{"report_id":"384ce321-f98e-4193-b165-a64a071e6839","version":6,"status":"done","tags":[],"date":"2026-05-09T08:24:44Z","url":{"schema":"https","addr":"randenta-ro.live/","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"104.21.64.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"randenta-ro.live/","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"title":"Randență | Platformă oficială pentru tranzacționare cu inteligență artificială","dom":{"size":47466,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25273)","md5":"e11efdea575b5f7fd30063ce9ebf2be1","sha1":"7b0f7d7e38230ba4d55ae5d7ac55515b9fb21d04","sha256":"5eae1e39366cabac9acae3b6b96b1737df155686c9ff073630b6c61c296fc7e8","sha512":"4f2e81c1a5d00cf66c12a8875c3884be2f71dadc2018940bbfb399bffaf15e0394ec3e423a42993b4fa3b2487e396ad8ecc7bdb37b0abf3c725a6fe72c2f7d33","ssdeep":"768:cA0H/3H19bQ/l1wRUwRWpQqFxcQC8Is3HvBNcMh+LNwcfeIaWSCOdehIFgfEz:cA09RQdbQOcQCQJNcMhkNwcfezLCOIhO","tlshash":"b1234bf2e0f06573418f07ccfa1bab05fdd762bede858e84719d8ad417d6896868e090","dom_hash":"domhash44ad39532ca8466372f344ed1280624e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"randenta-ro.live/","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"104.21.64.82","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-13T08:24:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-09T08:24:17Z","timestamp":1778315057,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":43234,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2026-05-09T08:24:17.784883+0000\",\"flow_id\":1584035196402487,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":43234,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3413,\"start\":\"2026-05-09T08:24:17.752439+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"f.vimeocdn.com","ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":25524,"first_seen":"2014-04-09T18:24:34Z","last_seen":"2026-05-06T15:41:51.158611Z","alert_count":0,"request_count":11,"received_data":6297275,"sent_data":5072,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-05-04T00:24:43.265765Z","alert_count":0,"request_count":1,"received_data":18800,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-03T22:20:33.622142Z","alert_count":0,"request_count":1,"received_data":7013,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"randenta-ro.live","ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-09T07:43:35.421302Z","last_seen":"2026-05-09T07:43:35.421302Z","alert_count":50,"request_count":50,"received_data":596501,"sent_data":57887,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"player.vimeo.com","ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-12-15","domain_rank":132,"first_seen":"2013-09-26T03:16:08Z","last_seen":"2026-05-04T05:13:26.049122Z","alert_count":0,"request_count":11,"received_data":138046,"sent_data":5875,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2026-05-06T16:19:59.044667Z","alert_count":0,"request_count":1,"received_data":932,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-03T22:17:40.953609Z","alert_count":0,"request_count":11,"received_data":366016,"sent_data":5990,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-03T22:36:05.340423Z","alert_count":0,"request_count":4,"received_data":375222,"sent_data":1910,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.vimeocdn.com","ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2010-04-21","domain_rank":24258,"first_seen":"2014-03-27T22:24:57Z","last_seen":"2026-05-04T05:38:51.232462Z","alert_count":0,"request_count":10,"received_data":135408,"sent_data":5206,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-07T08:08:15.908614Z","times_seen":41289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?callback=jQuery311019828374697251827_1778315057090\u0026_=1778315057091","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b274285444171bd139fd6f3488bfb305","sha1":"c590c369a40c9e28bf8a4bae9e883955ce95f06d","sha256":"92f30aebd3410ca192a62685a6f589fda8ad37e2767d0ba06f1b5ffcfc5a1066","sha512":"f8e83b002be447c51fdb687e2096f4c5c82befb2a2486e20b3dc7464d778c66684d92f1757d905867a60a72566dd3fa2aa5520081b0eeb0e0fd2396601c410d7","ssdeep":"","tlshash":"fe017067513c1b76aebe464c840f8e1a22583a1f428265d68fa21f2c14445fb60b136f","size":674,"data":"","first_seen":"2026-05-09T08:24:58.035549Z","last_seen":"2026-05-09T08:24:58.035549Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-07T08:08:15.908614Z","times_seen":41289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"54f3de99e4fc843a7f1a3547430e920e","sha1":"e9049d5ed0a631df017cfad430bdb009bd818a58","sha256":"27154b7cb0e9ad67e545cdcde72e330ef18bf1e28443557862bcce20bca4d175","sha512":"b3b02ebf8843c1c92a776b1ecb496c055004ec2007f27cf4c50bd026113c622c363af9119e525f9001c96148302150d7c174c2b0f31933daa364e160657c05df","ssdeep":"","tlshash":"11c012aa4040b56c154085d7141498a6d66e4007545491e2b539c98e272b7f6820c094","size":184,"data":"","first_seen":"2026-03-11T05:02:54.838755Z","last_seen":"2026-05-09T08:24:58.083703Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-07T08:08:15.908614Z","times_seen":41289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0740d12309dfb731b29275d11664361d","sha1":"d3bbdfebc332934846d6e86c64d26f86e3ed1d15","sha256":"1b0dafa49d7018694f3d2619e015266663ade8d68596ae633922558bff2ec36b","sha512":"b6b1ec00e23c112e3ef9d7931f3bf9d7fd36d01b37a3f261f12c18c19ba6c93e1b99b410bb65374d7ba6b539981c1d252afb59acc2a99ffd1d60282fa35bb388","ssdeep":"6144:dxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/l5lN:dx/85ucTcProN","tlshash":"bf64f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":326736,"data":"","first_seen":"2026-05-08T18:42:11.943066Z","last_seen":"2026-05-12T17:35:05.256088Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/jquery-3.1.1.min.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-27T18:22:55.046755Z","times_seen":144224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4db7c0c831fa2d49c59135df0f5221a","sha1":"e38a701a58f6f479c707ce00f383d5e98b7a456a","sha256":"daeae1028c84e5cc787131c7eccf24c3aa706601d7eada7674d0805f86912743","sha512":"7db01c9fa749c4826e3e4b737449f87479f23a47e4e2d539a295af2090e9cb6fe464eef7fed5774ef1999e97aaf003c9ceac8378326e0ac594c7ebe84e84c045","ssdeep":"","tlshash":"f5c0809a5440b57845d1db5d15246c518541111a9461c01bad0911cf5325bfb9b7dcb4","size":184,"data":"","first_seen":"2026-03-11T05:02:54.849461Z","last_seen":"2026-05-09T08:24:58.08425Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c5900ad9ae7b63666911d3e3354f256","sha1":"db336808226ea7113a1dfc79a02aa53f7672818a","sha256":"4e303c37ac20c91f9edfeeadc0853e81951b5e47c51a4c19e2fb7f8e7636308f","sha512":"161c90535d2e39d107cb9ceeab274390e6d0b6607b11c7b5b58282ea460576728f7652d8586d427b36c4bcd43036695da397bbf3f13d7b79a547d4defe45ce4f","ssdeep":"192:/S6KXU/c/cGUBnajiHhej0xt1HKLNwcfM/dQ4owXmIQRc:6tXUgmHhejstQLNwcfMrowXmRc","tlshash":"6632c733bdc8ac259fd4258d0e896e024599616facdcdba8e79a4f1c11fb0db370b458","size":11788,"data":"","first_seen":"2026-05-09T08:24:58.084849Z","last_seen":"2026-05-09T08:24:58.084849Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3cd002d7a8bb1f08dc8f9a3087a5038","sha1":"c9cb47885ed728ccfc879ff1ffbb9ff4e76c433c","sha256":"db6784366ffabeec756ece67d46576ff6e7b594af5f4154696dd59436ed72751","sha512":"055cd95523ecf58ed71bed96b849c42143a5723120cf74f213416d1d4e390b80f63b579b5b613968588fddb5dac554882ec08fb0ff1c7fd290ad1827d849d202","ssdeep":"12288:EdQ3D1znp2j/IjzF6H0n+HTpfxBVewAZpR+o7EzGJZEyVBIDO7tmMKOAis1PYb+j:/rp2sMH0n+HTpfog1stimGgo","tlshash":"4c156bc671d6f43181a645a5a47b1203b33e169cb80d878cf03dadcd2a9d945a2bbff4","size":884257,"data":"","first_seen":"2026-05-08T18:42:11.933835Z","last_seen":"2026-05-12T17:35:05.276409Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/sliders.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67dd1e2333e167a77697aca034eb3df6","sha1":"306594dfb8433db362be7a689933e0eeca162f48","sha256":"eede0d06ab82379d31524d842f64e1ac779e3b3e5b0b57c026290af86649b706","sha512":"7fc94d65c296988603ad1d10539e40a52db78e8ddea794bc22ecd118084675d2fb7fb3ee16aeac57a10443e95af4db7a2a55ce5b0bbe1d2b425163bcfb553f07","ssdeep":"96:hWrrPGI8yDdWTAAOxlfWG0eTnCa9JeUW7Y:hWvPG/eeA5xlZCa2M","tlshash":"ec910366303223358a6742edae0bcc41e2dad0477905d581f58e471a8fc6faca6e5dfc","size":4454,"data":"","first_seen":"2026-05-03T18:34:41.351704Z","last_seen":"2026-06-16T05:28:50.76667Z","times_seen":736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f65d037d1bd8afae75c242ac6f13aad","sha1":"8689ba030a12c17352484dad1d9a508b30276b56","sha256":"542f14579f166eebdeea767a4a66541a327859a49b3e80aeb87ba3ace6fead03","sha512":"3117e02693f27e454cbbf331f6edfaed406c07c4c06da20f45105967cac1a6a39da3680441a9d50c6b2176345f2b45716356e5a9ab6e3667257bbdcf7960a99d","ssdeep":"","tlshash":"18c0126a6040f1ac46c0c58628986d958a4a164125a2d5626527258d5b65abe8d0d194","size":184,"data":"","first_seen":"2026-03-11T05:02:54.846883Z","last_seen":"2026-05-09T08:24:58.085929Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7a3849f05b4a12aa8ca44a5188cbab0","sha1":"fa9093cf6335782c3851ed50deda61a26a54410f","sha256":"47732fc5689bd4e5a590b99a9fe76accecbe1bbb6625da58ceefe17c15e78b45","sha512":"ec5f411e0615a0c75f43567b581ac93648bcc5f4604130cd3a771689a0564c842267a7f6c41440670327f47661d39d7d16c40d4ac29d1bcd80a2718fcc69a95e","ssdeep":"192:/CrYYCrYK3VslCrYh6CrYL4hZLBnjiwK8DSbdN0xt1HKLNwcfM/K826oF1yIQO:wu/o78Ippmr+2dNstQLNwcfMs6oF1yO","tlshash":"fd32ea73a5d89c39cbcc6acc4d9b7c0215af650f6fc0cb94aad54b1c12bf9d6234a059","size":11780,"data":"","first_seen":"2026-05-09T08:24:58.087386Z","last_seen":"2026-05-09T08:24:58.087386Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-07T08:08:15.908614Z","times_seen":41289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/config.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d4b19fc39d88043bdbb9c096f385843","sha1":"6f41533a8c20e52830c28f9d4cc62e354fc29969","sha256":"ac1a70193e1bc0e8a7ba774ccfbb01a2b0906ec4478d3c94b8dd49eba94b34d8","sha512":"cab9965c797644d298334f1c0bc6a51f5fe22286f97b038839ce5e29777d97ec56bd89466b361f4193466d0b1b76ba997b9943b8b7821bb42b9295e2e34d6e01","ssdeep":"","tlshash":"c401d06fc17488032df2129eba462b29f512423f076cc06a71bd516c2f7a26fd6471c1","size":782,"data":"","first_seen":"2026-05-03T18:32:03.512014Z","last_seen":"2026-06-16T05:28:50.813945Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/loader.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7495dbde5ab60ac459b25cc5c0217b0f","sha1":"a3915023aa8e39ab95d7417eef6bdcdedefde3ca","sha256":"80da25369b4c34a14b7deac6d1ca96b307bb42e738f41aea491ccf993ac946a1","sha512":"d95ed327c8180538a84de3b5b3a5fe5d2d261d32db8ceccfd978ecbd999f1ff24cc81955ca6e6482746dc8e951df3019f84457874652e13fff3454458d03c23c","ssdeep":"","tlshash":"aaf0d11a231749a48bf6c66ba3718381febe6133e445d486359f74c07f709d45065cd8","size":656,"data":"","first_seen":"2026-05-03T18:32:03.601612Z","last_seen":"2026-06-25T06:50:03.060349Z","times_seen":984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"918a793f42d8b88d434e37fc0edce03f","sha1":"c45b95ef21605e632119313693ac7b5ef3acada6","sha256":"f444caf1bd126ad69218dbc0573be94de375759f585a2268e701753728634310","sha512":"0c2ce9f9e708dfec640145b4a38d0d51f7480525ccfe771517beb4c955554cb90a5f92242c8024186e4adc99b2f5edfa340f72ce390f0d65887b1129906dbedb","ssdeep":"","tlshash":"acc012a75041f4b84a6689551c1828c9865a161355928023e5554a8c232efefd258164","size":184,"data":"","first_seen":"2026-03-11T05:02:54.842514Z","last_seen":"2026-05-09T08:24:58.088307Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","size":17946,"data":"","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-06-27T10:54:23.161745Z","times_seen":1479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a5b4d5d3e4b011a5ab11c586f797d44","sha1":"648e005b908e068c567f5236736ea923480a8c08","sha256":"49653c792dd94bb881bb47fde59c3036d1009d19d8151b3894b09419eb4bc8e3","sha512":"2b77f66e9146c05f5f3644a72921d4efca6173c1b265c7201a2d2dd0c9231d11770440a844889ff56a84a02b2310ef81a9f05e9d960bd4562ddfd83ce56be77f","ssdeep":"","tlshash":"8211c0214210b872459ea5970297d30d7013666ecb06c78c412a9559207c9d7b3aabbe","size":877,"data":"","first_seen":"2023-05-30T16:19:13Z","last_seen":"2026-06-07T08:08:15.908614Z","times_seen":41289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b02f69b7b5ef90a8144528ca225545f","sha1":"f9795946fc27b8e0a9f426a928fc2785cdf13280","sha256":"5396ddd8d4300ae57fda9be1ec9d082fb8aaa2a1a18c625536df55188d459803","sha512":"6bfb614742f50644b1f1d5590329698d70d3ec849834eba27cd29b04a0c0e0b01a6df481922a19b5007e7ffd20e53cdfeeec72fff0be78b0b43085db07cf2e08","ssdeep":"192:/J5J9VqJ+JNjjiZx70xt1HKLNwcfM/TMoVLyIQx:RvyWNmZx7stQLNwcfM4oVLyx","tlshash":"da32d627a9c878bac7c4558c8d59bc4a0456108b7fd4de99ef521eec02bf4df3b0a185","size":11772,"data":"","first_seen":"2026-05-09T08:24:58.088865Z","last_seen":"2026-05-09T08:24:58.088865Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"61fe282c0993f3a6ea6e853cfbbc1a3a","sha1":"0e5ba3f17ad638d1b5b344e945aa50b1cc82b62c","sha256":"253cb3026a7f1e12881c6b7d1d5e6205c0af5a3065ede7ab3947dd0ea897ec83","sha512":"23a426fca9e94ea8523ce98c6ae2a68051ac28047aaf3c6f22db24de7b4307c4605bf1015540375df463a2e47c8ad43613c68619cbbe79461e3ad490756dc326","ssdeep":"192:/tItQWUXVGDtQctEaRLDCY3jie1Tsj0xt1HKLNwcfM/jTI3oOVBIQk:xWUU67aRLDL3mgTsjstQLNwcfMrUoOVu","tlshash":"31321767aedc9c7897d8168e4d8a680e94e8140f7ec4ca64ababcf5c213e4d73707114","size":11780,"data":"","first_seen":"2026-05-09T08:24:58.08985Z","last_seen":"2026-05-09T08:24:58.08985Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-07T08:08:15.92791Z","times_seen":22375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-07T08:08:15.92791Z","times_seen":22375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"584b32aaa35c260a3b4ddacfce274a42","sha1":"324ecf2536f3781db1f77ed454bf3c271594454f","sha256":"990fdaa51ed5c86f92d670ab5a79dbf7415f34900dc2f443c5a03dca94479475","sha512":"bca5c9cdfd2562a5a1d31e26c974022172e14ebd599e30d3daf091d27a266a820a025b2ea1e1329bf18be3489c51aafca5025db638631452fee03afedd8f8a26","ssdeep":"768:mYJ0FRsgH7XpwJxK6jk4ixVDQtwnixrUT2PXIh+vH/kvzas:mcgHl6Q4ixVDQAsrcGgmHMas","tlshash":"f603b52d6316672babfd8155f4e4a582de6f7a460944886c3dac8fcb0098dc379b3734","size":40669,"data":"","first_seen":"2025-11-18T18:36:54.272556Z","last_seen":"2026-06-27T10:54:23.141924Z","times_seen":1006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/lazyload.min.