fdd6b1841055002ccf3a45ff9808e857d34c9d3ddbcfdaa6785708fff3374c948f481ca879f72e2d5f24c52d6d8b6e18e6ec9a344e05","ssdeep":"","tlshash":"5e61d93a58d0812ac7535168f3a9e35c3b284151a503c64155ade86efd44dfbec4bfe8","first_seen":"2026-02-11T09:17:52.671738Z","last_seen":"2026-02-11T11:55:38.228337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/secure.svg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/secure.svg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o6GTJI%2F6puMtftfVCMZYlktsewE%2B3rXDwXhl6Dw9habIYzEOyO2NPDckURKv10T1n%2FDafsKFmBPh7FrJ4pAELpNsl2WcqHvPUJ%2BB7vHy03JxkamOPldgGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7fcfcf4bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2244,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20962f39f344cbddc27efe3304383139","sha1":"77f03073cf72ba9e793977821fb48c6085a6f4b7","sha256":"be9162aba2b6516176ef9440024d6a42a159ec13f2ccdf6afb3b6eecbe694ccb","sha512":"7cf748ea6b0374d40becad426ead613898dd03c1dc1d2d6252310ce81e0bfe0bec953ffaf16697c89c268675ae74e22e3ab9d90c73839f41efee0cb3a9bb84b1","ssdeep":"","tlshash":"3a41fdf713ba1bd9d9e097805a91a1cb237597d7393110cc638b39610d101fb667de54","first_seen":"2026-02-11T09:17:52.678602Z","last_seen":"2026-05-13T16:05:47.726444Z","times_seen":10,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/js/manifestf3c5f3c5.js?id=3c768977c2574a34506e","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/js/manifestf3c5f3c5.js?id=3c768977c2574a34506e HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zvxBWGwaFjW%2BPDUnbNGRTNRaBOngDlfZjb0%2BQ0QbHA%2BNesm72a4HQ%2FEhA3sYnRggRm3CnVFcigsnyrQcIgsdylhj7RUHss9HKSuqg%2FHqmIsNjdw6xaAvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7fd0d18bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1493,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1493), with no line terminators","md5":"3c768977c2574a34506ebd0fed7ae101","sha1":"767b0f9520ffb48179d55c570dfe59861fb93de6","sha256":"0938d5503cf14d3f9a5e612a52ebcda33e889f4e166a58eb2e59a445b8189bfc","sha512":"ca6d652886ca531a21d950d7c1d02e47b06deaa30088314a49386cfe4dbdfce932b0c2bf5d33cd0f92eac14c1084a9b52b0a611c10bcb603778753c3c8c32f12","ssdeep":"","tlshash":"533120d436e4f89c53931d59083f6006f2691d751679f4c18384e8b2bc6484e80a6ebb","first_seen":"2023-03-09T03:59:39Z","last_seen":"2026-06-04T20:21:10.153139Z","times_seen":210,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/js/app1b3c1b3c.js?id=2a1a0053b015f816a5b3","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/js/app1b3c1b3c.js?id=2a1a0053b015f816a5b3 HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQqFKrK2EPOZAr17XcrocstjzrFSRFut4WHEyCQUyD6xcRR%2Bw2%2B6uNcS3F1XOTGAd7Pr5jVPdkIiMem7FOVb%2FqIT9Su8fHE6stVsDTbfVbyR6I1k%2BslV2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7fd0d3abc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128191,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"013211751a084b91ba65621e792e0752","sha1":"969b2dd78ed73339d10e13843b0f1130775cab41","sha256":"0fc86160b6297be4712fba5650ebcb0922e2bfe437c7bdeb03281df6bae6ef18","sha512":"59673313867a2af230987f985f80e975a1f58a48eb91ef292eb6b8e513afa743f89f0369255d31a6b6c2924989f27a579089dce8c9155c6178a7b2af7e06a40d","ssdeep":"1536:/pUUM0gTYnSyfDn/eCBrOvVGQ0X6NiaIHFduQmKOyUIamWN7fRBEt6IaFaXAb0Yl:b0OVaHVan2p","tlshash":"f1c3f71d7292f2794f9f6130147f3528f07a1b98a859c053f238d8e16af4a49d62eb7c","first_seen":"2026-02-11T09:17:52.685492Z","last_seen":"2026-02-11T11:55:38.230354Z","times_seen":2,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/chevron-down-solid.svg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/chevron-down-solid.svg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/assets/sass/app25712571.css?id=81362d6d487490c8ac01\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:16 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0uxOirnVOtBausQDYiEEB3mBwhOU1C3ypV1wl8Q1UObnZsCg7wWno8IIt%2BYVHtAUa1fQpcN05%2FMLvxUwxPZk7EX2mq7y0Vp%2BHLyWR7uFMFmPo7m2%2Fh%2F3cQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a80048fabc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":523,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c0862a67bfb8773d52c7833e17cd5ca","sha1":"31ba0bafa5402a34fbd3d8534bf04ebdedfcc2a2","sha256":"263093b97bd01b06adb0ad6caee9cc0ed3fd93607596fb8dee102ebd20d6d85e","sha512":"c3f389e5c42af9e1dc47d84edf04f875066e506dc8f031fe7a243a814b9f8284e7a46310ece2a429e702ea85bac9578e7c066fe0306b527b14a4dca830416d99","ssdeep":"","tlshash":"30f0c914a2b92786058e8769ab48331f18037f8c68e09474972e4b7032507e974055f4","first_seen":"2023-08-31T16:38:51Z","last_seen":"2026-05-23T10:32:04.244263Z","times_seen":32,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/css/app87068706.css?id=93fb8cc1ef67e4630f0d","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/css/app87068706.css?id=93fb8cc1ef67e4630f0d HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:44 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YnsCY0T13Hf54iq3YeqbPLLZ1eQ5Kl8XVgy8CprTXveZ72ni0gHv5uOgARWH4aTMlwyMkRcX%2FsK1s8MGfGabRYhBbpD8lRyU3SUpTbILiy38kJPwu%2FknwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7fcfce1bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31548)","md5":"3601b869740b55289026a0a4593f0e69","sha1":"67dfd5a53be4655dfbbd5938b3eb59d2152c791c","sha256":"727c38712d90e9bb0f3029706bee4e6ba4a44451d907f6c839c4d160176474ce","sha512":"94defc9cfde20af4a28f467350dc8aecdf724c1698cbd7876cd4fff1648a1eaea95f42f59dcfde0466ca905982099a90ea6c8c575d711fc24d1692c695553e58","ssdeep":"384:oFdckdZSSOsft4oZfDUTaAffAPfYrq38B:4dZBOsf/JKR3OnA","tlshash":"39e2951eab95143a6c5380f6e4a8ea9cd12776c0df2722dff8936904cbd23d70e6255c","first_seen":"2024-08-19T14:44:35.68116Z","last_seen":"2026-02-11T11:55:38.231824Z","times_seen":6,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/europe.svg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/europe.svg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ug%2BaOKuNk3ka0yd0PGmzeL%2Bk8lRa1L1JRXHsN7zXNT1CIMh5RnzVOFdlN609KtUJ%2BR%2B6%2BpX9TgRCJs58HqyavozCPUakaVH%2B6e5a72tB9AO2HT2nh7eRMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7fcfcefbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7501,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ff2ab22788fe34c0e0808cb1f634f15","sha1":"af96d4f70648c32328b0ecd4479899e523283c54","sha256":"7963aeba6d8f18141e1b261021fe5e85e2bcb2a045e2b95e9c01b54c16a65238","sha512":"a5253949d5cea85df528bb78c01bb8c897364a0618c5ad40c21bc58b3ed9e7885399841e1fdbbe6228f0a8d1a90620cbdb8945bd30a244c8bd7329fd867619c3","ssdeep":"192:YpUd70IINQkfMWTr5rZ6bdRqhxQHwWRShvr:YykfaRFRcvr","tlshash":"1ff11db62164c78c5998ff446e6c93dd53a9f2b830f75180974f29a3bc328bb32196d0","first_seen":"2026-02-11T09:17:52.676275Z","last_seen":"2026-05-13T16:05:47.692202Z","times_seen":10,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/gemini.png","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/gemini.png HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 14890\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nq746bNyDuXlXO6FSNij0qyOTF7kf4wb8h3TtU7opIw75O%2FCmHjWJ9OFi8SJWF4OHcq9vWiYHzY%2BQlloZ7OdMt21PWd40pAhGrCn70O2cPQu85hqUS0xA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc3a7fcfd0fbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 222, 8-bit/color RGBA, non-interlaced","md5":"4477d39fa4f67eacb54d0b71abc5e510","sha1":"316bdf7398d942f29352e7fcf1cda78a7214740c","sha256":"c9a47a3267f5e015c535419803c49e4910016147882215c66e6b949bc70b076e","sha512":"eb6f7189040fee4f005fcccb060b67a89965f7e7120889c724ffdd8f7ae826c7445402155fe735ef0059b0a797152934821c2333f2d5d6ddd8273316010c0555","ssdeep":"192:KWfjnuRPQcj8gc+8G6lSeYqxFnSqdMHYER0TvQrvLZgrBSTK2z0jOjDtGNvrPSWM:Mlj8U85lSeYgMpRF5WIgCDtGNZy4jdI","tlshash":"3362c0ddd2adfd9da426c0df72b83460a3f645734f2a4ef0684511b8990c35878dca7a","first_seen":"2026-02-11T09:17:52.679472Z","last_seen":"2026-02-11T11:55:38.232936Z","times_seen":2,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/ftx.png","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/ftx.png HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 10881\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V44kdJb2cgNGqFRO0yOVUsueJg0vGDOB8OtJ27yd5Fe8QrC%2Fmw1TpLgtDp0%2Fu%2BtJFWPpvCaDDlxWqMqCqL93Y0jgKdc7sFdKmtAYBQ4KsRv0uQbxfIvglA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc3a7fd0d14bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 735 x 390, 8-bit/color RGBA, non-interlaced","md5":"97e8371282f72f35219092de686190f7","sha1":"fddef967acd22826999b98fd4bc7a1c65dde6a08","sha256":"d7404ba5c4ffd7810f14d667552a7f29cbc7be1ce70d0a4d9d9695ea5371d735","sha512":"5dba2272892551b53f6ba27fe448c6b6fd12c5fccce63879c39178bc6b4c91afab970bcaf6f48fbbd5a4c276c025fe780333e122353de1530bb76152d942cea0","ssdeep":"192:FYyf2f2fZVBkmcKcEqb46anL6ngAaVTIuA37nklOdOOJ0f6AwY8w4fXQ:Fvf2f2fnmmxwb46anL2gAGT7+oqO8U6I","tlshash":"2c222745c342d87bf72540bab016aaa708a1ac77b015ee2319efb16f6753fb40c7ac01","first_seen":"2026-02-11T09:17:52.684567Z","last_seen":"2026-02-11T11:55:38.233797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/binary.jpg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/binary.jpg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/assets/sass/app25712571.css?id=81362d6d487490c8ac01\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54318\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jsDPDU0K9DjkdF5nAtZgci9Kt4%2BzLha7Sxtn3MTpq3gkIZoMpv3SfBXfD8%2BA%2FTf8%2B5uJmR4ox1mbU9qjcKkpKvgfDVg0XeVzUvGsMq%2Flyj4SRNqolzTnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc3a80048febc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54318,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 