{"report_id":"082b421a-82e5-46a5-a27d-7f65ae412f9d","version":6,"status":"done","tags":[],"date":"2026-03-02T13:09:19Z","url":{"schema":"http","addr":"roleoghodlclm.site","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"104.21.76.153","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"roleoghodlclm.site/","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"title":"Restore dApp","dom":{"size":60862,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3807)","md5":"0c87930d78fc723e42bfc6fd7beec12f","sha1":"54fc09437fa8df6474a2d14212137918bc335dda","sha256":"8215417ecc0d7badaa1623ab932c6143ea2d9336f23cae755454b0f87970307f","sha512":"ae2868bffa3dbf3cd9daa76fc7eabaa5eeeb12b79b00b135d42101f1aef0a441887f1ffaf4add87fa4e7907591bac1abd2faacc7127a643fe8ae4fee202d9c2e","ssdeep":"768:X5euWmHqP62L3IFKFQk4Lezkgd9x+xIDMVI2DD6AFfKmXuIKPCXmCJXYltwJSDVu:X262LYg+k4Ox4hqxMsxq7hvvzoCx","tlshash":"0c536046ed238927391354ef37daae4961a0b0038505fb583efc5181cf89ab74ab7b5c","dom_hash":"domhash0e78e410a0e325469118493f3fdfa8b7","first_seen":"2026-03-02T13:09:26.086495Z","last_seen":"2026-04-21T03:05:40.867894Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"roleoghodlclm.site","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"104.21.76.153","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T13:09:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"roleoghodlclm.site","ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-26","domain_rank":0,"first_seen":"2026-03-02T13:09:21.250262Z","last_seen":"2026-03-02T13:09:21.250262Z","alert_count":14,"request_count":14,"received_data":3011748,"sent_data":6846,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"roleoghodlclm.site/","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-15T18:29:27.711588Z","times_seen":3242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/index_1.html","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-15T18:29:27.711588Z","times_seen":3242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"roleoghodlclm.site/09d0baa1e327765d4a52f43038d831469dc6b4bf.png","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roleoghodlclm.site/","date":"2026-03-02T13:08:51.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /09d0baa1e327765d4a52f43038d831469dc6b4bf.png HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 93775\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\netag: \"694ee4ca-16e4f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3Coe%2BzjXEC7TUyEgVTkLzGHL%2FlDX2qmnTFJuwzhunH%2FBgmsS6kr8MpPLzC276JdT3eT3qd%2FPgScqvS2%2FlJrSzU5jmPRO1b%2FdgPQIkTeJEQUbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1ec1a2c767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 990 x 893, 8-bit colormap, non-interlaced","md5":"ee163ff75911390c0c691059a040293f","sha1":"09d0baa1e327765d4a52f43038d831469dc6b4bf","sha256":"eb3457aa392adaadcb332b14a4c4f9c967477df08c97408dd66f803cd08fe7ff","sha512":"956d4d9232028896af833fa38d081063ac09413201e3656950c253fac1a71e0a591b60b6cd59bcb7ca2ac5862cf4ab0f2db9f87c3f2ebcccedb101beebe036bc","ssdeep":"1536:BA0JMXj+xy2KODZpklXR9MJIzU3HQr8XfPsyyYJSwOSop0wBWqn6FsdjtIuOKX85:BA6MiA2hDLkljyHQrI3LCGqnrdRIuK5","tlshash":"7c9312efe95efb0bcb0b7f366e1fb1d7bf5a4892da840f865160701a6471825140e1b4","first_seen":"2026-03-02T13:09:26.089265Z","last_seen":"2026-04-21T03:05:40.884307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/77571f82e8117ef082659422aa8a4bea9b9f5992.png","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roleoghodlclm.site/","date":"2026-03-02T13:08:51.