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02904458ba58d516134326a81c45c920","sha1":"bdbef500dae9927c7018801285d8b07d4aaef92d","sha256":"482427969bb13fb83dd24449a53868f8f51239ad684606639991592972bdd234","sha512":"3198a5ad2e3bb2f4814916b73f0a7316dd070184e201a40b8c53eb98473b3d791b71fb2c399e6f8f3ae6be8045532dc6659ff9cf590cd62bedb61345721e8ec4","ssdeep":"192:Wrr573s4TW1IDJTspjUAEA/UcdvM5khyLPkO21RnaUhklOx0dek7jQMiZtjpSNju:Wrrps4TW1IDqUAEEM5WeUaQFlbtN7","tlshash":"bc52cb8ba2f22438531bf024692bcd097315608f5899ae923d1d626b5f49b39f7f4fc4","size":13751,"data":"","first_seen":"2026-05-03T18:32:03.559102Z","last_seen":"2026-06-25T06:50:03.064305Z","times_seen":983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-07T08:08:15.936868Z","times_seen":40837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe16f8c505d91cec87904e7ef0f0e614","sha1":"ce08c6bc6d633032e230dacefb41a0230f7db758","sha256":"0783d8fc44b0a0cd6f3452b1f9708a256d94b363a953830b31f275953ecfe014","sha512":"6c98c7057585c2ef7b6f260fba40ff1b1322a081862fea4afe2048d4c52551464c3239bbe72425c154a8662b69fdf9685b8686a08d304baa070c3b03a2cd1ba3","ssdeep":"","tlshash":"2dc012a72801f4a91960c6d6341859c9c5521865a061d167b71d5a8a136fbfa8618194","size":184,"data":"","first_seen":"2026-03-11T05:02:54.845415Z","last_seen":"2026-05-09T08:24:58.092068Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0740d12309dfb731b29275d11664361d","sha1":"d3bbdfebc332934846d6e86c64d26f86e3ed1d15","sha256":"1b0dafa49d7018694f3d2619e015266663ade8d68596ae633922558bff2ec36b","sha512":"b6b1ec00e23c112e3ef9d7931f3bf9d7fd36d01b37a3f261f12c18c19ba6c93e1b99b410bb65374d7ba6b539981c1d252afb59acc2a99ffd1d60282fa35bb388","ssdeep":"6144:dxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/l5lN:dx/85ucTcProN","tlshash":"bf64f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":326736,"data":"","first_seen":"2026-05-08T18:42:11.943066Z","last_seen":"2026-05-12T17:35:05.256088Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-07T08:08:15.92791Z","times_seen":22375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7e7254c4451ccbff1e6ea2c1baff1ec","sha1":"c83ea808e60dd5d0bd1182ff71372d2d6bf0ee04","sha256":"56334908a63fb92c270dc45d67c998ab512f7db61106613e04b3507d2f513bda","sha512":"0e1517cb8c3fbc94b5a13466bf28577a40205cd34fad1e177ce8ceb58fb3b902727fb7a09bcd149a4651810af5ea54dbbe49b1fb4690551945c374375826f570","ssdeep":"192:/IhS8jikK2u0xt1HKLNwcfM/QUUoooZIQQ:omP2ustQLNwcfMIloooZQ","tlshash":"0632fa6be6c88d7a47845ecc5d5db80979e9201fbdd0ca9ca6d98b9c027f5d3170f009","size":11827,"data":"","first_seen":"2026-05-09T08:24:58.092625Z","last_seen":"2026-05-09T08:24:58.092625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-07T08:08:15.936868Z","times_seen":40837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0740d12309dfb731b29275d11664361d","sha1":"d3bbdfebc332934846d6e86c64d26f86e3ed1d15","sha256":"1b0dafa49d7018694f3d2619e015266663ade8d68596ae633922558bff2ec36b","sha512":"b6b1ec00e23c112e3ef9d7931f3bf9d7fd36d01b37a3f261f12c18c19ba6c93e1b99b410bb65374d7ba6b539981c1d252afb59acc2a99ffd1d60282fa35bb388","ssdeep":"6144:dxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/l5lN:dx/85ucTcProN","tlshash":"bf64f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":326736,"data":"","first_seen":"2026-05-08T18:42:11.943066Z","last_seen":"2026-05-12T17:35:05.256088Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/dashboard-assets/js/disclaimer.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d31bf8a0967d5a38631c38691e66540c","sha1":"f4e654b84b034023b5e3db513087dd9205bd49ba","sha256":"d6712b0ff373f0cf02d1c81ff5a6fb945b47d5d173f02e41d1da28eee52b39d5","sha512":"3d4f2750a27f99297636d2e655b9d157d70113d304085e8ff716a907a7abd01252fbbc7ea521f695b6ec31bcb7a9198e0fc378ee71480a52abe2ab83f94b8181","ssdeep":"","tlshash":"58014c9e79e236b1a2c7eb7c19ab530566314003d11c85053d2c6262afa4f6816b3bc9","size":854,"data":"","first_seen":"2026-05-03T18:32:03.521288Z","last_seen":"2026-06-25T06:50:03.054394Z","times_seen":985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","size":34586,"data":"","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-06-27T11:07:22.950148Z","times_seen":1625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3cd002d7a8bb1f08dc8f9a3087a5038","sha1":"c9cb47885ed728ccfc879ff1ffbb9ff4e76c433c","sha256":"db6784366ffabeec756ece67d46576ff6e7b594af5f4154696dd59436ed72751","sha512":"055cd95523ecf58ed71bed96b849c42143a5723120cf74f213416d1d4e390b80f63b579b5b613968588fddb5dac554882ec08fb0ff1c7fd290ad1827d849d202","ssdeep":"12288:EdQ3D1znp2j/IjzF6H0n+HTpfxBVewAZpR+o7EzGJZEyVBIDO7tmMKOAis1PYb+j:/rp2sMH0n+HTpfog1stimGgo","tlshash":"4c156bc671d6f43181a645a5a47b1203b33e169cb80d878cf03dadcd2a9d945a2bbff4","size":884257,"data":"","first_seen":"2026-05-08T18:42:11.933835Z","last_seen":"2026-05-12T17:35:05.276409Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/scripts.js?v=20260329-card-hover-fix","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5027dd34bbabb7baf24a353d73d95dc4","sha1":"069b7ab6533d9ce490e3562f383c3787f4193b04","sha256":"11f21fea558292de4502dd467e89d84ae0e998fa53aa3eb75f5599302463d617","sha512":"c471a8a425b49565ed9c8f106466d01f754ec9e61a994dd441f452a61800a742cd485b334a6b004354b78eacd802c7f7cbb01b3a30993718fe06d02379b2983b","ssdeep":"192:5vaUOUNrDeAHVSx8x70XkyEeiK6cthSiQGfkDf9Idm:5rOjAHKX1TFxtyGod","tlshash":"1d022f6a65b61436403311af9bcf825a2b1530c7ba05eead3f0c83042fc976c59f1be9","size":8260,"data":"","first_seen":"2026-05-06T05:56:06.68471Z","last_seen":"2026-06-16T05:28:50.797201Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/deferred-imports.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0ec5ae2cf2a7a7043133c1d9301fadb","sha1":"518d372d4fc783df627d3c5789284ecfca8dbeab","sha256":"b13200f905e155b75d81e059633d6c2bfc45cfe4f1b2199c0970ddc15b5a1d75","sha512":"e22cac350e50d88ea6fffa67e9ebd404fef4c79b0ff7e9c9ad01015e09676c39af37788927916e947d7b49fe0b2131873f43adad6799340d6ee2b3c186b18e20","ssdeep":"","tlshash":"6511493a09078a5544304166ecb7a72df073072323d182a27ebd32486f314175a56b9d","size":892,"data":"","first_seen":"2026-05-03T18:32:03.612818Z","last_seen":"2026-06-16T05:28:50.775147Z","times_seen":794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-07T08:08:15.936868Z","times_seen":40837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-07T08:08:15.92791Z","times_seen":22375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a51c5ecf68ae51eed056ceb3392d0da9","sha1":"20291ab3301a78657a1ff25a0b56b72bf33389f8","sha256":"533c2248356dd75c4dff28df1c56a1d10699aa83a3121ba9ec37f72c98c0f268","sha512":"424469890f9b2a28a5ae91348af867b7a8c44e18809acff658d312dc2a2d4868bdb7aff9bf19c1d1eaaa26951a72f0c6f16783da1e35fcf5afc9b9c9eb6c967a","ssdeep":"","tlshash":"0d51ab7aa442f43a12310ce9f77b2316707636d87906a360e02e789c385dc23d627bcd","size":2657,"data":"","first_seen":"2025-12-02T19:38:07.208192Z","last_seen":"2026-06-07T08:08:15.92791Z","times_seen":22375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3cd002d7a8bb1f08dc8f9a3087a5038","sha1":"c9cb47885ed728ccfc879ff1ffbb9ff4e76c433c","sha256":"db6784366ffabeec756ece67d46576ff6e7b594af5f4154696dd59436ed72751","sha512":"055cd95523ecf58ed71bed96b849c42143a5723120cf74f213416d1d4e390b80f63b579b5b613968588fddb5dac554882ec08fb0ff1c7fd290ad1827d849d202","ssdeep":"12288:EdQ3D1znp2j/IjzF6H0n+HTpfxBVewAZpR+o7EzGJZEyVBIDO7tmMKOAis1PYb+j:/rp2sMH0n+HTpfog1stimGgo","tlshash":"4c156bc671d6f43181a645a5a47b1203b33e169cb80d878cf03dadcd2a9d945a2bbff4","size":884257,"data":"","first_seen":"2026-05-08T18:42:11.933835Z","last_seen":"2026-05-12T17:35:05.276409Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/utils.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e654fbae22a0762fa384b61fd03f1679","sha1":"3f2dc491443ab4d9dbf6abee895d8140196f0aab","sha256":"93c8dd85421914d3c09fdacc4b77730595202004a1d8c9ef7639c7551157bda6","sha512":"af44d0ca2f0ca731ecb7e535963c694710a3e887c8bbdfc95066f1fab72d5c5da66313e9097498d246b93a04a1b642fd65d591e80d325a72bb0f7bf5a5f8da6e","ssdeep":"3072:TklM0tDKjFs3OwPss3MwPky0zOt62xFMfM+dhvo4sUifhNyf4LtXKtofQVkmDmVu:TklMmDOW0IxFMfM+dMGou","tlshash":"fe44f0ebd63c973ba1d87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","size":268720,"data":"","first_seen":"2026-02-13T03:24:00.128548Z","last_seen":"2026-06-26T16:41:17.559106Z","times_seen":985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-07T08:08:15.936868Z","times_seen":40837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e500be2456c7adccd83f363e52ef5bd","sha1":"327c9f69248844f40f89b9ade646394c825f2a28","sha256":"95c35c2edce177114158dda90aa3f769080a60b08e437651df026a422da4c17d","sha512":"58094149c2d3150b0a3fe9dbb13d2f054ddc31c5cb439985aa7221aa321577dd128d97f2d5044300c5767fdf2aec18d9d77c54fdcdd33185f3987732586aaa16","ssdeep":"","tlshash":"4eb0223ba8a00028b83a88c0220a238038300002ac0ae300e0ac220c2238f030022ac2","size":129,"data":"","first_seen":"2023-05-30T16:19:14Z","last_seen":"2026-06-07T08:08:15.936868Z","times_seen":40837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3cd002d7a8bb1f08dc8f9a3087a5038","sha1":"c9cb47885ed728ccfc879ff1ffbb9ff4e76c433c","sha256":"db6784366ffabeec756ece67d46576ff6e7b594af5f4154696dd59436ed72751","sha512":"055cd95523ecf58ed71bed96b849c42143a5723120cf74f213416d1d4e390b80f63b579b5b613968588fddb5dac554882ec08fb0ff1c7fd290ad1827d849d202","ssdeep":"12288:EdQ3D1znp2j/IjzF6H0n+HTpfxBVewAZpR+o7EzGJZEyVBIDO7tmMKOAis1PYb+j:/rp2sMH0n+HTpfog1stimGgo","tlshash":"4c156bc671d6f43181a645a5a47b1203b33e169cb80d878cf03dadcd2a9d945a2bbff4","size":884257,"data":"","first_seen":"2026-05-08T18:42:11.933835Z","last_seen":"2026-05-12T17:35:05.276409Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0740d12309dfb731b29275d11664361d","sha1":"d3bbdfebc332934846d6e86c64d26f86e3ed1d15","sha256":"1b0dafa49d7018694f3d2619e015266663ade8d68596ae633922558bff2ec36b","sha512":"b6b1ec00e23c112e3ef9d7931f3bf9d7fd36d01b37a3f261f12c18c19ba6c93e1b99b410bb65374d7ba6b539981c1d252afb59acc2a99ffd1d60282fa35bb388","ssdeep":"6144:dxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/l5lN:dx/85ucTcProN","tlshash":"bf64f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":326736,"data":"","first_seen":"2026-05-08T18:42:11.943066Z","last_seen":"2026-05-12T17:35:05.256088Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/geo.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9c760269aeea47905f4d33aaf740c3a","sha1":"14120a6947ffad92c5f9e886b485ec65b3bed3ee","sha256":"556384cb09c3f07d6576faea9d370459e288fbfbe44b1c5e847b2db9dab5690c","sha512":"b594df48a2e062a0618a0443ca35e4b7bcdf55eb2599b8fe782016f29b198210ab39b46e017121f150e27fa14918c37ec05c62c00752e61914b095aa1c087946","ssdeep":"","tlshash":"fd01496552b6466040e771cada6fa2601435e40b374dd8ea7a9f43480f8991dc2b27dd","size":825,"data":"","first_seen":"2026-05-03T18:34:41.313902Z","last_seen":"2026-06-16T05:28:50.816995Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3cd002d7a8bb1f08dc8f9a3087a5038","sha1":"c9cb47885ed728ccfc879ff1ffbb9ff4e76c433c","sha256":"db6784366ffabeec756ece67d46576ff6e7b594af5f4154696dd59436ed72751","sha512":"055cd95523ecf58ed71bed96b849c42143a5723120cf74f213416d1d4e390b80f63b579b5b613968588fddb5dac554882ec08fb0ff1c7fd290ad1827d849d202","ssdeep":"12288:EdQ3D1znp2j/IjzF6H0n+HTpfxBVewAZpR+o7EzGJZEyVBIDO7tmMKOAis1PYb+j:/rp2sMH0n+HTpfog1stimGgo","tlshash":"4c156bc671d6f43181a645a5a47b1203b33e169cb80d878cf03dadcd2a9d945a2bbff4","size":884257,"data":"","first_seen":"2026-05-08T18:42:11.933835Z","last_seen":"2026-05-12T17:35:05.276409Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"893d8b246e0aa219e887a9dfea444959","sha1":"14ce742616aeef6460f74bcc48289d121c119749","sha256":"433ed682a07d88e16f1d07303c5f1fdcc2fb83fb57e26bdfcba742c3f894ac76","sha512":"94e9261674b5bc23b9117254dba6fa18593a509cc0ab1011962ab0a6278171db270f3ce78a97726070a6aa1d8e65b4e0d71acc1dac65c5aaa379a3c12cbe56ea","ssdeep":"96:Lm8uN9WnLBfRanrYzTcy7uSQbUMjBnz0MCi0ZyAktXpaS2cxSy8fwP/+T:Lmb7WnLNR+RTbShi0ZyAkoly8fwP/+T","tlshash":"be12418e29f6175d9d73313e3bcfa505651650271848ed42be9c0ba01fc88b977e2bc9","size":9244,"data":"","first_seen":"2026-05-09T07:43:40.550755Z","last_seen":"2026-05-09T08:24:58.093552Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-06-27T19:15:09.735642Z","times_seen":173715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0740d12309dfb731b29275d11664361d","sha1":"d3bbdfebc332934846d6e86c64d26f86e3ed1d15","sha256":"1b0dafa49d7018694f3d2619e015266663ade8d68596ae633922558bff2ec36b","sha512":"b6b1ec00e23c112e3ef9d7931f3bf9d7fd36d01b37a3f261f12c18c19ba6c93e1b99b410bb65374d7ba6b539981c1d252afb59acc2a99ffd1d60282fa35bb388","ssdeep":"6144:dxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/l5lN:dx/85ucTcProN","tlshash":"bf64f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","size":326736,"data":"","first_seen":"2026-05-08T18:42:11.943066Z","last_seen":"2026-05-12T17:35:05.256088Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/forms.