960x540, components 3","md5":"21cfe59b532165aa77d12ea40dd1a188","sha1":"90388779849d86e40f482c2872425e9d30207e21","sha256":"e0f5e171d1d09fd7cab4eaf01db60d4a414aa217188d2f24983fe4cf07947e16","sha512":"88b626ebc4f289af164d30bfcf4a9d6849acc252bb7ab97036237f1e9f86bb888faec2884b854daee3fd29a05c26954283565cb30f54dec25d0a717f747522a3","ssdeep":"1536:2Y/Kfqlbb8WFH0tVhO5HGKltn5qqXu1RaO+N:2Y/Kfqx9FcVc5m4nqqXCRaF","tlshash":"e133f1a517750249f6b03f34b5f1bb45e16944377b2028ddea5ee2a42c9ceeb0ae8d01","first_seen":"2026-02-11T09:17:52.672518Z","last_seen":"2026-05-13T16:05:47.72956Z","times_seen":10,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:17.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://investment.retconllc.top/\r\nOrigin: https://investment.retconllc.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 328a2bb6fa0144f5d85400b5b12df9bcac88a3e9\r\nx-77-nzt: EwwBuUwJGwH3JAAAAAwBuUwKEwH3AgAAAAwBw7WvFwG3AAAAAA\r\nx-77-nzt-ray: fdb541239515ca6a256e8c6995187e0c\r\nx-77-cache: HIT\r\nx-77-age: 36\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e73fb26e61b7779ac37a909aa465da53","sha1":"f1aa800d8470d6f52b8f1a919951d96b8c2bac85","sha256":"99edc223afd1cef944e2059f41beadcacc433ce17f52855cdf7803d197268431","sha512":"0df22279f76ba298db9c864b8853738968705515f880586293dd22fd7b4caf87cab05e9aee3dd37c350a490ba4ba1f51011b28dbdf7afc065840020a3641a624","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/F:Al3GKYKZrJA2Yg48fXPdeD/F","tlshash":"c7e1b74f9a144eb987c6438276cfb84675bc807352509d3afd8cc8b842697cda3e3b94","first_seen":"2026-01-13T09:38:59.141589Z","last_seen":"2026-03-04T07:11:45.044045Z","times_seen":1814,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":47,"dns":21,"connect":8,"send":0,"wait":9,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/kraken.webp","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/kraken.webp HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10200\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PWe9erwiY31IdDTWODdTZNaXzU7S3mkBOPGABiBALoNUtYwfY3OiyfckyOyVd%2Brlwz34POHGWROxZdvoCUzUxwtRheh%2BAdVpZCF7NCEhGBXX5tgBcZWeCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc3a7fcfd12bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"94c77360ede858f74beddec72e136281","sha1":"399051bae5c0ba876847784440d5443e36784be8","sha256":"859f3eae10735936c26879f5fbb980f3a6ad3417ed72eff84d0f612ac19f732b","sha512":"4cd656750175f4e92b52600e014d7b0ddd1e704536a09ed28d01e62bb7defebbc266d19dbc595670c97ee50c480e6c91200a93a7a977125b5953154d09c67805","ssdeep":"192:UC8BQlqvXFEWcIXomRx+X8YXq+L8cyV80fOCHmH:iaQvXkIHRi8YFL8cyxmH","tlshash":"4422b0155225912f9c0833c4fec64599bdcb0fcd5c72ea5a9e780078e390e696f4f5a8","first_seen":"2026-02-11T09:17:52.670402Z","last_seen":"2026-02-11T11:55:38.235563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/21ae6857726f5f5fa7d17e5d46e5db55be178923.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"35.159.44.172","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:16.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/21ae6857726f5f5fa7d17e5d46e5db55be178923.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://investment.retconllc.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-08T11:38:09.535116Z","times_seen":5245,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":112,"dns":15,"connect":21,"send":0,"wait":28,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/assets/img/currencies/eth.svg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:16.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /assets/img/currencies/eth.svg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 11 Feb 2026 11:55:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mc%2F0dwmuuUqnSvVFE60VerIdlWlNkLvh1AV812Hs%2FNzE217F5ff%2B9rp%2F3YQRQd08TdFBAqdE1ZQ07NVC3kS0ksxOZljskdRc2NguocYvvZMl4Y6Fw%2FfdpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a802986fbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6609,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5395)","md5":"307dca9c775906b8de45869cabe98fcd","sha1":"2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1","sha256":"8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c","sha512":"80c03f7add3a33a5df7b1f1665253283550dac484d26339ecd85672fb506dce44bd0bf96275d5c41a2e7369c3b604de377b7f5985d7d0d76c7ac663d60a67a1c","ssdeep":"96:k2J/SNi/FLQVTLKCGWz5ln59Jy0jRdoMVZTdI5:k2pV2RKCxDnxyTMVZT0","tlshash":"d9d1975fdac5101e60d385b7e8d4ea4c8916aac3de234bdbb54f7915cf8038719a361c","first_seen":"2023-03-10T04:10:06Z","last_seen":"2026-06-08T08:27:31.411202Z","times_seen":4413,"resource_available":true,"data":null}},"time_used":1313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.176.184.240","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:17.