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /77571f82e8117ef082659422aa8a4bea9b9f5992.png HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 43953\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\netag: \"694ee4ca-abb1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dEpwuFWqh9gTKFdCJOhrN%2F9S1GdCXpLAE2wBfJo2Sdo6tac3yWVNuRQDys6%2F2MnRMVACFEexhrhscgcJcF9OKLH1aOLVgV1atJRMjVLgHFtT2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1ec1a2d767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 625 x 661, 8-bit colormap, non-interlaced","md5":"ac4987641e33cbf5d70b514bc3e2d66c","sha1":"77571f82e8117ef082659422aa8a4bea9b9f5992","sha256":"15e1ad690cf93caaa83d6b29e95a03662fbac7632c2f49aac7a00692f6a109eb","sha512":"a1390cc6aa1d87c13acb0bc18a96bd81e384d968c9f7c9c57ec4d8dd5249e12394a47a19c4751eb0ed7d3071578d310ba65ec4a7ca2a592fd5aadeb0a26c7f71","ssdeep":"768:2jzwDYKcpATi5q8Av04oyKuwEupx824y/0et6JgWzX38g1PX+WNmshu1KhTMV+2A:UziYtyTMdAv/oylwbx82B/0UshzX3Z1z","tlshash":"b413f1f4cfa871bfa8de00fab62d3a98a1c2c5d7416301609075d551298fb8178fcee5","first_seen":"2026-03-02T13:09:26.091259Z","last_seen":"2026-04-21T03:05:40.89097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/favicon.ico","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roleoghodlclm.site/","date":"2026-03-02T13:08:51.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T11:31:27.481734Z","times_seen":17917872,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e.ico","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roleoghodlclm.site/","date":"2026-03-02T13:08:51.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e.ico HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"694ee4ca-654b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KA8bTek69Xyp1WvxZK0vr0r7m%2FKnbepW2rou5X2ynwAriU%2BOxlL%2FSsUYBJsS%2FsUhMNxHLjqqG6b36XDw2qlXe8wM%2Fc%2BKm9ZsSgVNaloYxPfEhw%3D%3D\"}]}\r\ncf-ray: 9d60a1ee1aa1767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-16T10:26:41.814716Z","times_seen":40194,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/index_1.html","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://roleoghodlclm.site/index_1.html","date":"2026-03-02T13:08:51.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRn4tIyoEpwM%2BD97aRkH0fbe3NUmhCxuHBR%2BE9LG63g0ch93VY3sCIBtJDpUk%2Bksz4dV6K3W0N4%2FXkGdc0bFEP5bw0h3irIjBPKC6CUW4rbttQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1eedac8767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":812031,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1988)","md5":"c64c99f8e6e85d65c028c1fb965b5831","sha1":"5fd23f8ae199b5a78af75c3bd0b6a4b51945134f","sha256":"a483f8187286e232c077855f68ad80c64e35e35ff897fef84009de987eb97678","sha512":"9027aa2545d915740a4c4e796f04da032313f247fd5c404111ee36370d250f603c08a35100dc61476b96725514d4895ac159d17c7b536c06582441a3b534917a","ssdeep":"1536:r262LYg+k4Ox4hg0YdtLlJn5A88oEw+dBzEOiwIpcJn5A88oEw+dBzEOiwIpNdnM:SCg+k4OxCQLDWZGL","tlshash":"5d051e4e45b380213c6764f963dda259b272b083ea1defc63edd21508f856a1adf3364","first_seen":"2026-03-02T13:09:26.099113Z","last_seen":"2026-04-21T03:05:40.889367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/09d0baa1e327765d4a52f43038d831469dc6b4bf.png","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://roleoghodlclm.site/index_1.html","date":"2026-03-02T13:08:51.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /09d0baa1e327765d4a52f43038d831469dc6b4bf.png HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 93775\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\netag: \"694ee4ca-16e4f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sFnfak1ioh1rl%2FdS4MEIdURM%2Be7KN9DUlB%2Ft4cZSMk3Dp%2FSEIfZgHN6O0OgcQZG139nBEs8vboSfDzlZSy5gDZxi%2FuY80UHiBUlMLlT5slsghg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1eecac3767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 990 x 893, 8-bit colormap, non-interlaced","md5":"ee163ff75911390c0c691059a040293f","sha1":"09d0baa1e327765d4a52f43038d831469dc6b4bf","sha256":"eb3457aa392adaadcb332b14a4c4f9c967477df08c97408dd66f803cd08fe7ff","sha512":"956d4d9232028896af833fa38d081063ac09413201e3656950c253fac1a71e0a591b60b6cd59bcb7ca2ac5862cf4ab0f2db9f87c3f2ebcccedb101beebe036bc","ssdeep":"1536:BA0JMXj+xy2KODZpklXR9MJIzU3HQr8XfPsyyYJSwOSop0wBWqn6FsdjtIuOKX85:BA6MiA2hDLkljyHQrI3LCGqnrdRIuK5","tlshash":"7c9312efe95efb0bcb0b7f366e1fb1d7bf5a4892da840f865160701a6471825140e1b4","first_seen":"2026-03-02T13:09:26.089265Z","last_seen":"2026-04-21T03:05:40.884307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/77571f82e8117ef082659422aa8a4bea9b9f5992.png","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://roleoghodlclm.site/index_1.html","date":"2026-03-02T13:08:51.