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:20.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/forms.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/frontend/assets/en/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6InBWVDFNVUVuUzZPQ24wMDVqOHVBQ2c9PSIsInZhbHVlIjoiNytOKzgzcXVHN1Btdy9RTzBvdDJmR21GRjcyeW9qcXl3Nis2cE1uNlNvMWxid0JWbjdrMlREa1JiZzhNYTlRcy9hQkVuYzRYKzdMcXlQMFVPV0JvMEI5a2tSRFFpWWF2ZkxUL3MycHk4cVJueFhNTjhhU3RlQnFEVVZVR0JvU3ciLCJtYWMiOiIxNGI4ODU0YjE3MzZhNGQ1MDQ5ODhiOTI5ZDcyZmU0MzUzZjQ2MDU1Y2Y0MDUwYjBkMjEwZmRkOTc1MGQ3ZWY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9tcWl0ckRETFJ6UjdicUpHUFAzWmc9PSIsInZhbHVlIjoiTzlRVTdxcHlpRktrb05vcE1EcVZQVmhhams0bVpIbXJBS2VHMjZteUJhS2pqMVBDLzN6ZUFqTCtjMkpOOC9RalhBaUk1cnZpcnlkSmZQdi91SmF1Q2JlNUlNODljUEtjNUYrNGgrYmNFR2V0RWMvWUhWTitvdml4ckRRdDJnSUciLCJtYWMiOiJhMDI1MDRiNDE4ODkzYWMxY2ZhNWI2ODdhNmEyMDRkYzU3MzU5MzA3ZDVjYWU3NTgxNjU5ZTQyM2Y2YjY4YmU4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2474\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zDuPBDSkNo1systsDhxiGjo8TzPQT55SLMj0WOnb8vdt%2B2%2F7dG8Wh1wMfpkeHPKtwag2ZPlD80SeWsp2V8VH2t%2FlEgsCg0A8XLCQUO2Rp190Ti7wZrv7OGig8xdWFX%2Fj218y\"}]}\r\ncf-ray: 9f8f4ea5eedfb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7614,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"311cc8bbb57cf1048f70b036cf6bfd70","sha1":"576fd8aa56ecf0d01015f6b15b29afbac4569d83","sha256":"668ed47288df834eaffcf666d3463cb39a3c53b52f8db94b8f1eb99a73e19cc0","sha512":"b7e8b2bd654cbeb43474a3520937750909cb6049ceb8da4c95d24ac13da0a4980052a09b0fe41f6f2ebae498b0564f4f51897b80c8a71ee412a586917acc984e","ssdeep":"192:wFzWhJL6YQRR9JYvGJ64U/8tkUCb+EWPH9ZZisEqN:QWhJOF9OO5U/EkUCbiH9ZZZl","tlshash":"f0f1009921fa45394db321fcafc7650229293027188dde547e4ca3106fc9bed6bf0b98","first_seen":"2026-05-03T18:34:41.364367Z","last_seen":"2026-06-16T05:28:50.785517Z","times_seen":736,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358121/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:20.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141358121/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=cvCosU.Z8lVDj4kbxsBSpPGagb3tjEpqEKzTCwvGcPA-1778315060.2533488-1.0.1.1-smh_QgEkK6dg2sI4tdGFqpuBZ3H0AHLFBnRIrlF5mv8x7Wdgz6QL8QT6JT6MzgunXJAjdVfK05Z4h20ed25kx379vgRfyBgswFVmT_DfIi332akZpYLcuhOzVw0vZw93; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 09 May 2026 08:54:20 GMT\n_cfuvid=qW0baP1dKtcLILYv1fAUaOM_puX.EWgtD1rYaEX8Mhk-1778315060.2533488-1.0.1.1-On9qotH3SIgRmA3RTUgDxLj0LXBN3r1YNlEoLWie8ek; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: 9f8f4ea699d9b1b8-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-d99d88675-4rbln\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-d99d88675-4rbln\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000146-IAD, cache-bma-essb1270047-BMA\r\nx-timer: S1778315060.267722,VS0,VE167\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"870b486a54858aff06ffa2d7df5245f3","sha1":"095ec89db63edebda11f17f5dfe558737cecfbc4","sha256":"709234e5435e4310d7e3f318ad0e68620d4883a493aa68812383b325d481f297","sha512":"ad7c840bb9acb7d764668f986a5ea5e123fd3dc84f28b4f3e28e6e9390a3c226343cec5c251714a43c62141a96cd6112969a1606136dfbf27d767dc07b786dbc","ssdeep":"","tlshash":"d901fef713d418f6a392a3da9eccb01b5317916fddc168d9a92b5c0c4bed0d738442a2","first_seen":"2026-05-09T08:24:58.034002Z","last_seen":"2026-05-09T08:24:58.034002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/fi.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/fi.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P9De0iuBFcg3%2FpxiCzOVjRNjZ2LPA17T2yr230h59X15Mr5EtdifTBIFNoNGm4sHVzWkiGr2HCvzsqUzTRqHhxtmMjNxKffAhNtI3R%2FqsIPLrl85bLSeypXCVPzKxPYW0Q3S\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e900d86b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1724c02c151d1f44b22d5c89e199c54","sha1":"fbb67ed0796f19c50d9354ffa54a0103d33049b7","sha256":"0d9fdf20d3b93aa471132ea660f36e3331fc137bb628121caeec33e905a2a33b","sha512":"b25f8b249311ea474d847f05738c744e4b3590a79c6859db8b7cef67f7e50c234ac86b2eedd86778cfebe26fce6f376b93e202a0ebf7b519700a87b56302a741","ssdeep":"","tlshash":"8bd05e9690b96a044902476a8dec76da6026a0e6668d01fdb0811525f6893df78a36a8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-25T16:20:09.700805Z","times_seen":2367,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/?callback=jQuery311019828374697251827_1778315057090\u0026_=1778315057091","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 16:36:00 GMT","end":"Sat, 01 Aug 2026 16:35:59 GMT"},"fingerprint":{"sha1":"06:75:C4:FB:38:6E:E1:2E:FA:EB:1F:53:64:D4:A8:68:81:AA:9A:4A","sha256":"74:4A:07:24:C9:DA:4C:BA:4E:1D:C1:1D:2D:9D:6B:AD:65:55:3E:08:89:78:B2:E0:36:DF:14:3D:B1:7E:BD:21"}}},"request":{"raw":"GET /?callback=jQuery311019828374697251827_1778315057090\u0026_=1778315057091 HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":674,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (393)","md5":"b274285444171bd139fd6f3488bfb305","sha1":"c590c369a40c9e28bf8a4bae9e883955ce95f06d","sha256":"92f30aebd3410ca192a62685a6f589fda8ad37e2767d0ba06f1b5ffcfc5a1066","sha512":"f8e83b002be447c51fdb687e2096f4c5c82befb2a2486e20b3dc7464d778c66684d92f1757d905867a60a72566dd3fa2aa5520081b0eeb0e0fd2396601c410d7","ssdeep":"","tlshash":"fe017067513c1b76aebe464c840f8e1a22583a1f428265d68fa21f2c14445fb60b136f","first_seen":"2026-05-09T08:24:58.035549Z","last_seen":"2026-05-09T08:24:58.035549Z","times_seen":1,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":57,"dns":13,"connect":14,"send":0,"wait":137,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/ro/img/responsive/blue/hero-2560.avif","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/ro/img/responsive/blue/hero-2560.avif HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/avif\r\ncontent-length: 38264\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Tue, 21 Apr 2026 18:23:11 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xichQwZbipjJv%2BwzXzq%2BRQs%2F5VhP6Atvw8NHofI%2F3uLh0h%2Bsres1YKH%2FVJQAluvGK92h7uPXzBeKVySYNA5mDImkTJD8t3Waeb1jbJf5XOmi%2B9UteH0tAHG7PajJmUirXrYY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d9db515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38264,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"37a73f630703cb069271af07bd1e3254","sha1":"4742dabbf5fe1c4dde173e8b72f81e8549fcae4b","sha256":"1e0c083052b506d1999a8f0e4a80b5490e4cab000446f3b367a9861d87f3db2b","sha512":"eacbba22ce90e3e6bff5b3cf8c2632eb382ff6f55ed693065fcd8bd277fa829c7cc6eeba9ecc72749a0a3b12afca9e2fa5d032c33a7eafa1159547d003eccc34","ssdeep":"768:+AnoI4WGzNOs8zGYdlj1k2mUekeDmGGM6ErVO0pT3ooHNeGv4li2m:+Ano3WkB8zVjG25ekBHErVTBooHN96m","tlshash":"8603f18b35fcec82869b6f7d382f8920d68706b763207dea876d121002d394f555f9da","first_seen":"2026-05-09T07:43:40.501131Z","last_seen":"2026-05-31T23:29:51.465812Z","times_seen":31,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/questrial/v19/QdVUSTchPBm7nuUeVf70sCFlq20.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/questrial/v19/QdVUSTchPBm7nuUeVf70sCFlq20.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31524\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:07:30 GMT\r\nexpires: Wed, 05 May 2027 18:07:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:53 GMT\r\ncontent-type: font/woff2\r\nage: 310607\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31524,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31524, version 1.0","md5":"0177e32bfc671c19c5bebaac51e6fa2b","sha1":"16ce0bad8144a3b68bc10dcebfcc7ccfd9f21577","sha256":"e17a410bc5901811a63a102849f06e2bea4715e60ca05e8dbeb5452cd9c0cdc1","sha512":"cdfb8eac39f2588fdfdc83d71a41fe34280562f6672ea83826fcee4ce7a520efb8aad9f351e5ada756df9dd901086c91d8ad76c52c78220461f58313cebc2c96","ssdeep":"768:pixDASPA1FZH+Fwdco63lZQF2+czupPQVjwcZa1F2m9v:LLHZ9Ko63lZQ4+SupoVBZ4F24","tlshash":"2be2f1abe29f6d7a9010af7c685fa064a8b418c187861b5470cfdbd1db1ac7d170073e","first_seen":"2025-10-02T01:45:22.913305Z","last_seen":"2026-06-26T16:41:17.567089Z","times_seen":252,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":311,"dns":8,"connect":8,"send":0,"wait":13,"receive":1,"ssl":292},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/fil.jpg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/fil.jpg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16588\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 09 May 2027 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lou8n3bbH00ftHzH9qlpZRPD1c%2FrbjHv%2BaeuBei8prKoMRc1dgD%2B15mRW9rtU9aZVeE8rAU6bKwFdet6S2c%2Bt6hzKnNGlhRAM4I0cDTuOO%2FpMStv0ZG7bLJ6Aju%2FYzJg42zb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d9bb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16588,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=13, height=0, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=0], baseline, precision 8, 20x11, components 3","md5":"0ae75b237b6dae635543c467ac8bfe5f","sha1":"5d35f0ce2acc3ead91fe68cfc7128c6e1f5b6654","sha256":"bee53edec9e55d91d851aa59423516050d3a9edbd67d30c35c7bb5a8c5ded0a7","sha512":"7591a08b13cb0c67301f17c6ef567ef0798a2ee97ac9dc3e67957f676e0652c947c2bb09727c623c847720252d271f07c63d630dd974b109b6af56488f6934fa","ssdeep":"192:McgnJzx+gCuVF03jiOkrQy4FwnJzx+gCuVF03bGXbtebIAFKIx0Ny3ajZtzz96OP:McuJzxb7C+JzxPX5WIAFKr9RP","tlshash":"fd720920ffe1be12f1d4323a64d8da458633ddc1e983198a7addec557f21a920d97283","first_seen":"2025-08-21T23:09:42.477784Z","last_seen":"2026-06-25T06:50:03.071488Z","times_seen":1712,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088710633-6f12125780f50cda1cc6b77b6b103de2cb482874dfb13a0f9f5d4ef5de09454c-d?mw=300\u0026mh=539","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088710633-6f12125780f50cda1cc6b77b6b103de2cb482874dfb13a0f9f5d4ef5de09454c-d?mw=300\u0026mh=539 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"e2b75df33cfe2c2f7428ecc39b4c2f2b\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 132796\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nx-served-by: cache-dfw-kdfw8210116-DFW, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 28, 0\r\nx-timer: S1778315059.861759,VS0,VE1\r\nvary: Accept\r\ncontent-length: 17336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":17336,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e2b75df33cfe2c2f7428ecc39b4c2f2b","sha1":"2c51b12a4901da0864102eb7a1adfc92599d1cd0","sha256":"8d02801137fd10599ea5f3efc373d2d115a88693985b5cb46a57c35d47eab7f6","sha512":"256c406ab3665ed70ba3f1ac4c7379673950cec31fa6ed56d50e040cd7b308d7785d824e29edb831473596edf052857a162e28016e1094919dd39b39137e7935","ssdeep":"384:2x7axzhu01A2f+bj5NQwCRMq8Yc6VEv1RXUogIcc+T+I2w:yODv+bVBYc6CEPIccJNw","tlshash":"8372c03e8b9066f3d4331a78041dff27176942fc863a1a168fdee5a865220869c1fa35","first_seen":"2026-05-09T07:43:40.476696Z","last_seen":"2026-05-09T08:24:58.038095Z","times_seen":28,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/geo.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:20.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/geo.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/frontend/assets/en/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6InBWVDFNVUVuUzZPQ24wMDVqOHVBQ2c9PSIsInZhbHVlIjoiNytOKzgzcXVHN1Btdy9RTzBvdDJmR21GRjcyeW9qcXl3Nis2cE1uNlNvMWxid0JWbjdrMlREa1JiZzhNYTlRcy9hQkVuYzRYKzdMcXlQMFVPV0JvMEI5a2tSRFFpWWF2ZkxUL3MycHk4cVJueFhNTjhhU3RlQnFEVVZVR0JvU3ciLCJtYWMiOiIxNGI4ODU0YjE3MzZhNGQ1MDQ5ODhiOTI5ZDcyZmU0MzUzZjQ2MDU1Y2Y0MDUwYjBkMjEwZmRkOTc1MGQ3ZWY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9tcWl0ckRETFJ6UjdicUpHUFAzWmc9PSIsInZhbHVlIjoiTzlRVTdxcHlpRktrb05vcE1EcVZQVmhhams0bVpIbXJBS2VHMjZteUJhS2pqMVBDLzN6ZUFqTCtjMkpOOC9RalhBaUk1cnZpcnlkSmZQdi91SmF1Q2JlNUlNODljUEtjNUYrNGgrYmNFR2V0RWMvWUhWTitvdml4ckRRdDJnSUciLCJtYWMiOiJhMDI1MDRiNDE4ODkzYWMxY2ZhNWI2ODdhNmEyMDRkYzU3MzU5MzA3ZDVjYWU3NTgxNjU5ZTQyM2Y2YjY4YmU4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcpcPkdpmOXTqOyzvcu7p1k%2FkQktte6XM%2Fv3yu9wX1QWcIULxq%2F6i31Tz7l%2FNidjm5jfYV4B7SX61CJbn743BCWlHNhj3oceXnJzV%2Bat8hr5ES8Ew7GNUloG5cm320Qq3utm\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2474\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4ea5eeddb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":825,"size_decoded":0,"mime_type":"text/javascript","magic":"C++ source, ASCII text","md5":"b9c760269aeea47905f4d33aaf740c3a","sha1":"14120a6947ffad92c5f9e886b485ec65b3bed3ee","sha256":"556384cb09c3f07d6576faea9d370459e288fbfbe44b1c5e847b2db9dab5690c","sha512":"b594df48a2e062a0618a0443ca35e4b7bcdf55eb2599b8fe782016f29b198210ab39b46e017121f150e27fa14918c37ec05c62c00752e61914b095aa1c087946","ssdeep":"","tlshash":"fd01496552b6466040e771cada6fa2601435e40b374dd8ea7a9f43480f8991dc2b27dd","first_seen":"2026-05-03T18:34:41.313902Z","last_seen":"2026-06-16T05:28:50.816995Z","times_seen":789,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/deferred-imports.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/deferred-imports.