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://investment.retconllc.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: I/mIF5eHsItTCmPRxzvDrA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 11 Feb 2026 11:55:22 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 72+Q494gaW/g/LsicpXJV/MwoY0=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T15:34:22.145557Z","times_seen":16243359,"resource_available":true,"data":null}},"time_used":5772,"timings":{"blocked":0,"dns":113,"connect":133,"send":0,"wait":5498,"receive":1,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T11:55:14.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 11 Feb 2026 11:55:14 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://investment.retconllc.top/en/\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBrEHHlo2POlUHiF52t1R4Y%2BQSJTthXKFklvecT5Xpg%2FR32fklwezWAxAsHlswM0E85O9M4amv866EI%2BESHtP0c2Fm4lxKFnTzsF2Tf1Iiancp5Vd8bPqA%3D%3D\"}]}\r\ncf-ray: 9cc3a7f69bd9958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65604,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T15:34:22.145557Z","times_seen":16243359,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T11:55:14.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/ HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 13:01:44 GMT\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wp3oajK3Aj18hQqikTZlDhJuas9tc2NXMuWhTJVhO4WAdLDj07c6r1o1APd6%2F7OFgFl75kh7s7b9AuuQO1syBedWYs%2Bq4M7KSo7UUBEBiNMXPnGdIg9pOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7f988ddbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65604,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36220)","md5":"72ff902ef20ff7d9085833a12d66941e","sha1":"6147c65b847f0f980a00b6a8dc42c99e106aaee0","sha256":"c8d86caf23001c87faa76cd31dbff3d54bcabbc30abc231cb2d7bf9c3a573241","sha512":"f01a36209de69206b14cebbc39d54e9d759ed497dd2777721240e659a15cc9115fa638c75bdffa3c6a448ee96a132d8211addb8428458acf79c66fdbb7abec22","ssdeep":"768:0F4ulCXHCv2tyhmGbtb1+/s5TFJgyppA3m6XOhTSEEn:ohJBppA3m6XO9Stn","tlshash":"bc5362e131a89aa1c6711294bff43ba469e5355749c18e40b1cc6a350bfbeb25d0ff23","first_seen":"2026-02-11T09:17:52.67772Z","last_seen":"2026-02-11T11:55:38.237559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/headphones.svg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/headphones.svg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiVJzWP7%2FxJI%2F2cOwabXwT7PXvtMO%2BT%2BW8sFd4ASMW8UtzhgTdIaOO35DUMTBihzrg6J3io7eirbdXHbHf2TCrVv7jA2HP7PUTbPrBytprifvHrGCjbGaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7fcfd0abc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2071,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b0eeb5cc56298ddfd09337efe823483","sha1":"544c63c2f678030a0af104b2e5058af221ad7c43","sha256":"9a99d598a8685687df03865b5e8a511dcf75793c2fe1675b17158bd1bffb751c","sha512":"be458fefd41dca519107a08ef5dc9544ddc85c55f9ee73afe4b134477125127ad040b07692b5e002eab025515e6007f00ec276222147c500460cbba464ca98b4","ssdeep":"","tlshash":"df41edf323604fe986856b6c1ed2a10d6237d59178b0d2889b57203bcc5eaa7353ce91","first_seen":"2026-02-11T09:17:52.669239Z","last_seen":"2026-05-13T16:05:47.683104Z","times_seen":10,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/js/vendor313f313f.js?id=f4d4794dc51b38518da0","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/js/vendor313f313f.js?id=f4d4794dc51b38518da0 HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2%2Fa7OBrLFuN8X43LVBBVijZNVPXPr8tXe816%2FCHZ5glvnH5G9RU4v%2BMS4mM3KAQ6vGnpBATO45Qhh%2BQ31hbLH0puD9rqq5ZlQ6uiME2%2B1ft%2B144im2s0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7fd0d27bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":918321,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58358)","md5":"ab9e1779bd09026e7b86d8ac9fcb59a8","sha1":"1f9a451865fc4b8d1e10dec3d104e6ac44c017bc","sha256":"776751471f58b39959b280f13760bcef8398efc35d1bc83e8d10f9058b24ccbf","sha512":"8df8ce54c2cbf49443a365f15ccd28fe43c1a7f77cc4b2f8b7bff1902ce07956665cba0a51021c5d9b561fff5c362fc7e377d735d3354cfff62639489b1775b5","ssdeep":"12288:rJA2Wzwd5cmRrpQANICqQdHkooeWjGLtQs3saUTWa7QZFBdsbPCMd8:rxWUd5jOaDqve/tQsaD7QZFBdsbPCMu","tlshash":"901549cdb286b43247a360a5002f2a0af23e6a65744f8894f671e4d5bc78d8d517bf7c","first_seen":"2026-02-11T11:55:38.23862Z","last_seen":"2026-02-11T11:55:38.23862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"ws-eu.pusher.com/app/b2f87e3b831c0c012b4d?protocol=7\u0026client=js\u0026version=7.0.3\u0026flash=false","fqdn":"ws-eu.