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /77571f82e8117ef082659422aa8a4bea9b9f5992.png HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 43953\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\netag: \"694ee4ca-abb1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bq718z1zxGmLC2f5Rv1QKqJ81bk5DrT3J%2FkUM2aM3foP9hTdsFkxcDs1pYSrbR9DQ2rM2zuvFRoW%2FJN%2FOMiPglWtU5Pxl3w7T74P6WxiC6yaFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1f09b4a767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 625 x 661, 8-bit colormap, non-interlaced","md5":"ac4987641e33cbf5d70b514bc3e2d66c","sha1":"77571f82e8117ef082659422aa8a4bea9b9f5992","sha256":"15e1ad690cf93caaa83d6b29e95a03662fbac7632c2f49aac7a00692f6a109eb","sha512":"a1390cc6aa1d87c13acb0bc18a96bd81e384d968c9f7c9c57ec4d8dd5249e12394a47a19c4751eb0ed7d3071578d310ba65ec4a7ca2a592fd5aadeb0a26c7f71","ssdeep":"768:2jzwDYKcpATi5q8Av04oyKuwEupx824y/0et6JgWzX38g1PX+WNmshu1KhTMV+2A:UziYtyTMdAv/oylwbx82B/0UshzX3Z1z","tlshash":"b413f1f4cfa871bfa8de00fab62d3a98a1c2c5d7416301609075d551298fb8178fcee5","first_seen":"2026-03-02T13:09:26.091259Z","last_seen":"2026-04-21T03:05:40.89097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/d8d26fcbb333d742a344a2875604a33bf43bedc1.png","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roleoghodlclm.site/","date":"2026-03-02T13:08:51.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /d8d26fcbb333d742a344a2875604a33bf43bedc1.png HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 41594\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\netag: \"694ee4ca-a27a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQ7BxpS2R7WJ3yic1zK8vUbQp7iqHXtyWcQV4wRXP4%2BMVE2kYxBTSw2kHr8NMgroXefYF7lyu1YG0NlvtGF5PxOeIUDJ14u6OxMw3nRNKFv2hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1ec1a2b767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 625, 8-bit colormap, non-interlaced","md5":"27d4b15c30bbd19afa2f75bb2d42f178","sha1":"d8d26fcbb333d742a344a2875604a33bf43bedc1","sha256":"c8d4500add4a5b90f84a70d8393bbef14ddc792e8b58b01422b5fdba9f3f03df","sha512":"cb0d5bccf0cb46053ec6d58ad12055e70b7f2491413012c84424fe2f28498d4f87e564442bceda7993d4ff252c0470e65ea5d71a7944496a5718e356f5baced2","ssdeep":"384:dCb681ueANwloSZ7Igzai9xj4He40HnjwWtUk+EfnNVn1q8tr6jJeKzcmBXLNR1w:v++N5wL2HI1UonnIu6x4IP+nZKqQL1e","tlshash":"af13f1c1cdfb776841f6917a4a7fa1d9da0c03f13ebe031e856692060745c8ea39248f","first_seen":"2026-03-02T13:09:26.100764Z","last_seen":"2026-04-21T03:05:40.887578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/index_1.html","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://roleoghodlclm.site/","date":"2026-03-02T13:08:51.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=We7b3V23nM7FBjbz9N9LVByAPAro9cbvXXZrtHkgViB0FMZYGW9MmSwSqMX0Esh6PCZNd7b%2FSsmhZQYLE%2FeakKa92LDPCioMu7rVE2j56715mQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1ecaa4f767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":812031,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1988)","md5":"c64c99f8e6e85d65c028c1fb965b5831","sha1":"5fd23f8ae199b5a78af75c3bd0b6a4b51945134f","sha256":"a483f8187286e232c077855f68ad80c64e35e35ff897fef84009de987eb97678","sha512":"9027aa2545d915740a4c4e796f04da032313f247fd5c404111ee36370d250f603c08a35100dc61476b96725514d4895ac159d17c7b536c06582441a3b534917a","ssdeep":"1536:r262LYg+k4Ox4hg0YdtLlJn5A88oEw+dBzEOiwIpcJn5A88oEw+dBzEOiwIpNdnM:SCg+k4OxCQLDWZGL","tlshash":"5d051e4e45b380213c6764f963dda259b272b083ea1defc63edd21508f856a1adf3364","first_seen":"2026-03-02T13:09:26.099113Z","last_seen":"2026-04-21T03:05:40.889367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/d8d26fcbb333d742a344a2875604a33bf43bedc1.png","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://roleoghodlclm.site/index_1.html","date":"2026-03-02T13:08:51.