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eP%2FgxZFHjVJP4mYXxQs3RhS2qT88Fvatae0b9WDSgs9Hax9AbsQYB5F%2BvJ06L0Oh0%2BsGdU9GU8TvFjc0efzGekwrFaKfGt%2Fj6aBJdqW%2BgyU%2B%2Flzmpl2yf5yv7IPOslHVZ0Wf\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 14 Mar 2026 21:28:22 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e8ffd80b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":892,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"b0ec5ae2cf2a7a7043133c1d9301fadb","sha1":"518d372d4fc783df627d3c5789284ecfca8dbeab","sha256":"b13200f905e155b75d81e059633d6c2bfc45cfe4f1b2199c0970ddc15b5a1d75","sha512":"e22cac350e50d88ea6fffa67e9ebd404fef4c79b0ff7e9c9ad01015e09676c39af37788927916e947d7b49fe0b2131873f43adad6799340d6ee2b3c186b18e20","ssdeep":"","tlshash":"6511493a09078a5544304166ecb7a72df073072323d182a27ebd32486f314175a56b9d","first_seen":"2026-05-03T18:32:03.612818Z","last_seen":"2026-06-16T05:28:50.775147Z","times_seen":794,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/pt.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/pt.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eyf8Bw6CLu%2BkO3wN5Bhd2%2FJq3U0DEC8YfeD%2Be%2FGznEA8L%2F%2FTx7bbMMCRjAJ5Kje8VvyPsHP%2BthBDssMH1gycRmKryGdCUAIRsensLQpqj3jRdPd%2FoTM4HPVhodybS977d75D\"}]}\r\ncf-ray: 9f8f4e901d96b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1912,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0f66bd6beaac99c6e2f26c24305a1a2","sha1":"afea1f64055e95d095cb738e07e7751036d3bfe6","sha256":"a97c198d9404f1f1db3616ee0b26980087346fff121db3bb7f13540b90b56c96","sha512":"9bf4d9b22cd6cf9f0fb08b52cd1a93eb9886be4abbd1374bc05e1f3a6b822f127e03c1a5b0256bf0450393ae89406db6ffbfeaf4918ce2a30fd6accf8a212a7f","ssdeep":"","tlshash":"83410de82f2c50dc84a33aad2d25f544d34d50b572a54ec0af8db769d063895f0c7e80","first_seen":"2024-08-19T18:26:58.073415Z","last_seen":"2026-06-25T06:50:03.079999Z","times_seen":4575,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/config.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/config.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BRJpKaRZCBjPWZHp8tsn9AmCM%2Bub4%2Fa8DWB2JywEpW%2BOfcGJxB63pwXN4hAAQCxh55fvVpiYZ4bxB93Y3cWxik%2FjiKgiIip8Z7OYQ9%2BQQxJak%2FRBBTMV34fMHAaQ%2FfBuv3qc\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 14 Mar 2026 21:28:22 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e8fed7cb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":782,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"3d4b19fc39d88043bdbb9c096f385843","sha1":"6f41533a8c20e52830c28f9d4cc62e354fc29969","sha256":"ac1a70193e1bc0e8a7ba774ccfbb01a2b0906ec4478d3c94b8dd49eba94b34d8","sha512":"cab9965c797644d298334f1c0bc6a51f5fe22286f97b038839ce5e29777d97ec56bd89466b361f4193466d0b1b76ba997b9943b8b7821bb42b9295e2e34d6e01","ssdeep":"","tlshash":"c401d06fc17488032df2129eba462b29f512423f076cc06a71bd516c2f7a26fd6471c1","first_seen":"2026-05-03T18:32:03.512014Z","last_seen":"2026-06-16T05:28:50.813945Z","times_seen":794,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/ar.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/ar.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6JYs%2BLtMxAc26KJo4%2BBxGIcboKpEKrBTuvDTjxT%2FG8d4DvhJFrEoXZ7dHcqRKNiiD21ihPkV0YIYP0tSW9hISjC%2B7DI1sxiHUyWspwD7%2FgTRD1e2%2FA1cn7eTS2da0cEGkKqj\"}]}\r\ncf-ray: 9f8f4e8ffd83b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24678,"size_decoded":0,"mime_type":"image/svg+xml","magic":"ASCII text, with very long lines (24676), with CRLF line terminators","md5":"ff8d7927af846f11628284e5b270adaf","sha1":"06a32de0c63edfc6bec722294be0f50faad3f669","sha256":"0c606d62cbc00b47a56e55ee4dab3c85c4ef81e26b6896a8570020b464237816","sha512":"c25c00856a3beb0dd27dd5dd9e489398d3fb8d39ac8e0229553ae6853c9c13682b58cbdcdc4b6078222707e0bb2cb8365718d927026af77b9dfda6ccdb3d32a3","ssdeep":"384:TWqbKBQivkm1CEaCxcAHitd+aJNeCwdWuCRLWWmoPYK+SwYNR9/SL9iu2:TnbOvtxcAHiCuwgCWrPJbvyiu2","tlshash":"d1b2a6d92770e3d8a6cb996eff319c986a4bf4fe8e7742c0816e9a0459d7dc4e604c00","first_seen":"2025-08-21T23:09:42.503051Z","last_seen":"2026-06-25T06:50:03.082076Z","times_seen":1711,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://randenta-ro.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=WL3D2SmhKvdXtVxdCeqLDLn0lG3gEl7WFQR4fu5Gnak-1778315057.1690965-1.0.1.1-XvYH5NdEn0X2lIWdQJslLO6D9A2DNVU.jud1KIxQtZQ9YoBW51ZQxN5g_4DGPAUibzffWYA.KPm_81xrTAORNylsnJHU34tplebJ095ymPN8_dSwLy0xBC7XuP4UF152; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 09 May 2026 08:54:17 GMT\n_cfuvid=CWa6bp1IdK.WBoF2prjWMQFN_j9AcWqbalYLgIJqa9U-1778315057.1690965-1.0.1.1-uFc.7yUAVBbiJNhkbWN6XzoTPzaEOPzqreh5w7ZZDOY; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: 9f8f4e934c921a30-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-d99d88675-4rbln\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-d99d88675-4rbln\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000161-IAD, cache-bma-essb1270061-BMA\r\nx-timer: S1778315057.188674,VS0,VE169\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20093,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11792)","md5":"13fd29296bf29598df2b08d917107d45","sha1":"e0c51548c4004f7e04be9a16162e28443fa4f077","sha256":"a59187d5a7884f629e5b8e7c72f0d28f2ee9d9dd118cd7c25a86c8f5cf928422","sha512":"aab1f30e8470a98c678f1908ff362c151c04ef1beaebdea4249e5edb3cc69a0f0c3fd95587681c44fe6b3d30a8a2cccc9d8143886e882d02b2a173b8b0ec2bed","ssdeep":"384:PPhdeGjRWUU67aRLDL3mgTsjstQLNwcfMrUoOVBiWSPqOdM/+MhHFgfEC9:B5UrvYLNwcf+UQWSCOdehHFgfEK","tlshash":"0d925c37a9d5a87486a905cf0e6ab60c70f5200bbe84c654f2afde5c272e8d376072d4","first_seen":"2026-05-09T08:24:58.041132Z","last_seen":"2026-05-09T08:24:58.041132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":54,"dns":4,"connect":8,"send":0,"wait":197,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/css/player.css","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:17.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/css/player.css HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\nage: 49880\r\nx-served-by: cache-iad-kiad7000154-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 61, 7065\r\nx-timer: S1778315058.842030,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 24180\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":236038,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65490)","md5":"91b1fe7d0d2888ddd2cc1ae1d338d2bd","sha1":"255d31e4251eb18b48e352d4f236ac2ec2a85a34","sha256":"e19d2eef51a35113a4831cb8aa4ccca55e5abfbfd43827caf050849d66f8702d","sha512":"35b2b1162ccc791215ae8d9d244fc42b2129800925fae4163a3c45c92cfc4ee6d871aa3077ef4dcfa667bca97b665b4a3597f270f672c09cddb8a64213acf393","ssdeep":"1536:Ld1fPBcFdFgF7FW8RT8RX8X98z98pl98pgv5BencLCZspnq6kMgLdvHIhRGWdHH9:xv5BOwnq6kMg5DlxdzQ","tlshash":"0a34a1d526f2552b645e6ee2f4c31848fdac43dc97226f8af00e79cd85ca1a60dfd206","first_seen":"2026-05-08T18:42:11.944907Z","last_seen":"2026-05-12T17:35:05.261995Z","times_seen":787,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":60,"dns":14,"connect":15,"send":0,"wait":13,"receive":5,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/ro/img/favicon.ico","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/ro/img/favicon.ico HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBWVDFNVUVuUzZPQ24wMDVqOHVBQ2c9PSIsInZhbHVlIjoiNytOKzgzcXVHN1Btdy9RTzBvdDJmR21GRjcyeW9qcXl3Nis2cE1uNlNvMWxid0JWbjdrMlREa1JiZzhNYTlRcy9hQkVuYzRYKzdMcXlQMFVPV0JvMEI5a2tSRFFpWWF2ZkxUL3MycHk4cVJueFhNTjhhU3RlQnFEVVZVR0JvU3ciLCJtYWMiOiIxNGI4ODU0YjE3MzZhNGQ1MDQ5ODhiOTI5ZDcyZmU0MzUzZjQ2MDU1Y2Y0MDUwYjBkMjEwZmRkOTc1MGQ3ZWY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9tcWl0ckRETFJ6UjdicUpHUFAzWmc9PSIsInZhbHVlIjoiTzlRVTdxcHlpRktrb05vcE1EcVZQVmhhams0bVpIbXJBS2VHMjZteUJhS2pqMVBDLzN6ZUFqTCtjMkpOOC9RalhBaUk1cnZpcnlkSmZQdi91SmF1Q2JlNUlNODljUEtjNUYrNGgrYmNFR2V0RWMvWUhWTitvdml4ckRRdDJnSUciLCJtYWMiOiJhMDI1MDRiNDE4ODkzYWMxY2ZhNWI2ODdhNmEyMDRkYzU3MzU5MzA3ZDVjYWU3NTgxNjU5ZTQyM2Y2YjY4YmU4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XLT95BwZLmBM7Tn2GebNbd9ysXVbA7VkUlXmgANFQ2xxdbS7UhUFi4MJhSBZbeiSgTgRtF%2B5Nl88jhRZWEJcJKqi7pwCSGhmBOoCqL5XRnKQu12i2QmFIMYixaHOalWewbGw\"}]}\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:02 GMT\r\nlast-modified: Tue, 21 Apr 2026 18:23:11 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e97fdfab515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"796b3b95f36c92684d4fd549a4dc6354","sha1":"05acaef055c2cb5d6ed804c105e580412e5a3981","sha256":"f784562797d2c1ab758d272ff8986573a2076dd92d2815dd60b7469dbee0ccc8","sha512":"22de136b7e723e3839b88ea650e297edd751924897c62145018da6d359612690313d2887c3c916c514b2ea705e9a616ecf337caff4927a6be8757fe87d5ee1cd","ssdeep":"192:3RDhmE7/rtdE7KmDbJyLfjCiEiPSBn3yppzrOcSj02Guu:3NoUE7zqzEcSB3Qicw02Guu","tlshash":"01625c00a5ebf40dc2a68671ce34d1fda1e48c208464429616aa3fcf1f79af99d92325","first_seen":"2026-03-20T18:52:09.197203Z","last_seen":"2026-05-31T23:29:51.448626Z","times_seen":34,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/sv.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/sv.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lLZjrk4XxM6%2BuuKZJF1V1Br%2FsUfkwMqrnPBMMUQTw8%2BsbarDenP42MBi3DhT3u6tnJA28%2BHF3R59slq0s62vlQrChkkC3%2FGzKacSQarGnA6%2BpQ5rbB0vaWlXGa4oHOiXPZ%2F6\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d97b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d7b2e74f61e873c0fb690155956025e","sha1":"b515a34c1884d45ef9a2b7f3ebdf731a0613e1c8","sha256":"4a271da0e5fbcda6d2d15092d8a564e8ef3d36ad507215563ac2faa0e8833001","sha512":"e2ccfb1f70a37129ea1a51b5e143e103904df03d6dfd5966f169d13222bd87a2d54b1ec21ac28ef3ce09c1d853f07c16eae7190c263c0e250506ecb8abdff54b","ssdeep":"","tlshash":"97e068d0902ec60a9e1507b95fbc70ca4232b08e298e00fc70c12528f49e7cf2810bb9","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-25T06:50:03.078475Z","times_seen":5416,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/dashboard-assets/css/disclaimer.css","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /dashboard-assets/css/disclaimer.css HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 08 Jun 2026 07:43:01 GMT\r\nlast-modified: Mon, 27 Apr 2026 14:12:07 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMPAVloOzL2KFzCI6LNupKnA0ipWV8HBstxtH1hpL7QRim1TZk3O2Z%2BX%2BgNwRRDH7IShcizvDOhTRESgj2kVPV9%2FjrQvIFtzV21M%2BWjG0Ynd6xE6fgcujF%2Bhnh7Z2MKtUcni\"}]}\r\ncf-ray: 9f8f4e8fed77b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"81157dd8c0e81ac2b6dff5a554dff6a1","sha1":"4767f0372c03eb2db3cf2705c15fd8bac00bf423","sha256":"1b576ad8f27ee3d9bdc8beef2df0ea289bd98632237049bd9580e57ade70ea5a","sha512":"3e9ed8987ed15123623ea8a153382be1995970e9217900532e9caccbd2398218553f779fd80bb60c524325ecc11880729eadbce4f08020912c55267abb8ab2ef","ssdeep":"","tlshash":"3b31a0df25630a11788dea9c5fa643455a248087e30ec8593fdc21f99f4e3d9c922b9c","first_seen":"2026-05-02T23:33:09.791669Z","last_seen":"2026-06-25T06:50:03.077963Z","times_seen":986,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/lazyload.min.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/lazyload.min.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2475\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CdJanA5stEGSDTrkcppKzSelEpbyWsIOROYQ9LO0jvRsae60DuFNKA9uT9kWhmj8gjaLmugZkvUJmcQMR7AZcgfJDoPdlvuz%2FlkStGCp8wgKxDo5ulYFix1I5CEHxNVujskM\"}]}\r\ncf-ray: 9f8f4e8fed7eb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"02904458ba58d516134326a81c45c920","sha1":"bdbef500dae9927c7018801285d8b07d4aaef92d","sha256":"482427969bb13fb83dd24449a53868f8f51239ad684606639991592972bdd234","sha512":"3198a5ad2e3bb2f4814916b73f0a7316dd070184e201a40b8c53eb98473b3d791b71fb2c399e6f8f3ae6be8045532dc6659ff9cf590cd62bedb61345721e8ec4","ssdeep":"192:Wrr573s4TW1IDJTspjUAEA/UcdvM5khyLPkO21RnaUhklOx0dek7jQMiZtjpSNju:Wrrps4TW1IDqUAEEM5WeUaQFlbtN7","tlshash":"bc52cb8ba2f22438531bf024692bcd097315608f5899ae923d1d626b5f49b39f7f4fc4","first_seen":"2026-05-03T18:32:03.559102Z","last_seen":"2026-06-25T06:50:03.064305Z","times_seen":983,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/en.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/en.