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"34.250.172.245","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:16.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pusher.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 28 Apr 2025 00:00:00 GMT","end":"Thu, 28 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"96:9F:4A:4B:40:24:05:F3:E5:34:7F:17:21:9A:D4:19:F0:8D:7F:39","sha256":"B0:F9:BC:B4:3A:C5:61:0D:1A:4F:83:89:2D:26:4A:43:7E:0E:1E:22:F9:80:FE:DE:14:50:8C:D4:F8:14:43:F4"}}},"request":{"raw":"GET /app/b2f87e3b831c0c012b4d?protocol=7\u0026client=js\u0026version=7.0.3\u0026flash=false HTTP/1.1\r\nHost: ws-eu.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://investment.retconllc.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: xhJQRDBZs6LFluYgiQS76A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 11 Feb 2026 11:55:16 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ErPsIcCtpJUvPjVYGw8HTgK4OLM=\r\nSec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T15:34:22.145557Z","times_seen":16243359,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":0,"dns":137,"connect":171,"send":0,"wait":38,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/ico.png","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:17.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/ico.png HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 6893\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnoYH3jP6dLbLaVB65rlU289VUTZa3dPt8n6apgz6E1OIRiqeFq168lkLFVQPvJuLa2NyitnYVOrV10d5doJZakmj15NCht882HzGghjOcxsOunlTvMwAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc3a8095f7bbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 93 x 93, 8-bit/color RGBA, non-interlaced","md5":"5ac422d7a35d14468aa1e8da50674290","sha1":"314084fdbd1212e17c026494f98e66cb9170cdf7","sha256":"de57840588c3c51804a187a885732c7aff912b59af5b94fdf8d1582eaad486c6","sha512":"5c5560eefb55c1f879a37e14863485a03fa0288675f4a7e070a7477764ceeb73f97879f7a22ed9c77f46eb6230e3a38e69fc2a92d61d4b5e06f9f3551b08d0c2","ssdeep":"96:yUmvOQY6A8163BA2kUdIR1oWLNMXpbMsAgmBHMIgbwClUUexTTcI/2k3kuB+B6bm:QmUXzNKX+NMlpelcI/V+6UZLJ","tlshash":"dce190a5696a6b978b43b5b7db5f542e4e261f233d1370062718dbb6e19e8c0100c70e","first_seen":"2026-02-11T09:17:52.674509Z","last_seen":"2026-05-17T11:12:40.71156Z","times_seen":3,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":468,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/assets/img/currencies/btc.svg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:16.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /assets/img/currencies/btc.svg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 11 Feb 2026 11:55:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0uL7%2BsboJrZDlWZVNN3Ca5r5CpoxtplPJQcrqsUbQazuwBsHBo7yLR59WCNRjVM4Hmf9baiKV566ZsQKY8QlMyqJEZFOFnF3jC1MOJ7Y3DRVtG3TeIESiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a802885abc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6609,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5395)","md5":"307dca9c775906b8de45869cabe98fcd","sha1":"2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1","sha256":"8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c","sha512":"80c03f7add3a33a5df7b1f1665253283550dac484d26339ecd85672fb506dce44bd0bf96275d5c41a2e7369c3b604de377b7f5985d7d0d76c7ac663d60a67a1c","ssdeep":"96:k2J/SNi/FLQVTLKCGWz5ln59Jy0jRdoMVZTdI5:k2pV2RKCxDnxyTMVZT0","tlshash":"d9d1975fdac5101e60d385b7e8d4ea4c8916aac3de234bdbb54f7915cf8038719a361c","first_seen":"2023-03-10T04:10:06Z","last_seen":"2026-06-08T08:27:31.411202Z","times_seen":4413,"resource_available":true,"data":null}},"time_used":1289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/assets/img/currencies/ltc.svg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:16.