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /d8d26fcbb333d742a344a2875604a33bf43bedc1.png HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 41594\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\netag: \"694ee4ca-a27a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5p4SYdIqvfAostSGcRvSmy8i8dIcVvgTxE4Bc1ioEJ%2B9ApyarL%2F4jOgArz87V2LfmuGXCEwxg2Mvsk6klioB6PmopYi0BQw6v%2BxpJ6zGyvQnKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1eecac2767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 625, 8-bit colormap, non-interlaced","md5":"27d4b15c30bbd19afa2f75bb2d42f178","sha1":"d8d26fcbb333d742a344a2875604a33bf43bedc1","sha256":"c8d4500add4a5b90f84a70d8393bbef14ddc792e8b58b01422b5fdba9f3f03df","sha512":"cb0d5bccf0cb46053ec6d58ad12055e70b7f2491413012c84424fe2f28498d4f87e564442bceda7993d4ff252c0470e65ea5d71a7944496a5718e356f5baced2","ssdeep":"384:dCb681ueANwloSZ7Igzai9xj4He40HnjwWtUk+EfnNVn1q8tr6jJeKzcmBXLNR1w:v++N5wL2HI1UonnIu6x4IP+nZKqQL1e","tlshash":"af13f1c1cdfb776841f6917a4a7fa1d9da0c03f13ebe031e856692060745c8ea39248f","first_seen":"2026-03-02T13:09:26.100764Z","last_seen":"2026-04-21T03:05:40.887578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/77571f82e8117ef082659422aa8a4bea9b9f5992.png","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://roleoghodlclm.site/index_1.html","date":"2026-03-02T13:08:51.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /77571f82e8117ef082659422aa8a4bea9b9f5992.png HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 43953\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\netag: \"694ee4ca-abb1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ks0JwuUldPJYpJQiERXnHWAi5SvlIb8PTpVEtoTa3Dgp3ENhQbDlWrd7CltMdKyDfg7URWKE0TrBHq8Y%2Beq6QV1%2F5YEC6wAxoD1%2B4ytrxMPQmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1eecac5767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 625 x 661, 8-bit colormap, non-interlaced","md5":"ac4987641e33cbf5d70b514bc3e2d66c","sha1":"77571f82e8117ef082659422aa8a4bea9b9f5992","sha256":"15e1ad690cf93caaa83d6b29e95a03662fbac7632c2f49aac7a00692f6a109eb","sha512":"a1390cc6aa1d87c13acb0bc18a96bd81e384d968c9f7c9c57ec4d8dd5249e12394a47a19c4751eb0ed7d3071578d310ba65ec4a7ca2a592fd5aadeb0a26c7f71","ssdeep":"768:2jzwDYKcpATi5q8Av04oyKuwEupx824y/0et6JgWzX38g1PX+WNmshu1KhTMV+2A:UziYtyTMdAv/oylwbx82B/0UshzX3Z1z","tlshash":"b413f1f4cfa871bfa8de00fab62d3a98a1c2c5d7416301609075d551298fb8178fcee5","first_seen":"2026-03-02T13:09:26.091259Z","last_seen":"2026-04-21T03:05:40.89097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/d8d26fcbb333d742a344a2875604a33bf43bedc1.png","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://roleoghodlclm.site/index_1.html","date":"2026-03-02T13:08:51.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /d8d26fcbb333d742a344a2875604a33bf43bedc1.png HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 41594\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\netag: \"694ee4ca-a27a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CWn0TwsEFs3Pfy0QJB2EOL6LWX30sgrYTnpGhKZPvppxzZgKrc2t8veBzxSiU5Ff4sM7Lc9A7I6pUK%2Fc1YDfNstKqqwR8XA%2B1Ju47w1ld0MiPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1f09b46767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 589 x 625, 8-bit