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fp6QBY%2BwyPCgYZ1WJGbbF3IfhD8wnOHodq7S02ahfudfY0jJigQDoTJAKUA87s0qPiDM0c4X51XeWz6nEJtaGM7lf7Fojwlmr3ysQb28j2Xbl%2FcD5CiTLAsdAvlvbPU5H5qw\"}]}\r\ncf-ray: 9f8f4e8ffd82b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a60a1cb88e021acfa9dae480687c55b4","sha1":"0badf2ca702eb29df29786296160d68ec247af9d","sha256":"c1fcc7d1f18d3597c793170b12cf568207e5d13ad0c2778fd165d33be41c05dc","sha512":"354c148d992a22b729fa7b5736d0f3bde4b477aeaa9d157d692fd190dc57f566f11e2741775534f5a69c3c499e3d8482da01800db5cda5bb95dc5ad49ed88ec4","ssdeep":"","tlshash":"c821ddd2495459c08d8a037cdf1f6bdb72335cce3a584af832d53a165d90bb7341ad85","first_seen":"2025-04-08T10:05:49.355682Z","last_seen":"2026-06-25T06:50:03.075469Z","times_seen":4553,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/id.png","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/id.png HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 351\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 09 May 2027 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKL1wUN%2Fa6dDVDg4cR6tpJENrFKwulUjfiZnWYaFvhr9Z4eAF06eTrOdY1MV1bx4DDRqlbVEB7C92p7qxQjmBHaln4%2BmsEzYZSIsuUM3vhY9Mx72564Y0lXsZEtDRBHXfSJ0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d93b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 13, 2-bit colormap, non-interlaced","md5":"fd273ad5f3d1e33a14e6fd37860a58a3","sha1":"a0891a0bb126e310d6f963108c875c52b5f0db5c","sha256":"1fce31ae1ba50ed9e3e01f06dfe4866bd4132847dccbc1de171b455c990636e8","sha512":"daef9968e8706e62a91288c11f8573533868e91a8d858b50bb6baae7f42b30b3c0a97b49ee902c4f28285bfdb6d049b910a997c14af60f495e32f8c16876edf7","ssdeep":"","tlshash":"35e020e1b1709ed0c5472325a5172240fef3ca094fe24504ba69e1448d18fcf5f747d2","first_seen":"2025-08-21T23:09:42.483866Z","last_seen":"2026-06-25T06:50:03.068184Z","times_seen":1711,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/is.png","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/is.png HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 3691\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 09 May 2027 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csd75T3K8C1kUop3cUtp103D3Pgp%2Bya9xtk9JGFmqYjB76VcIHJEenzeUrm%2F2BONxAZwpPjIZ49hKjT78Y53aYRJgSFkDOz8Vp3SKzywasJ4qChGxWtYRLLjCEMqXknnReNC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d90b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"49e6492e69d8e5d94a9ba3dad3d5f6dc","sha1":"48fe4fa67e8180002566572f346ad45118103fa5","sha256":"be6b2aff9deb6971c3a30c41eb4480a30a0feb25196052a646362c10ecdbd6ef","sha512":"bda45925b0bd84baed7fd41faa8136fc1d8d94eeec6d7518328f657695c1dab45570867f722cb52952b7d5cbb5cd1b6071f6e436ef1a091d89247a422981b6d6","ssdeep":"","tlshash":"eb71a5fa191ee567a4d52a9dd67b28c6cd618431c019edc28f30d114ae6e04f8acb5c9","first_seen":"2025-08-21T23:09:42.451261Z","last_seen":"2026-06-25T06:50:03.062629Z","times_seen":1712,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/tr.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/tr.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MeuV10mNJlHnjPOxjHvU7E7jmB0ySnEwAt85SKwULioD3IqZAQEwLs8yH90O5O90P7iONjl7ihaCG%2FshrRHLI61Iznf5wNMG0lZDaV8nKL%2FInE38w1jiT2Oamlus9pmbjJA0\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d98b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7af14a6fd5253f05724502662d478fac","sha1":"df6f03167492046dd2f02e3e005e66201f80ceb9","sha256":"f101fe5cf7c2fe25bb1d2c7efcacb8acb52c90561497576f2f16be8a5d628315","sha512":"a1b4e0fca3d92adf4b6bd1473bfaceb5d1877c682378f84bd862e54927c9bea34b0781cb4e1cc5d44ce637887ac93a30465496e63b94169ac15cd1c155396802","ssdeep":"","tlshash":"c2f0c0d91a78c4ddbf4647314d3db0d92639209f399900b830c96529ea6a24b2401904","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-27T17:27:11.184542Z","times_seen":5339,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/loader.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/loader.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAobE0TPiQtpHTSZrCZqw4Y4ixqFlRoD5VQNjJOMvK8%2BkErOxK1pZ%2B%2Fw3rP3hPCnrl9wj%2B3gkMxXpKVwS2EjDCxrZ39%2FexpsVIDAD%2BBJ0zefirbz5vL90SS2ZJA2M7Q80dc9\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 14 Mar 2026 21:28:22 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e8fed7db515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":656,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7495dbde5ab60ac459b25cc5c0217b0f","sha1":"a3915023aa8e39ab95d7417eef6bdcdedefde3ca","sha256":"80da25369b4c34a14b7deac6d1ca96b307bb42e738f41aea491ccf993ac946a1","sha512":"d95ed327c8180538a84de3b5b3a5fe5d2d261d32db8ceccfd978ecbd999f1ff24cc81955ca6e6482746dc8e951df3019f84457874652e13fff3454458d03c23c","ssdeep":"","tlshash":"aaf0d11a231749a48bf6c66ba3718381febe6133e445d486359f74c07f709d45065cd8","first_seen":"2026-05-03T18:32:03.601612Z","last_seen":"2026-06-25T06:50:03.060349Z","times_seen":984,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/scripts.js?v=20260329-card-hover-fix","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/scripts.js?v=20260329-card-hover-fix HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, User-Agent\r\nlast-modified: Mon, 04 May 2026 16:47:04 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2475\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pO%2BDMiQVIneFEr2u4Zd8Ue3H8CLgOc3DdPGKahUYHUUTdGaGrMlipvUOy4M2207tjwhEQNlPFDvQnsFJvEewtQ4rbhPavbSPomeCtkGFlwT%2FqnrMPDZBrzLZGkPITY5Bh1ia\"}]}\r\ncf-ray: 9f8f4e8ffd7fb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8260,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"5027dd34bbabb7baf24a353d73d95dc4","sha1":"069b7ab6533d9ce490e3562f383c3787f4193b04","sha256":"11f21fea558292de4502dd467e89d84ae0e998fa53aa3eb75f5599302463d617","sha512":"c471a8a425b49565ed9c8f106466d01f754ec9e61a994dd441f452a61800a742cd485b334a6b004354b78eacd802c7f7cbb01b3a30993718fe06d02379b2983b","ssdeep":"192:5vaUOUNrDeAHVSx8x70XkyEeiK6cthSiQGfkDf9Idm:5rOjAHKX1TFxtyGod","tlshash":"1d022f6a65b61436403311af9bcf825a2b1530c7ba05eead3f0c83042fc976c59f1be9","first_seen":"2026-05-06T05:56:06.68471Z","last_seen":"2026-06-16T05:28:50.797201Z","times_seen":585,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nage: 49881\r\nx-served-by: cache-iad-kiad7000098-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 53, 6753\r\nx-timer: S1778315058.000961,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 216871\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":884257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"f3cd002d7a8bb1f08dc8f9a3087a5038","sha1":"c9cb47885ed728ccfc879ff1ffbb9ff4e76c433c","sha256":"db6784366ffabeec756ece67d46576ff6e7b594af5f4154696dd59436ed72751","sha512":"055cd95523ecf58ed71bed96b849c42143a5723120cf74f213416d1d4e390b80f63b579b5b613968588fddb5dac554882ec08fb0ff1c7fd290ad1827d849d202","ssdeep":"12288:EdQ3D1znp2j/IjzF6H0n+HTpfxBVewAZpR+o7EzGJZEyVBIDO7tmMKOAis1PYb+j:/rp2sMH0n+HTpfog1stimGgo","tlshash":"4c156bc671d6f43181a645a5a47b1203b33e169cb80d878cf03dadcd2a9d945a2bbff4","first_seen":"2026-05-08T18:42:11.933835Z","last_seen":"2026-05-12T17:35:05.276409Z","times_seen":789,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:20:35 GMT\r\nexpires: Wed, 05 May 2027 18:20:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:06 GMT\r\ncontent-type: font/woff2\r\nage: 309822\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"4f40f9c745b49a141e612eff59f3a917","sha1":"f19c314aad546b6a3ade9ff335318dec6e7a6d37","sha256":"3cad1d144b870d6083c79131c4817b2bcf3b4d76fc4aaeaba2eec295fbaa5cb1","sha512":"63bd4fb636d150b58801a6bfa7b5e9499fe8012c9cbaeaa5313fa4662f6d4fba8eed252b4c9ae24f22dfc72225c9fdbb43236b76096850f391d4494230b1e0a2","ssdeep":"768:nH89JOAPM5r9V1tqir40IKkgqy1g9HbSMPCVGyaalG2:H8fOltjU0IKqy1+GV0yaaz","tlshash":"a703019b60d5afa3c6db1060d74de6538820016e9831e3693c55be1b7cba688f2448ef","first_seen":"2025-09-17T17:21:05.707315Z","last_seen":"2026-06-27T14:57:51.071886Z","times_seen":2454,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":328,"dns":7,"connect":11,"send":0,"wait":8,"receive":2,"ssl":307},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:17.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\nage: 49881\r\nx-served-by: cache-iad-kiad7000098-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 53, 6751\r\nx-timer: S1778315058.963677,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 216871\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":884257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"f3cd002d7a8bb1f08dc8f9a3087a5038","sha1":"c9cb47885ed728ccfc879ff1ffbb9ff4e76c433c","sha256":"db6784366ffabeec756ece67d46576ff6e7b594af5f4154696dd59436ed72751","sha512":"055cd95523ecf58ed71bed96b849c42143a5723120cf74f213416d1d4e390b80f63b579b5b613968588fddb5dac554882ec08fb0ff1c7fd290ad1827d849d202","ssdeep":"12288:EdQ3D1znp2j/IjzF6H0n+HTpfxBVewAZpR+o7EzGJZEyVBIDO7tmMKOAis1PYb+j:/rp2sMH0n+HTpfog1stimGgo","tlshash":"4c156bc671d6f43181a645a5a47b1203b33e169cb80d878cf03dadcd2a9d945a2bbff4","first_seen":"2026-05-08T18:42:11.933835Z","last_seen":"2026-05-12T17:35:05.276409Z","times_seen":789,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nage: 49882\r\nx-served-by: cache-iad-kiad7000100-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 62, 6771\r\nx-timer: S1778315058.285657,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95371\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":326736,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"0740d12309dfb731b29275d11664361d","sha1":"d3bbdfebc332934846d6e86c64d26f86e3ed1d15","sha256":"1b0dafa49d7018694f3d2619e015266663ade8d68596ae633922558bff2ec36b","sha512":"b6b1ec00e23c112e3ef9d7931f3bf9d7fd36d01b37a3f261f12c18c19ba6c93e1b99b410bb65374d7ba6b539981c1d252afb59acc2a99ffd1d60282fa35bb388","ssdeep":"6144:dxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/l5lN:dx/85ucTcProN","tlshash":"bf64f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-08T18:42:11.943066Z","last_seen":"2026-05-12T17:35:05.256088Z","times_seen":789,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nage: 49882\r\nx-served-by: cache-iad-kiad7000100-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 62, 6776\r\nx-timer: S1778315058.420667,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95371\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":326736,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"0740d12309dfb731b29275d11664361d","sha1":"d3bbdfebc332934846d6e86c64d26f86e3ed1d15","sha256":"1b0dafa49d7018694f3d2619e015266663ade8d68596ae633922558bff2ec36b","sha512":"b6b1ec00e23c112e3ef9d7931f3bf9d7fd36d01b37a3f261f12c18c19ba6c93e1b99b410bb65374d7ba6b539981c1d252afb59acc2a99ffd1d60282fa35bb388","ssdeep":"6144:dxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/l5lN:dx/85ucTcProN","tlshash":"bf64f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-08T18:42:11.943066Z","last_seen":"2026-05-12T17:35:05.256088Z","times_seen":789,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-09T08:24:16.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: max-age=3600, public, s-maxage=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; expires=Sat, 09 May 2026 10:24:16 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D; expires=Sat, 09 May 2026 10:24:16 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TT79EWdGMOPJOqCeJqj1pELg%2F7ez5Yvbp7CACTif8XJ5q2HznBG3mNjzSRyW6ccSEGKsvYosWq1TqVcGBF9cvIK4uB6GIZkdt6YGQ3oz7SMc2n16G9mUVawGu%2FByqoJZauT0\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f8f4e8d2e9fb500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.1.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":165510,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (522), with CRLF line terminators","md5":"a8ddd037d4fdb370b62afd3794c29bb2","sha1":"04d6427dd4844b5e9ef364a59e5dec6b3dcd2cd0","sha256":"012aa0cc374905b0fe738a9b0256dc87ad473e3e16b037b5c76dc7e88ce22ee9","sha512":"a27ae0bf1af215569142fcd3fdb642d411859ca97d67ca13c8b9ad9f970a26943c240e0ea13502d319fae5f96165e83e30eede5cf92f4ac3781513332912cdd3","ssdeep":"768:/AFE2bAz2lNKtqyJdlRldROtF2B166VGG9NnBN5dOGQqc/br/nv783voLPqk7sUO:4l8AGdRX73XVdTRoOaOljBNIvfGYy","tlshash":"10f3943216c519261233c1a1d6acaa9eff47931fa3cba502f79c12533ff1da09d6b194","first_seen":"2026-05-09T08:24:58.049125Z","last_seen":"2026-05-09T08:24:58.049125Z","times_seen":1,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":248,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/ro/css/tailwind.min.css","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/ro/css/tailwind.min.css HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 08 Jun 2026 07:43:01 GMT\r\nlast-modified: Tue, 21 Apr 2026 18:23:11 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Oe56XuPgr7nGHKgUd1TJH4ExnaASHSidyiLLu6EHwRmWPUqhrvN6JXVHl6eME2Qsmrf1WPle%2BX6Ius5%2FMQU1WYxBBsBkdLxhvBR7NinBqq5WFg0AajWNBpARs%2F5ixRJCyH9\"}]}\r\ncf-ray: 9f8f4e8fed79b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":95031,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (338)","md5":"659d98ce787484bf73ae3be9b9f409a2","sha1":"2126c85616631cadf0dbe0c15c892e98be9f28c4","sha256":"8dd24d5fdaaf4849b54f1e7bdc59d8f5c098a79f51437c8de032c2eb3f7ebe21","sha512":"7c6ffdb4d4b39c5751653d9e31f8a72d9fd5b4880fba1cef6d377d7d80b84b5f9497813ba26c87ea55eb578afe8765b0e367d6fe554bc8f4bedbd964c5fab466","ssdeep":"768:w9NKXg9rS7N7sa3a9r4oscQxUSnYdjgZonsPDDjSQZk8RLSNKn5MVRkYLk078j8H:kaK+TeSab0g8RWM5+d8cd71","tlshash":"0a93fe17627389ba5d27e0be37ee91193339a047991aedd5becc21018fc52f459e2f08","first_seen":"2026-05-03T18:32:03.493891Z","last_seen":"2026-06-25T06:50:03.076986Z","times_seen":807,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qpJy_KZA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qpJy_KZA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:46:55 GMT\r\nexpires: Wed, 05 May 2027 18:46:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:28 GMT\r\ncontent-type: font/woff2\r\nage: 308242\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34520, version 1.0","md5":"ca0ac9a7afb2bec9eec3cef061cbf20c","sha1":"905455935b875294bb14430b4ae276a4cf6de1a0","sha256":"bf9ad89e9fe6b809e0e867557e05cd1d65cc6b065c2f8ea0ccb6ef89bb922cd3","sha512":"a808476da20babfa34e2f5906de1658492a190501aec6ef702a21440e0c149807b07529ca406fcb0c9dbaba853f89bc4b334833a59a195a3c0c6e333b63fdc35","ssdeep":"768:m8Q1C3/MBbdlkda7x7lwXD7VLLbEIU9lkJocqVyIl3U8McTfwmkP:1nPMBdlB7yXD536uocqIYE8nwmkP","tlshash":"3ff2f1a32ee934eaaa26a83fc5255094d6e9c13f138113423ff6787a5d1336990c0dfd","first_seen":"2025-09-20T19:54:46.37001Z","last_seen":"2026-06-27T14:57:51.063504Z","times_seen":184,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:20.