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /assets/img/currencies/ltc.svg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 11 Feb 2026 11:55:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yV76lV4MKcBfkws5WjVK9p8aRoI6FdgerbkJ3oYiBM%2Bw28VfEhjwqG1%2FOmP%2F%2BOtKp%2B7DVWPeHFdfvlywyCya4cgfG1E8yMo6YNz37n4YgUgtIbl%2B3zSUwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a802988fbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6609,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5395)","md5":"307dca9c775906b8de45869cabe98fcd","sha1":"2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1","sha256":"8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c","sha512":"80c03f7add3a33a5df7b1f1665253283550dac484d26339ecd85672fb506dce44bd0bf96275d5c41a2e7369c3b604de377b7f5985d7d0d76c7ac663d60a67a1c","ssdeep":"96:k2J/SNi/FLQVTLKCGWz5ln59Jy0jRdoMVZTdI5:k2pV2RKCxDnxyTMVZT0","tlshash":"d9d1975fdac5101e60d385b7e8d4ea4c8916aac3de234bdbb54f7915cf8038719a361c","first_seen":"2023-03-10T04:10:06Z","last_seen":"2026-06-08T08:27:31.411202Z","times_seen":4413,"resource_available":true,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/assets/img/currencies/bch.svg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:16.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /assets/img/currencies/bch.svg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 11 Feb 2026 11:55:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LAtHnAwuQPjPh2t%2B3LyGLGQOEHJ7OyinCI6oPfpMkmKHt5wC3dfE39bhFfK%2FoSRHb4szdLMY7NUXG9VtSLmPHwFMwwF7HjzqU93ptD7wduGexgw3uLxhTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a802a89bbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6609,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5395)","md5":"307dca9c775906b8de45869cabe98fcd","sha1":"2b80c3a2fd4a235b2cc9f89315a554d0721c0dd1","sha256":"8437bd0ef46a19c9a7c294c53e0429b40e76ebbd5fe9fd73a9025752495ddb1c","sha512":"80c03f7add3a33a5df7b1f1665253283550dac484d26339ecd85672fb506dce44bd0bf96275d5c41a2e7369c3b604de377b7f5985d7d0d76c7ac663d60a67a1c","ssdeep":"96:k2J/SNi/FLQVTLKCGWz5ln59Jy0jRdoMVZTdI5:k2pV2RKCxDnxyTMVZT0","tlshash":"d9d1975fdac5101e60d385b7e8d4ea4c8916aac3de234bdbb54f7915cf8038719a361c","first_seen":"2023-03-10T04:10:06Z","last_seen":"2026-06-08T08:27:31.411202Z","times_seen":4413,"resource_available":true,"data":null}},"time_used":1313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:16.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://investment.retconllc.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:17 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"696dff7f-7b0\"\r\nexpires: Mon, 19 Jan 2026 10:02:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwH3LQAAAAwBuUwKCQH3AQAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb54123471f2363256e8c6989da0600\r\nx-77-cache: HIT\r\nx-77-age: 45\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f3d4385bf1f53862c2dc167f484da76","sha1":"d8e9223208068d2ae39a78ec3081efbd7c77b0db","sha256":"04e59729f1fee45b1a187e06a173a6a56c8652ce93fa6e08f7393f99ca2e60c4","sha512":"f34befc3262a83623a0067045ae26514e73ea58736ac4fc008b5a331544b3190dbeb2eaaf3a12913efcd6eeedfd80497ce1c0f58c0ba360dcffbf240849642d9","ssdeep":"","tlshash":"fd415783c4f80d531b9c622bb89449114d50c3c7e88a3d5d36ad8a7f2f4ceb910e6b6d","first_seen":"2026-01-19T10:30:28.095864Z","last_seen":"2026-02-17T07:12:59.724571Z","times_seen":1000,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":63,"dns":31,"connect":12,"send":0,"wait":9,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/sass/app25712571.css?id=81362d6d487490c8ac01","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/sass/app25712571.css?id=81362d6d487490c8ac01 HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:44 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vcOIlK42spTxE8sxKZLIiPg8%2BPqmksZLxLRoyVyyA%2FHudXXeJhTy89m3xgqZyLwlJ4eJIkKQ%2FWPaFHECBXeuu6AhHuO2euni4%2Fx%2Fza0ks%2FXlhSA%2BrBr%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7fcfce5bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65175,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65175), with no line terminators","md5":"dabbcce2aa88df8c5b2ba205939ec250","sha1":"7de53aca5fdff5b1b9273cd80056a8f3338e64a8","sha256":"c940e39203e951c58c2ecc4792d1c3544e21a69b4f70078dfba809a013eb7cbf","sha512":"54bef3cb4c638bf5aee7300625869f6f6b0ae018901610f6da381be15f8653cd58081d05eb857f7e7d5473392544d820ef410d04864e8443a49bdce7a07c1e5f","ssdeep":"1536:oR7Y11a6+cZvm6m0NWbe2xE2E5UiZ1BK+:j7","tlshash":"22532f106e633d74f8bf812db4966a4fbb758053c21f49bda862d11dcbf9082336969c","first_seen":"2026-02-11T09:17:52.667436Z","last_seen":"2026-02-11T11:55:38.240527Z","times_seen":2,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/logo_dark.png","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/logo_dark.png HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 48946\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ys%2FzS0UQt2iNFzpKcPEnxT%2BPBOGcnFW5FVY6R7N8qJlMEwpsuLbuIGZtQJU6sAC75sZwoizbJk4NPgk69z3ZyJcAuw5QHxf0ti7TBxheaTfjrI%2FoXcsXpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc3a7fcfce8bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48946,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 