colormap, non-interlaced","md5":"27d4b15c30bbd19afa2f75bb2d42f178","sha1":"d8d26fcbb333d742a344a2875604a33bf43bedc1","sha256":"c8d4500add4a5b90f84a70d8393bbef14ddc792e8b58b01422b5fdba9f3f03df","sha512":"cb0d5bccf0cb46053ec6d58ad12055e70b7f2491413012c84424fe2f28498d4f87e564442bceda7993d4ff252c0470e65ea5d71a7944496a5718e356f5baced2","ssdeep":"384:dCb681ueANwloSZ7Igzai9xj4He40HnjwWtUk+EfnNVn1q8tr6jJeKzcmBXLNR1w:v++N5wL2HI1UonnIu6x4IP+nZKqQL1e","tlshash":"af13f1c1cdfb776841f6917a4a7fa1d9da0c03f13ebe031e856692060745c8ea39248f","first_seen":"2026-03-02T13:09:26.100764Z","last_seen":"2026-04-21T03:05:40.887578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/09d0baa1e327765d4a52f43038d831469dc6b4bf.png","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://roleoghodlclm.site/index_1.html","date":"2026-03-02T13:08:51.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET /09d0baa1e327765d4a52f43038d831469dc6b4bf.png HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://roleoghodlclm.site/index_1.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 93775\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\netag: \"694ee4ca-16e4f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DIivejDiOpeh1SPngU7qOZ3JC%2FyK%2FC4XIycuPkeFztARLA%2BoWcLtaTrORcYBz5GgH8SqGKHos%2BF6yCyM%2FEfe6TTedHIwhSvpAmGPFGBQHrcWRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d60a1f09b49767a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 990 x 893, 8-bit colormap, non-interlaced","md5":"ee163ff75911390c0c691059a040293f","sha1":"09d0baa1e327765d4a52f43038d831469dc6b4bf","sha256":"eb3457aa392adaadcb332b14a4c4f9c967477df08c97408dd66f803cd08fe7ff","sha512":"956d4d9232028896af833fa38d081063ac09413201e3656950c253fac1a71e0a591b60b6cd59bcb7ca2ac5862cf4ab0f2db9f87c3f2ebcccedb101beebe036bc","ssdeep":"1536:BA0JMXj+xy2KODZpklXR9MJIzU3HQr8XfPsyyYJSwOSop0wBWqn6FsdjtIuOKX85:BA6MiA2hDLkljyHQrI3LCGqnrdRIuK5","tlshash":"7c9312efe95efb0bcb0b7f366e1fb1d7bf5a4892da840f865160701a6471825140e1b4","first_seen":"2026-03-02T13:09:26.089265Z","last_seen":"2026-04-21T03:05:40.884307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roleoghodlclm.site/","fqdn":"roleoghodlclm.site","domain":"roleoghodlclm.site","tld":"site"},"ip":{"addr":"172.67.196.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T13:08:50.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roleoghodlclm.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 19:14:35 GMT","end":"Sun, 24 May 2026 20:12:07 GMT"},"fingerprint":{"sha1":"FA:0B:88:33:48:CD:B4:B7:DD:8F:23:BE:65:92:CE:C9:EA:79:D7:DB","sha256":"28:E6:3C:DC:78:DA:D9:BD:5C:9B:CD:E3:3A:4F:43:FA:96:69:97:C9:F9:2D:C0:06:CB:9A:A0:5F:BC:4B:0A:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roleoghodlclm.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 13:08:51 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 26 Dec 2025 19:40:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aX7pEzDgB1gDnTIAi%2FBdSaUbPDaiKtv6Rg6s6fhJLeTlLcdQi%2FyIRXGSg0tBS2LuFy%2BbMrjcyE3rawusHOic3IW6FEU9BVMGPd7NocXXFA9lNg%3D%3D\"}]}\r\nage: 6607\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d60a1eadcf1562f-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":812031,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1988)","md5":"c64c99f8e6e85d65c028c1fb965b5831","sha1":"5fd23f8ae199b5a78af75c3bd0b6a4b51945134f","sha256":"a483f8187286e232c077855f68ad80c64e35e35ff897fef84009de987eb97678","sha512":"9027aa2545d915740a4c4e796f04da032313f247fd5c404111ee36370d250f603c08a35100dc61476b96725514d4895ac159d17c7b536c06582441a3b534917a","ssdeep":"1536:r262LYg+k4Ox4hg0YdtLlJn5A88oEw+dBzEOiwIpcJn5A88oEw+dBzEOiwIpNdnM:SCg+k4OxCQLDWZGL","tlshash":"5d051e4e45b380213c6764f963dda259b272b083ea1defc63edd21508f856a1adf3364","first_seen":"2026-03-02T13:09:26.099113Z","last_seen":"2026-04-21T03:05:40.889367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":70,"dns":36,"connect":8,"send":0,"wait":28,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"roleoghodlclm.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}