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14763\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.12.5\r\nx-jsd-version-type: version\r\netag: W/\"9edd-Mk7PJTbzeB2x937UVL88JxWURU8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\nage: 1386406\r\nx-served-by: cache-fra-eddf8230046-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40669,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26135)","md5":"584b32aaa35c260a3b4ddacfce274a42","sha1":"324ecf2536f3781db1f77ed454bf3c271594454f","sha256":"990fdaa51ed5c86f92d670ab5a79dbf7415f34900dc2f443c5a03dca94479475","sha512":"bca5c9cdfd2562a5a1d31e26c974022172e14ebd599e30d3daf091d27a266a820a025b2ea1e1329bf18be3489c51aafca5025db638631452fee03afedd8f8a26","ssdeep":"768:mYJ0FRsgH7XpwJxK6jk4ixVDQtwnixrUT2PXIh+vH/kvzas:mcgHl6Q4ixVDQAsrcGgmHMas","tlshash":"f603b52d6316672babfd8155f4e4a582de6f7a460944886c3dac8fcb0098dc379b3734","first_seen":"2025-11-18T18:36:54.272556Z","last_seen":"2026-06-27T10:54:23.141924Z","times_seen":1006,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1142047493?dnt=1\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://randenta-ro.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-27T19:17:39.714218Z","times_seen":16768209,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":41,"dns":3,"connect":1,"send":0,"wait":0,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:20:35 GMT\r\nexpires: Wed, 05 May 2027 18:20:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:06 GMT\r\ncontent-type: font/woff2\r\nage: 309822\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"4f40f9c745b49a141e612eff59f3a917","sha1":"f19c314aad546b6a3ade9ff335318dec6e7a6d37","sha256":"3cad1d144b870d6083c79131c4817b2bcf3b4d76fc4aaeaba2eec295fbaa5cb1","sha512":"63bd4fb636d150b58801a6bfa7b5e9499fe8012c9cbaeaa5313fa4662f6d4fba8eed252b4c9ae24f22dfc72225c9fdbb43236b76096850f391d4494230b1e0a2","ssdeep":"768:nH89JOAPM5r9V1tqir40IKkgqy1g9HbSMPCVGyaalG2:H8fOltjU0IKqy1+GV0yaaz","tlshash":"a703019b60d5afa3c6db1060d74de6538820016e9831e3693c55be1b7cba688f2448ef","first_seen":"2025-09-17T17:21:05.707315Z","last_seen":"2026-06-27T14:57:51.071886Z","times_seen":2454,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":74,"dns":5,"connect":24,"send":0,"wait":31,"receive":2,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088710213-4a2ac6e93a878991a4253d47adb0613405db5a5d34ff495f176cdd6e8689f087-d?mw=300\u0026mh=539","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088710213-4a2ac6e93a878991a4253d47adb0613405db5a5d34ff495f176cdd6e8689f087-d?mw=300\u0026mh=539 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"b9d1b06235f0f319bdbd6b0fb1a864f4\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nage: 376769\r\nx-served-by: cache-dfw-kdal2120077-DFW, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 83, 22\r\nx-timer: S1778315059.666457,VS0,VE0\r\nvary: Accept\r\ncontent-length: 24782\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":24782,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b9d1b06235f0f319bdbd6b0fb1a864f4","sha1":"473c28e86b040746e8f72a760a2700d1b47df6bb","sha256":"9877dee976c72bfd4dd22b9a55ae3996476d2712c0376401c353a16f4c67af0e","sha512":"a078adef9168896002bc81a334ab87e6264b34421a3d90fba5d05a30d875c54b841d2760162a51f3d7a75c470b8da6bf1ba4f51cdea1d129bbfa988b2b2bcd65","ssdeep":"384:hWOQb37w8WQReF7YkwkqdHnnqpdJR5/pwN32yf5vjtWrmglV+QW+VGAQfw:hi/wN2e2kLqdHqM2M7MrrVhWaGF4","tlshash":"d7b2f122dbf58ab7ad5442f02e49c31e195445cf6f82dfbf1a715a738b51230c9c58d1","first_seen":"2026-05-09T07:43:40.525382Z","last_seen":"2026-05-09T08:24:58.051924Z","times_seen":28,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/ja.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/ja.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=teFZa5TD1Qcxgc0NSIPXstMu7l1CmBLJBHUjsPL0ejUoaOZI8Nva5k5U%2BE1K8tl2KuwWjnA7c7pLSL%2BvoaEwFPr%2BDBSgGbDdn3%2FZp%2FQCLDG8NNhGkYo7nbIoBpcCHUgPjTxv\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d91b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":357,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b072ff9b575b2c9db1f40db4a8603ea1","sha1":"56c055fa39d04fdfbf8ca59c3186b982e301bbf2","sha256":"3cff261749f98b839faf4cbd34b7748daf28ed5d9377f3cb9929d6cc506665a2","sha512":"9a42eab5c883210142df99507c2cb0d4a2b8bba9cc91d87440039f0cb340d010b5137066ae28269ceb59e23b5901528506b4f3af4b49eec1ab405f1629a76a4a","ssdeep":"","tlshash":"a0e0c060a0ecc94c4e098b640b7c70d041a670dd268b01fc748c2668e98ebc77811a7c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-25T06:50:03.076039Z","times_seen":2505,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/jquery-3.1.1.min.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/jquery-3.1.1.min.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, User-Agent\r\nlast-modified: Sat, 14 Mar 2026 21:39:24 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2475\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyIGIi9vmp3%2Fqqk3VgypKBy%2FDkpAot8jEG3%2F%2FFPV%2FzwFWwjPIZIV%2B2V3%2Fg28ySaOoJTCC6cQfQgtn24tqoFs2yLkQZkTrRwbf2zvLnPwUAHvocyyC8ANTOriDUsej40zCdwD\"}]}\r\ncf-ray: 9f8f4e902d9fb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-27T18:22:55.046755Z","times_seen":144224,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/assets/css/form/intltelinput.min.css","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /assets/css/form/intltelinput.min.css HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: public, max-age=2592000\r\nexpires: Mon, 08 Jun 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:09 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvIlfDd93gD9kY1VeZxYyDzNiFbw3xOrhjVET8Nn0A0FMs4hGEDrSZlvUbJu4VuOPQepJDhIw6yONwrCMHBwFNhJsc%2Bqe3xk%2B9GUVJjhVhnwPaglMflVTw6ScETUqJ%2FakEab\"}]}\r\ncf-ray: 9f8f4e8fed7bb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f832705cac17afa9ac678cbfe89e1088","sha1":"89b2b08b07e41ec8b69bac2ada42b7323fd2ca2f","sha256":"b83ef02bff5c0c1d579e95aae90cb3f6f72f06c3842cbe3bbb22ed76dcadfa74","sha512":"7ac6d65b33659374567f020167802ddf89df4a32ad82499203ed60dc0162b6d623af0c4cafbf1dd37cc7f21938f209bd0d095029baf694692136692d64b09005","ssdeep":"192:mB/nPLIsL4L9LqTA7J9IADdTKQK9A3kZ0Y980F+ND7laGG7agLUJ/LZ5MVcH6EdZ:Y/PlcR4+T49+hFhLZ5MV3m","tlshash":"10829d1343b11c7ea61dc1ba3aea95b2733b188b34abedd3f6d920060f43551e1eac54","first_seen":"2026-03-12T09:22:20.73665Z","last_seen":"2026-06-16T05:28:50.811319Z","times_seen":839,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2089665044-5637b59c5f713beb5f6a2416a79f3bb4ab8ef85832073aff1f399fd384172033-d?mw=1100\u0026mh=605","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:19.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2089665044-5637b59c5f713beb5f6a2416a79f3bb4ab8ef85832073aff1f399fd384172033-d?mw=1100\u0026mh=605 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"bb992f8f31b6b359f352eec5a1bed661\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 804502\r\ndate: Sat, 09 May 2026 08:24:19 GMT\r\nx-served-by: cache-dfw-kdal2120063-DFW, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 108, 0\r\nx-timer: S1778315059.340773,VS0,VE1\r\nvary: Accept\r\ncontent-length: 36444\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":36444,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"bb992f8f31b6b359f352eec5a1bed661","sha1":"c6112751b90923286ed2928f385127421a4147c6","sha256":"aab4e83dcb290ef929d265afa683d2b1fe5e5f1ff799c50f421c23d20ce94c23","sha512":"91648622ac91d27edd4dd8eb283e0a12dd48faa1e9d178e33ff7d7cf8ba8bb4433589f9a8d2b0f20ea87bd99afaf9a1cb4195b7b1b3f1604bb78dd4476e72c32","ssdeep":"768:k+9A0N5LeTg3gIIAiQh9OMx0sFrWuwZus34QGn8hazpudP0RQaZrfI1g:Fa0HfiZMx3/KT5G8wzCP0fxd","tlshash":"6bf2f2bc02c4fc3de23d5df01e78d33b3c55c4961faa9cf8a246a52510d389e6961d99","first_seen":"2026-05-09T07:43:40.486838Z","last_seen":"2026-05-09T08:24:58.054045Z","times_seen":28,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/ko.png","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/ko.png HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1361\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 09 May 2027 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpPIw1dLDt24SLUjVBUy%2FWtZDRXsOSAa2J0YkAJQhv%2F4%2FgnA%2FVG3YmmiA3oYp4130tvPqSOQj%2BE%2FFF8IKsEENRWiGFODPie%2BGJl8UeiZVp%2B1zcIzGB0NJf%2FTGJS1tvG6b6%2B6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e900d8db515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ed87e4c8a4dd16c9c3f8499a0aaa28bd","sha1":"f818a0782047c159ed8e5cd041ad7f09e8fe52fb","sha256":"eb59eb7dcf155a7b38c8f4c9db869ed942bf55a4457e3f4ff0791be4f2c736d5","sha512":"bcf1992bfb1d0ed92e4393e0b85fe5c768ed29285d38a259d0cfb60827537b74d39a925cfc4df58ed8b478d5015fad047a211ec2ddffa5a69b0d08f5abcdab6e","ssdeep":"","tlshash":"05210bad1b7c302cd6f9c5799909fb01ddfb04040c9fa1c59129d6cc28c588b70d5436","first_seen":"2023-05-07T21:05:59Z","last_seen":"2026-06-27T15:41:20.258251Z","times_seen":5289,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"871a-JROK+GPirWm7Ca9OkwCUSfLnXMs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\nage: 374287\r\nx-served-by: cache-fra-eddf8230041-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12976\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34586,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18251)","md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-06-27T11:07:22.950148Z","times_seen":1625,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":1,"connect":14,"send":0,"wait":14,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:20.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /embla-carousel@8.6.0/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9f8f4ea5ff631525-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KPW5VKFVKVBHQR0ZHVJPPTYF-fra\r\naccess-control-allow-origin: *\r\nage: 2474\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 09 May 2027 08:24:20 GMT\r\nlast-modified: Wed, 06 May 2026 23:29:04 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8Ftdv+N9ebY2udt0rQTtXpm0vONp14Gw+ziwsqxhnmY=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17946,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17945)","md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-06-27T10:54:23.161745Z","times_seen":1479,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":27,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\nage: 49881\r\nx-served-by: cache-iad-kiad7000098-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 53, 6752\r\nx-timer: S1778315058.966963,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 216871\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":884257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"f3cd002d7a8bb1f08dc8f9a3087a5038","sha1":"c9cb47885ed728ccfc879ff1ffbb9ff4e76c433c","sha256":"db6784366ffabeec756ece67d46576ff6e7b594af5f4154696dd59436ed72751","sha512":"055cd95523ecf58ed71bed96b849c42143a5723120cf74f213416d1d4e390b80f63b579b5b613968588fddb5dac554882ec08fb0ff1c7fd290ad1827d849d202","ssdeep":"12288:EdQ3D1znp2j/IjzF6H0n+HTpfxBVewAZpR+o7EzGJZEyVBIDO7tmMKOAis1PYb+j:/rp2sMH0n+HTpfog1stimGgo","tlshash":"4c156bc671d6f43181a645a5a47b1203b33e169cb80d878cf03dadcd2a9d945a2bbff4","first_seen":"2026-05-08T18:42:11.933835Z","last_seen":"2026-05-12T17:35:05.276409Z","times_seen":789,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/ro/css/loader.css","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/ro/css/loader.css HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n565Q9dwOQmB%2Feh2v7pc5Nx2DecqsVMm4CPyw5a3v%2BiGOenTxoVvEXRFVDhQ6EIQv4sEoGnX9toLhdGD2u7AeSAvGW55QTTNJzIwebLbJf%2FfNzelyQQObRHkP3AJNDAcfbzk\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: no-cache, private\r\npragma: no-cache\r\nexpires: -1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e8fed7ab515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-06-27T16:37:42.907526Z","times_seen":8652,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/de.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/de.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IajLUe1nUebNHT4mErXSW2Vz%2FCkNtOiwBJ1KU4f1hEjYTdCGoPc%2FRoCj2Qen4KHtfmNp%2FqZzfgArpYS1lzkZt%2Fdh0HIITsfo1yqlky4kc3z1apsRCeyXBHE%2FXNv8pWuKRrFd\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e900d87b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51768606d83a265da9e7ee8efbb21edb","sha1":"b22c5b98344da8d3ea54ecb9baab4c5a5a7ebdb4","sha256":"8fcaa96d8835e39fa6a74ff4dc781d908112d46ceb8fb81ff37c433f390a4c8b","sha512":"cec42089404b17430bc0d8c7882cfd6249d4fa7401b538f1899b2d315d639cb6fd28cf33da34d91afc40572f5dd59aac75dee16b0c65aa1abf2e0b93bc779c3d","ssdeep":"","tlshash":"a7e02644e0e98d0a8e2607a88efc71d280a230cc12cc00ed72842528fd4e3eb6845be5","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-27T18:42:39.825782Z","times_seen":8195,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/pl.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/pl.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ieXo92c%2BI5q%2F67%2FSZ8nzfPSB27g%2FPP6G0iqqkMNHohisYILYvqUDywJA5v7plouH%2BKFOYHy%2Fcf0mu9wVIwwYHPHyWjSauj%2BXnVdDh5guAmt5vsJ%2FrTIG5l4jgJ58Vzoe8Ikr\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d95b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73699780fe17013ad360d5441cba044d","sha1":"3e37c78fdc79aada415a05c2275c0fdf9664f062","sha256":"e03d57c0f7db7d4dc8eb6a2bc359f3a40591b490130bcfa06fba08d514fbdb07","sha512":"94ef034160ec61a32cd5ce34621c993aa3a14f0fd5d60adb807f7c3c116060d45956297c0213950824c0886292669cfb2aec40c110e32e43049ba733490f6e4b","ssdeep":"","tlshash":"c2e0c2d5a4a9ce4e4e1407758ebcb1e9917270df218d04fc71c52a29fd1e38b2811e99","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-27T12:16:51.008162Z","times_seen":5678,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/utils.