742 x 198, 8-bit/color RGBA, non-interlaced","md5":"e24c8ee19623c5d0dc352b4bacf0bf82","sha1":"ddb36da35df543f4da7a8bc71db5c83163ff6925","sha256":"04a6e7f427c5f57826409aca184eaae55d553b93d3cc7d3afc4c49697ce0adfa","sha512":"aa43a26ea28c372a44b6c93e13ca9878fd92e990ebb35df56b49ef7e9b73f751aadf6d0e3b74ea9677be89adb17c22369f7edaa301d0da62171d1fd12bc9bddc","ssdeep":"768:dz/i2eoucm58eTUSZD86NdeMKlHS2wtkHmpXM+SOcVKFDO97swI9:dz6zUABQMKoNWHmpM+6TswI9","tlshash":"d323f10860bb8eb4759375157cd6005342d35be18a93b3acaae6b927f4b0fe8d056cf0","first_seen":"2026-02-11T09:17:52.681167Z","last_seen":"2026-02-11T11:55:38.241071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/chart-bg.svg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/chart-bg.svg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/assets/sass/app25712571.css?id=81362d6d487490c8ac01\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:16 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUPF90A9K9ny5M2HdeI72m20%2Fx0kiQqRaQoEC9aFcYnpOxBtCPVN6ehvZlGdWSK6uirGeZCZtWY%2B136m1ATGYpbWrCgcC2O819u%2FSQiPqmzipeDghiowgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a80048c8bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6108,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b14120397b31f6878e71ffe1e4f6e718","sha1":"9c2eaa40e3e220e2d208a95736622d22a2eeb4a6","sha256":"d7413f25bfebe359b1c3e2858d7c021ac13649c71ffcae27c53134cd0e83c1c9","sha512":"06a99454f5111ea3708d9a4e5372af50e48c0d3f3319ee3cb055c0fe02df8b222550fbc237ac4d3ea044b927f91b9537a9821717cd6d5c5f20e98cd4f074af05","ssdeep":"96:ahMYKBzeWapwcYxWR8SCkIxbUGZPkgiU8rNiIZAKbsH3XyY0DqWccFVDU00wZTm:aSbzeWaeJQRExxbtZPk3U8h63XyY0Fh0","tlshash":"5ac131cd336402e047c85f566f1a65f85c374eb789048448d8ac5f2b1ed3a6f9eeaac1","first_seen":"2026-02-11T09:17:52.680333Z","last_seen":"2026-05-13T16:05:47.718768Z","times_seen":10,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible5615.js?ts=1770796800","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:16.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible5615.js?ts=1770796800 HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:17 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIVkbIoA%2FKS4frurveyimHIu%2Fcq5LZ%2FFX0n%2Bx82ooRKZtNrcZQmnKRse3LpeiiKwmqxrcgcHXM2DvFUtiLWMPNkzjjWbXxBf2NLcApuqW2WMkwBHjYuQQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a8059aa5bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34682,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34682), with no line terminators","md5":"757ecd80c2f8855885ad033a489ef10c","sha1":"b37bae549a5079b1416f26edc45b2dd66ccc3231","sha256":"cbaef0865225a9921efdd5b729ffaf87b081d1fa3ddfa6e09d6dd457b9a3b07f","sha512":"b9a6203fe5126549dcb55f3034bdf9f8a324413447ae6ffd8677f74b8ff93b2ffe4d3bf4a14ed92316ed0d761a0f4ec471eff7e5a9d445d441253a92c7cb4ba6","ssdeep":"768:VAPlYWeqSgjk4pyjHCgJaWu0aQEOJgNKleN8urbu:Vlj/NjH9J5uFQEO7Ubu","tlshash":"9ef2758a71deb16612777975016b704ba1afedc8741c1a10d230d8b8bb7471ee0aedac","first_seen":"2026-02-11T09:17:52.67373Z","last_seen":"2026-02-11T11:55:38.242705Z","times_seen":2,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":465,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-B-OLLYpG.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:17.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-B-OLLYpG.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://investment.retconllc.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:17 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"696dff7f-9183\"\r\nexpires: Tue, 19 Jan 2027 09:57:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwHXA24eAAwBuUwKCQH3DwAAAAwBJRPCLgG3AAAAAA\r\nx-77-nzt-ray: fdb54123471f2363256e8c69309f4803\r\nx-77-cache: HIT\r\nx-77-age: 1994243\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37251,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37250)","md5":"2052cfca49186988b2bd90a4a812a795","sha1":"8c31463bec24745479731221d847ec0a6d2b8337","sha256":"f4257f5a00c3ca86166edd00fb26cd15e4051aaf442a8660c9f33570da08b8d0","sha512":"39072c2ed68b9170d5ce9f6449fc2a456b9cebb79749724e65b55d111fd9482fd5e07cb0dee42e9a4810f39fd4bd2c7bbdac9c786afc1be6b259429853c49770","ssdeep":"768:E8C94TcCWYtomXFDxrnSJPHs24vq+ggFgZ:E8W4TcCWYtdXjuPF4t2Z","tlshash":"b1f2975daad5093cec33c166e3f8e58c9229f5d1df321a9af6433a048ac27bf1987514","first_seen":"2026-01-19T10:30:28.096588Z","last_seen":"2026-02-17T07:12:59.719508Z","times_seen":1000,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/cdn-cgi/challenge-platform/h/g/scripts/pica.js","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:17.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/pica.js HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 11 Feb 2026 11:55:17 GMT\r\ncontent-type: application/json\r\ncf-chl-out: ahbbmyDxijsDgqEaD/axbg==$1Jtbm+2w36FdCn5F66GseA==\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cc3a808dddfbc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T15:34:22.145557Z","times_seen":16243359,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"retconllc.top/","fqdn":"retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T11:55:13.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 11 Feb 2026 11:55:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://investment.retconllc.top/en\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7d4NAXlCPhvo14Qy%2B79bnHXAYNuNYm%2BSwAbiYLG1G9QUUtLkJldRpMnu2xPAxnG53w4i42dr4Ynq6r5YSBBYUozXTAyYrz1qzMDPOI%3D\"}]}\r\ncf-ray: 9cc3a7f04dcf958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65604,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T15:34:22.145557Z","times_seen":16243359,"resource_available":true,"data":null}},"time_used":1187,"timings":{"blocked":98,"dns":55,"connect":8,"send":0,"wait":991,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/charts.svg","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/charts.svg HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFnohNt2cFCPiRaggiYaOshMBPO7FdnbuFOkylokPlxi8FNfzi%2BhOHreiWPIXoeSq0X4OydazbypWouoBLemqXcji%2F%2FwfV6RC76m%2BiDNjYlFG%2Fdtzt6mrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cc3a7fcfd06bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d9ec534012df4b8503dc7caf0a347b2","sha1":"84fc9c191703ac7ff83410d531f38ed4850fc8d9","sha256":"d6ad275a44759cd5bc30211da7e3418902488b5e6c9128bbab3a6b50d0e4639b","sha512":"9e48220bb4308775ffc599408ef05270b1cc352453ef4886375b9efbf945811acab6f670ec73990681691befa3dba07de1d9bb822cb2c853f5c1bc0c4e5c2465","ssdeep":"","tlshash":"1a311cf9127649809454d3096e809688232ea0e53943e488f38ff81a4d54aef713f950","first_seen":"2026-02-11T09:17:52.668367Z","last_seen":"2026-05-13T16:05:47.719671Z","times_seen":10,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"investment.retconllc.top/en/assets/img/coinbasenew.png","fqdn":"investment.retconllc.top","domain":"retconllc.top","tld":"top"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"retconllc.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 01:33:55 GMT","end":"Sat, 04 Apr 2026 02:31:06 GMT"},"fingerprint":{"sha1":"1E:C0:1D:96:80:A3:27:15:AB:9B:D0:68:D9:5A:B0:8C:E7:44:98:3F","sha256":"1A:E3:EE:A6:EE:14:0D:F6:E8:08:49:E1:A1:9D:96:64:68:14:65:AF:DF:9C:70:1A:6A:E2:0D:D5:D5:99:4D:49"}}},"request":{"raw":"GET /en/assets/img/coinbasenew.png HTTP/1.1\r\nHost: investment.retconllc.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 60353\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Jul 2024 12:56:42 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0bw2UJBsv7hn8HRgXIThOvL1GW8M22hMqNBFAHritFkTyDNSAadKuUHIUbE8R9Y71bEkg%2F1nXt53DyN2MVEwXcsG%2B6ey1YHHO%2BOUIZFGH%2FL%2F5PD6M%2BfKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc3a7fd0d15bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 458, 8-bit/color RGBA, non-interlaced","md5":"723d6c153d5b341165862a29a03a0031","sha1":"3d41f9c53ebd1f584b71f99c8291685763ae2b61","sha256":"01b9b4fba6ff692b9b793f73edc0593a70b760a324f15835a283ae85f79ae495","sha512":"01b5a77e47e4c6ba3f295658d83a6d06cec0dadd160f6bbc9ca504954cc27bc92c7b89a378d8924223ce18a2915caf0866b2e5b7ef4db8f7e97c92d3fe6924c2","ssdeep":"1536:9U3frvrSMIC8molWweyS9a7be9D5LNaXjY8oQGV:yjv2MIIooyS9a7b4l8kDV","tlshash":"094301fc6029e8218e39dc2dcc3352f746686a79d044aee3ed0ab567dc6c534326d4ca","first_seen":"2023-05-31T18:38:54Z","last_seen":"2026-05-30T15:04:07.418664Z","times_seen":11,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"investment.retconllc.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://investment.retconllc.top/en/","date":"2026-02-11T11:55:15.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://investment.retconllc.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 11:55:15 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Wed, 11 Feb 2026 11:58:50 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJGwH3FgAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: fdb54123b609153d236e8c69494a3e3a\r\nx-77-cache: HIT\r\nx-77-age: 22\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-04-19T18:18:50.439045Z","times_seen":4264,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":49,"dns":21,"connect":7,"send":0,"wait":8,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}