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:20.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@25.12.5/build/js/utils.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 63100\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.12.5\r\nx-jsd-version-type: version\r\netag: W/\"419b0-Py3EkUQ6tNnb9qvuiV2BQBlvCqs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\nage: 2615092\r\nx-served-by: cache-fra-etou8220020-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268720,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"e654fbae22a0762fa384b61fd03f1679","sha1":"3f2dc491443ab4d9dbf6abee895d8140196f0aab","sha256":"93c8dd85421914d3c09fdacc4b77730595202004a1d8c9ef7639c7551157bda6","sha512":"af44d0ca2f0ca731ecb7e535963c694710a3e887c8bbdfc95066f1fab72d5c5da66313e9097498d246b93a04a1b642fd65d591e80d325a72bb0f7bf5a5f8da6e","ssdeep":"3072:TklM0tDKjFs3OwPss3MwPky0zOt62xFMfM+dhvo4sUifhNyf4LtXKtofQVkmDmVu:TklMmDOW0IxFMfM+dMGou","tlshash":"fe44f0ebd63c973ba1d87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","first_seen":"2026-02-13T03:24:00.128548Z","last_seen":"2026-06-26T16:41:17.559106Z","times_seen":985,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:17.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nage: 49881\r\nx-served-by: cache-iad-kiad7000098-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 53, 6755\r\nx-timer: S1778315058.061215,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 216871\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":884257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"f3cd002d7a8bb1f08dc8f9a3087a5038","sha1":"c9cb47885ed728ccfc879ff1ffbb9ff4e76c433c","sha256":"db6784366ffabeec756ece67d46576ff6e7b594af5f4154696dd59436ed72751","sha512":"055cd95523ecf58ed71bed96b849c42143a5723120cf74f213416d1d4e390b80f63b579b5b613968588fddb5dac554882ec08fb0ff1c7fd290ad1827d849d202","ssdeep":"12288:EdQ3D1znp2j/IjzF6H0n+HTpfxBVewAZpR+o7EzGJZEyVBIDO7tmMKOAis1PYb+j:/rp2sMH0n+HTpfog1stimGgo","tlshash":"4c156bc671d6f43181a645a5a47b1203b33e169cb80d878cf03dadcd2a9d945a2bbff4","first_seen":"2026-05-08T18:42:11.933835Z","last_seen":"2026-05-12T17:35:05.276409Z","times_seen":789,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":85,"dns":16,"connect":26,"send":0,"wait":27,"receive":79,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/player.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/js/player.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nage: 49881\r\nx-served-by: cache-iad-kiad7000098-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 53, 6754\r\nx-timer: S1778315058.015308,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 216871\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":884257,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"f3cd002d7a8bb1f08dc8f9a3087a5038","sha1":"c9cb47885ed728ccfc879ff1ffbb9ff4e76c433c","sha256":"db6784366ffabeec756ece67d46576ff6e7b594af5f4154696dd59436ed72751","sha512":"055cd95523ecf58ed71bed96b849c42143a5723120cf74f213416d1d4e390b80f63b579b5b613968588fddb5dac554882ec08fb0ff1c7fd290ad1827d849d202","ssdeep":"12288:EdQ3D1znp2j/IjzF6H0n+HTpfxBVewAZpR+o7EzGJZEyVBIDO7tmMKOAis1PYb+j:/rp2sMH0n+HTpfog1stimGgo","tlshash":"4c156bc671d6f43181a645a5a47b1203b33e169cb80d878cf03dadcd2a9d945a2bbff4","first_seen":"2026-05-08T18:42:11.933835Z","last_seen":"2026-05-12T17:35:05.276409Z","times_seen":789,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Questrial\u0026family=Lexend+Deca:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Questrial\u0026family=Lexend+Deca:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 09 May 2026 08:24:16 GMT\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6327,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5a182b65e1da38541d4149cd43e8c979","sha1":"cbf5a24c6802d261b5a10a0552ea00c680350451","sha256":"63c600ce72c5123677f95af5a36d8360250d4d4bb1bec8d233bca877dff66fb5","sha512":"9b4dbb3d19f62de0611806f4add8756a2b30288d5fefb69410752077e6e37468998cd12cdae47c764477a25cd4e6c56ee8533f85734f7b156bd177c98c695daf","ssdeep":"96:cULOEa5SnLOEa5SSJc+ugLOEa5SSNDULOXa5SnLOXa5SSJc+ugLOXa5SSNDULOxr:cpRDCB6iDxBX/DYBw4DfBkT/bj","tlshash":"83d1da91046b9500eb5b1cc222cf7e32ae9f61657444c439affd18d8ecaed262366b0d","first_seen":"2026-03-12T05:25:58.277422Z","last_seen":"2026-06-26T21:36:58.100925Z","times_seen":1014,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":251,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/ru.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/ru.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4d4jrXQChDiArB6aPfsAyg1NIV7KY3eJVfUz3nanZPkomKaaG%2BPX4g0CQLy%2BI8ajVNvI9rs5xbWVr1%2B1aR4Br3MIPTqxZWhHqkvCEPkB%2FJCfyBo2AAKUQRQGAlTpcm3pgBi\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d94b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42103243a1d4c3f2e823e99f3c00aaa4","sha1":"1d95a227efb867c8b3dfa2902ea8a803f3fd3519","sha256":"0a720bc83f72d17849bd213570ed808ae6b430fa5f3d50dc7fdb32413f7ade01","sha512":"752fcf59700e20bed16831a684eef542a1fd525d73078c97894a6e7b3e2009296af1f4b31f2da100aa8403b3aebf3fff464cd8c1c6330a3b6da36796e2b70cd7","ssdeep":"","tlshash":"39e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-24T00:34:39Z","last_seen":"2026-06-25T12:29:12.402948Z","times_seen":5477,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/zh.png","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/zh.png HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 870\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 09 May 2027 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oi%2FJGNuDS8RBRFpkksJYbNLj4B0ONFm93cGqh2AccZH4iwCgYInMy1F08RWobPI7DY%2FHUAyGvrLFrmM7s4KoeHq6dJtdq0DBs4q8rCE3Xxyihx0LFLLAkzxu3gXi0nrMTFiY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d9ab515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2a2b643bc15c7363c9e58e6b47d7de30","sha1":"506ab44f76022397b3aa9682e8972d7944703d54","sha256":"c63293f5412adc096b8e492e88b8d8edfca5367a491acdd9071ef8d31b4ba9a1","sha512":"a742115cc74831e58f2607fda3ecdf88d8a01d1f9f19d784e1c46a24f9dc23f3a8b5f11251b1c6c911a53a18ee3a01d841e82952f7ab97fcc44b2a0673238e43","ssdeep":"","tlshash":"1f1196ca2450d5d7c2ea12e389ee4b452b4f4afc28560d886c151ab511df1d740e4710","first_seen":"2023-06-10T08:53:38Z","last_seen":"2026-06-26T00:00:04.242076Z","times_seen":5123,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088710147-f01cb730c3cf5f5a3c24f6c4305c91d0d90359cab1dde0e39dec000a7fda3914-d?mw=300\u0026mh=539","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:19.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088710147-f01cb730c3cf5f5a3c24f6c4305c91d0d90359cab1dde0e39dec000a7fda3914-d?mw=300\u0026mh=539 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"3f4f2478705a733b0eae671e8f23cef0\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 376770\r\ndate: Sat, 09 May 2026 08:24:19 GMT\r\nx-served-by: cache-dfw-ktki8620073-DFW, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 83, 0\r\nx-timer: S1778315059.009781,VS0,VE1\r\nvary: Accept\r\ncontent-length: 16880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":16880,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3f4f2478705a733b0eae671e8f23cef0","sha1":"2c6b3e9659651f49a614baeb7cb78913d74cad96","sha256":"f1edf61e2f997e4f24c643fb736f49912daab600d248370580a8205ab17ffde1","sha512":"78f20e70ef7d75483ce86450e3384d20796509ee040d7686ba18257c590f032cd8a6f4b3be2a8626a809bb7b3ef3b29beec9a95d386e0d9403ae1e076653735f","ssdeep":"384:bRwTSY2GAAGe0YeMQX3PA+LVs+f7w9eI9E360TjDBNO9:byfJs7fatRE360Tja9","tlshash":"f672e13d2d00cd4aea4f2a7be159d6e69d3d010afc21a6f35aa42f257c48d44dec4c66","first_seen":"2026-05-09T07:43:40.517834Z","last_seen":"2026-05-09T08:24:58.059543Z","times_seen":28,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/sk.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/sk.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2BDhEPLXtZOtjnKyP8IDEc5lfYASv19FkpwYQTLAafUMDGG9zP9je3CjBC58qmpsLy9jEMC8SJmghkPhHWsMKcUZBJYK0n0i73fQZ1aejWhhUvr6TJxmxWHk9JIG57AWPLoO\"}]}\r\ncf-ray: 9f8f4e901d92b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed3cf547a2f8579e45330fde3095537","sha1":"dfc6023844bb5a110c3d9219c82dd326940ae055","sha256":"c1b338efd99956c2ae0c62fcf559b2d956fa11f71751985d62c9942b061dad6a","sha512":"4ed0e6912bfa55a7bee5b4f6318c3878bff3bf23d5a220225b5e19d207d7f55bd816f06dfb8daf8a5eb4c2e266d0fcce8f40d0f797c81d97a2517e5eba2a3be4","ssdeep":"","tlshash":"193176c55178aa4849c7a76fde7cb8959015a0fd21f940fd7a4a470c956caceaf00cb4","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-25T06:50:03.070917Z","times_seen":5159,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088710147-f01cb730c3cf5f5a3c24f6c4305c91d0d90359cab1dde0e39dec000a7fda3914-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088710147-f01cb730c3cf5f5a3c24f6c4305c91d0d90359cab1dde0e39dec000a7fda3914-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"05c6880b5ebab5f84b2952791c2efc71\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 389358\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nx-served-by: cache-dfw-kdfw8210157-DFW, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 171, 0\r\nx-timer: S1778315058.031223,VS0,VE1\r\nvary: Accept\r\ncontent-length: 2996\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2996,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"05c6880b5ebab5f84b2952791c2efc71","sha1":"ece82dd02f1879da00ed8c2546d33642b7aa1a4d","sha256":"c7db5afcf9927082ba39c540d042ae930add3d2c00142531e558e8a30ebb8c8d","sha512":"6f6cd745a366f5de156f60ad38bb5ace52be519bb2f366d212132c3ca42ec38074029d83cbbc0a760071d9b4afb4c5126fd1497b338f4fe08e09a6ee326e8e53","ssdeep":"","tlshash":"cc515f51c59a8dd9f11c407b4854335502cae3aa6d003a5d2cee74d7174e4b3ed23de3","first_seen":"2026-05-09T07:43:40.479483Z","last_seen":"2026-05-09T08:24:58.060476Z","times_seen":28,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nage: 49882\r\nx-served-by: cache-iad-kiad7000100-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 62, 6775\r\nx-timer: S1778315058.393409,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95371\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":326736,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"0740d12309dfb731b29275d11664361d","sha1":"d3bbdfebc332934846d6e86c64d26f86e3ed1d15","sha256":"1b0dafa49d7018694f3d2619e015266663ade8d68596ae633922558bff2ec36b","sha512":"b6b1ec00e23c112e3ef9d7931f3bf9d7fd36d01b37a3f261f12c18c19ba6c93e1b99b410bb65374d7ba6b539981c1d252afb59acc2a99ffd1d60282fa35bb388","ssdeep":"6144:dxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/l5lN:dx/85ucTcProN","tlshash":"bf64f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-08T18:42:11.943066Z","last_seen":"2026-05-12T17:35:05.256088Z","times_seen":789,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/img/flags.webp","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/img/flags.webp HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28186\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/webp\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"6e1a-JHPdY1y9Ow2NjbjaGyegi0Qmya4\"\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\nage: 1286279\r\nx-served-by: cache-fra-etou8220074-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28186,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af30d041d95c5a83b016ec6812cda19","sha1":"2473dd635cbd3b0d8d8db8da1b27a08b4426c9ae","sha256":"0e2a53ec4d77d08efa8e8f5fc86b1c25e8f2af39d6b44334e1219ed3e0687a61","sha512":"a43b49d0a8830608a8351b1fe3afc5d468664ad79b674583f6e8f1c647fd5270181e9b1d35cbbbddc0285dc15b49e9d53f34a8bd414d32ae3ad6d659168e095e","ssdeep":"384:NmynJhMcWfubAG0nXDutFs4CIwMB7Po+NKC5NPQic7vmUbx2Kh4du2r0mRo3d0:NmynJhMze5CD+3PZ7AEZPyx2KhSRj","tlshash":"66c2e133be32a6c76d998ab018364ffa97354446bdd359c3a1f6ba98dd374c3294020d","first_seen":"2025-03-06T15:46:52.721855Z","last_seen":"2026-06-27T11:07:22.952985Z","times_seen":2913,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2089665044-5637b59c5f713beb5f6a2416a79f3bb4ab8ef85832073aff1f399fd384172033-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2089665044-5637b59c5f713beb5f6a2416a79f3bb4ab8ef85832073aff1f399fd384172033-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"0dfda471e26f44f375476a9b06530c01\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 1351513\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nx-served-by: cache-dfw-kdal2120110-DFW, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 601, 0\r\nx-timer: S1778315058.039195,VS0,VE3\r\nvary: Accept\r\ncontent-length: 1309\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1309,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0dfda471e26f44f375476a9b06530c01","sha1":"479c71e16683275111e39863ff292a3e4d61f396","sha256":"c4e6987db2cab3c50e7d29218d35e8a4ab00a656e4c1fdf3dada082b30f1e2b0","sha512":"12e4c723f02824b079eeff6380452ce191ebadd27a8f37f44637d3da9ca62ebc0c68f47b305ab3dbd9a8bee1e3e3329c1c4fa6381ca8a6f2940bc376ed0480a8","ssdeep":"","tlshash":"fd21b738a36a1990d06e2172995a423773d18f586669784c3c4773708cb4ca2af51f26","first_seen":"2026-05-09T07:43:40.507231Z","last_seen":"2026-05-09T08:24:58.061497Z","times_seen":28,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/hr.png","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/hr.png HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 982\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 09 May 2027 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3M0%2BZ30GMcHEGIiD8d0m5hYWrRx0EzzaoN3D8WtmAYsCpaTDZccpsAQgFPfhHlonkbWPlmjYD%2FSsmmyb1oYAbXuCVfQZ%2F8iiq3RlTZd6phHpmiS5CggHYn20EaChn386Fo4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e900d8ab515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"41a7b90f600ed32eefb5e620a4f653fc","sha1":"7a6ab7cfc55a1239de75e073430c9634d5c18746","sha256":"63e36970eea32e52849d7b4d3a15d1da36be12ad3078df8c2b848aa7e9baa19b","sha512":"004bddcda655838947c0922be1f74ac3833ca444f3c872c9432232e5660f7ca9288c87acf2d1df19a21a768ae8a04e3f67278f7b6be4998a5e0355f279ba92dd","ssdeep":"","tlshash":"261165dec411043c410b39e6ae9b0bd989b767ac43520a45906db49abc795043ee49a5","first_seen":"2023-06-13T00:33:19Z","last_seen":"2026-06-26T00:00:04.245156Z","times_seen":5134,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/el.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/el.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxC%2BXpzEl9zkJiFzZlWaw3NqVMxHelxI5FejkMI8XqNsoJbBtPo3plb5HOm0ozkEh9YFvVeLCc3t9QKl1KutE9fb0oEa5z2bdQJ5%2FZrCJOX9MTQF4fap%2FLHzpnuTo7hnlWcS\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d9cb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad2d06f8e09051f574083a3d00b0d3c4","sha1":"278327ff2ba9f9ff2075e69635576298e083a56f","sha256":"855ef79130c430a08f89dad91b7206b3d31b42a1b509000029c60b9336856e45","sha512":"741f41770f7a55e36f6b436b2518986a01a587236f08461c94bfd30a92004c6736b4844a99b46ab6363a95779d9470bc8b374e539a5858c6baae661eccbf884f","ssdeep":"","tlshash":"caf0599496e588c80f2f4e75c97c76d1103224cd6048c8aca0b43819f9053ff11a16be","first_seen":"2023-05-07T18:02:32Z","last_seen":"2026-06-25T19:07:15.301299Z","times_seen":2512,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/questrial/v19/QdVUSTchPBm7nuUeVf70viFl.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/questrial/v19/QdVUSTchPBm7nuUeVf70viFl.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20668\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:53:52 GMT\r\nexpires: Wed, 05 May 2027 18:53:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:44:45 GMT\r\ncontent-type: font/woff2\r\nage: 307825\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20668,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20668, version 1.0","md5":"0ba39ef25da1708d5ef30d83a36dd90a","sha1":"738e40194d1395962ecc952017e64de4e230c978","sha256":"89ccc12b1889293597ece5fe971b0bc352464a9f7ca870e4f3b473f5940a2025","sha512":"e659bfc87f8af905f4f7b249e24a9bc46a881b17136be68514c1be9bb724a4991aca2f18004f5aad42a1826c7bdb89d60950d5243ed7d5f352a9e91108e63c28","ssdeep":"384:1FAeuYSMqTQZwdmq+tFLgXFLx5PDnIpKdUPn98+eJzkGPe4b6p0b7:1FAejhY84N+vux5PD4rleJzVP3c0b7","tlshash":"a892cf096813426edbc25eb34fd9fef6b02047a615ce3799a53aa5353f49437e8f0181","first_seen":"2025-09-12T08:18:52.008104Z","last_seen":"2026-06-27T18:47:21.681391Z","times_seen":4632,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":101,"dns":3,"connect":9,"send":0,"wait":12,"receive":2,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1142047493?dnt=1\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://randenta-ro.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=vdpXm_p8TZXef685yxvetvKDyWWz7m7aUzV.UqjrbbY-1778315057.2881935-1.0.1.1-cx.kvDS4PTY6hMXnDyuZ6840jtXgmjMAnwjEPWDS.BO.oeewkxG1v32WuH_AMoOawmQZTkVXq_uxz9MDvk5ZNXJPvj6wzsPh.Y7HrQvrbCPUbEVH2V.Bx2aqmTaF0W4b; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 09 May 2026 08:54:17 GMT\n_cfuvid=IIRPrrAoG7mqUDHp2IVK8rF3MM_TPHj3nignQbJ_eoM-1778315057.2881935-1.0.1.1-3j1hp0Jnj_J_JQkAJ095lignp9Jc6yChVtKzqmeBi_4; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: 9f8f4e940ea81a30-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-d99d88675-n7k88\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-d99d88675-n7k88\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000070-IAD, cache-bma-essb1270047-BMA\r\nx-timer: S1778315057.302928,VS0,VE123\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":20125,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11795)","md5":"bf6ac536d85582caca6531e61d8897bf","sha1":"06283b57a882fda9bcb9f09e24d1f3390a3fa7d6","sha256":"5f75157a99bd27d91256a4e7da003151d374cf4909beab7f53f1213094e70db8","sha512":"3c43d5c5fdde7f36aec28303114a46ea02e2a65130e000339aa8e8528bd256fbc59f3054666c6d10a76a0fa6468bcdbbebb7b0dbbefa718ce5e6e1fb2c311f02","ssdeep":"384:PXNdeGjWtXUgmHhejstQLNwcfMrowXmRaWSPqOdM/+MhHFgfEL7:FDh+LNwcfeIaWSCOdehHFgfEX","tlshash":"c3924b33a8c0b8205be455cd0faabb053465215fad88cb48f15f5a5c2bef8d7671b4d8","first_seen":"2026-05-09T08:24:58.063506Z","last_seen":"2026-05-09T08:24:58.063506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088710341-20f068504b46d97707b78818288a95e4ec3805f9922e2da5ed884b1324fa538f-d?mw=300\u0026mh=539","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:19.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088710341-20f068504b46d97707b78818288a95e4ec3805f9922e2da5ed884b1324fa538f-d?mw=300\u0026mh=539 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"64809996e8796a6304ba1496728e3f46\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 376769\r\ndate: Sat, 09 May 2026 08:24:19 GMT\r\nx-served-by: cache-dfw-ktki8620069-DFW, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 80, 0\r\nx-timer: S1778315059.499239,VS0,VE2\r\nvary: Accept\r\ncontent-length: 19358\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":19358,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"64809996e8796a6304ba1496728e3f46","sha1":"79e394c7b9ba73803aceba7a0db7e235a93d3a24","sha256":"a16c8f6f4cbb959b9124191277e020423820a930450c1b4b32ce21e199a638c4","sha512":"9f098ee2e01834732a1bb2f55eaaaf3fc6aceb23291ecee8cd3a2073dfe6e6a7c130eaa4e6c8a7a5ea60d794fef79506bc92198918b99d8d037ae32092c7be5c","ssdeep":"384:PePPf5Jz93WepHscTJa0VTvp6A6oqlm7CbmDBV81lYCcoHw7Dnj:PeP3LNTnYAXqwCGk1lnruj","tlshash":"3a92d0bb1c439b3ad82db4b24fb780949a17cb1646c2f5f89012ac07ec5ea7d8c44f56","first_seen":"2026-05-09T07:43:40.475213Z","last_seen":"2026-05-09T08:24:58.064551Z","times_seen":28,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358350/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:19.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141358350/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=A637jOQl3XUYUCAYiWu4ir_N9zRtUpSqyeWPZPc1bTQ-1778315059.9702945-1.0.1.1-_D60diFsyVZvXc7Z3acwm4L4eUNyPH0dRvB3ClOTVypUzZuqRzAGYJaGDpex06uuioOET2tR0hhG.b8wl4fqFsVBxUl7jDULMpcVHsuxBc_Jbfzcd8GlOSgDenxhmO4s; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 09 May 2026 08:54:20 GMT\n_cfuvid=ZVoStY9qOxHDmPbgmGG0Z0qLjTZ3ImM_jKMNNNK0_ng-1778315059.9702945-1.0.1.1-jYE4AzRDgKo4TsrS_b32RS9FJogXatJg0Vg.yg9ouAE; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: 9f8f4ea4ccf8b1b8-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-d99d88675-fc9kz\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-d99d88675-fc9kz\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000145-IAD, cache-bma-essb1270037-BMA\r\nx-timer: S1778315060.988751,VS0,VE222\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"870b486a54858aff06ffa2d7df5245f3","sha1":"095ec89db63edebda11f17f5dfe558737cecfbc4","sha256":"709234e5435e4310d7e3f318ad0e68620d4883a493aa68812383b325d481f297","sha512":"ad7c840bb9acb7d764668f986a5ea5e123fd3dc84f28b4f3e28e6e9390a3c226343cec5c251714a43c62141a96cd6112969a1606136dfbf27d767dc07b786dbc","ssdeep":"","tlshash":"d901fef713d418f6a392a3da9eccb01b5317916fddc168d9a92b5c0c4bed0d738442a2","first_seen":"2026-05-09T08:24:58.034002Z","last_seen":"2026-05-09T08:24:58.034002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/dashboard-assets/js/disclaimer.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /dashboard-assets/js/disclaimer.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0yVxRk9vzpsxcwnHwTnhKcP5Cpaetj04JG9b4xG3922rxTjvnAzXPfOiP6VP%2B6ykQCEO52Cypyywufwj%2FlvZ%2BgLLEyPbFf8isjIuRUFeMvrNdFKWISwHiuvxFIqD9E9duwK\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 27 Apr 2026 17:27:37 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e8fed78b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":854,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"d31bf8a0967d5a38631c38691e66540c","sha1":"f4e654b84b034023b5e3db513087dd9205bd49ba","sha256":"d6712b0ff373f0cf02d1c81ff5a6fb945b47d5d173f02e41d1da28eee52b39d5","sha512":"3d4f2750a27f99297636d2e655b9d157d70113d304085e8ff716a907a7abd01252fbbc7ea521f695b6ec31bcb7a9198e0fc378ee71480a52abe2ab83f94b8181","ssdeep":"","tlshash":"58014c9e79e236b1a2c7eb7c19ab530566314003d11c85053d2c6262afa4f6816b3bc9","first_seen":"2026-05-03T18:32:03.521288Z","last_seen":"2026-06-25T06:50:03.054394Z","times_seen":985,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/it.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/it.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6wKZWB2Yi61siK48rohhXtiU9P4sgabiRjiqbiDtL%2FZqP62pznftlWVpyGUgKLQsUja3jGpVMBrhN4qy%2FeG%2FO8kKx6I7fDVrpbXfXttQfo9mC8KFBCPV%2B%2Flr6KH%2FsVhh7x2\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e900d8cb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34ec214f5547e19d4e1fe9d0d638f9c7","sha1":"7ef49fd31ffa7a0ea47e8ad0a2fa2121621baae5","sha256":"ebdeb69d61fd3e3b429eafd9b45b51422b87348d932a7fbcd668975437650fdd","sha512":"95f427b45f9af6fbc409cba7617a3a653ea21bb15bc722a442edc8f9a492914e0eb0e25d113403eff378c7ab9078d3bcd38e9e7cd7bc9c987e8b0da621e2b477","ssdeep":"","tlshash":"96e02084a5a9c9098b16437959bc71da512370cf15cc05fd75c43518bd4d3df3c51a6c","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-06-27T15:53:01.370531Z","times_seen":7686,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qpJy_KZA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qpJy_KZA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:46:55 GMT\r\nexpires: Wed, 05 May 2027 18:46:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:28 GMT\r\ncontent-type: font/woff2\r\nage: 308242\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34520, version 1.0","md5":"ca0ac9a7afb2bec9eec3cef061cbf20c","sha1":"905455935b875294bb14430b4ae276a4cf6de1a0","sha256":"bf9ad89e9fe6b809e0e867557e05cd1d65cc6b065c2f8ea0ccb6ef89bb922cd3","sha512":"a808476da20babfa34e2f5906de1658492a190501aec6ef702a21440e0c149807b07529ca406fcb0c9dbaba853f89bc4b334833a59a195a3c0c6e333b63fdc35","ssdeep":"768:m8Q1C3/MBbdlkda7x7lwXD7VLLbEIU9lkJocqVyIl3U8McTfwmkP:1nPMBdlB7yXD536uocqIYE8nwmkP","tlshash":"3ff2f1a32ee934eaaa26a83fc5255094d6e9c13f138113423ff6787a5d1336990c0dfd","first_seen":"2025-09-20T19:54:46.37001Z","last_seen":"2026-06-27T14:57:51.063504Z","times_seen":184,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/fr.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/fr.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akuOu6lEUMpJAwG%2F09tdvUwdPytzOioaJGdCPf19MbablUoaXdDxTQ%2BRFO55421pGGktjm8iy3PIqSMxyERWumI%2FsNh39secyg1BFG1JK6%2FepscJyefnAPyzZ%2FLcX8SIF5HR\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e900d84b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9efcfc75d8fdee9370032dc72e78bcf","sha1":"77d974568d91216054eee046c19c99f71cccb9be","sha256":"a7d195ab974d9555702eede5af18287b5767efcea5fc6dadf529e114dc6fb568","sha512":"12e0fd3eafb13d648d46f86cb8eeeea05e4acccceb2510abb4c888e07284de90503ddd8b3c02513d6fe84b6b66d6600039d56749f316d012cddd0d3d89cff8ea","ssdeep":"","tlshash":"1ae0d885a1a9c9094a16037959bc71d65123708f158905fc74842518bd4e39b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-27T17:12:21.327706Z","times_seen":8091,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/undefined","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /undefined HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2snCLjioItVa7xr1YU9VRzwpCliRyeq3HGf0RxYmEbQi1FXBIkrT2zNtxuUfEqqHDtMThBrZwrDq5uI%2BM3NZivH8rHbmuwEo1XheZ1CIkEIf7ukFEoQEu9XCRTAecC2eg7V\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, User-Agent\r\ncache-control: max-age=3600, public, s-maxage=86400\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InBWVDFNVUVuUzZPQ24wMDVqOHVBQ2c9PSIsInZhbHVlIjoiNytOKzgzcXVHN1Btdy9RTzBvdDJmR21GRjcyeW9qcXl3Nis2cE1uNlNvMWxid0JWbjdrMlREa1JiZzhNYTlRcy9hQkVuYzRYKzdMcXlQMFVPV0JvMEI5a2tSRFFpWWF2ZkxUL3MycHk4cVJueFhNTjhhU3RlQnFEVVZVR0JvU3ciLCJtYWMiOiIxNGI4ODU0YjE3MzZhNGQ1MDQ5ODhiOTI5ZDcyZmU0MzUzZjQ2MDU1Y2Y0MDUwYjBkMjEwZmRkOTc1MGQ3ZWY5IiwidGFnIjoiIn0%3D; expires=Sat, 09 May 2026 10:24:17 GMT; Max-Age=7200; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6Ik9tcWl0ckRETFJ6UjdicUpHUFAzWmc9PSIsInZhbHVlIjoiTzlRVTdxcHlpRktrb05vcE1EcVZQVmhhams0bVpIbXJBS2VHMjZteUJhS2pqMVBDLzN6ZUFqTCtjMkpOOC9RalhBaUk1cnZpcnlkSmZQdi91SmF1Q2JlNUlNODljUEtjNUYrNGgrYmNFR2V0RWMvWUhWTitvdml4ckRRdDJnSUciLCJtYWMiOiJhMDI1MDRiNDE4ODkzYWMxY2ZhNWI2ODdhNmEyMDRkYzU3MzU5MzA3ZDVjYWU3NTgxNjU5ZTQyM2Y2YjY4YmU4IiwidGFnIjoiIn0%3D; expires=Sat, 09 May 2026 10:24:17 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e964de4b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-06-27T16:37:42.907526Z","times_seen":8652,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088710213-4a2ac6e93a878991a4253d47adb0613405db5a5d34ff495f176cdd6e8689f087-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088710213-4a2ac6e93a878991a4253d47adb0613405db5a5d34ff495f176cdd6e8689f087-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"0ae8b26600b17e9bc6398423732f5709\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 389359\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nx-served-by: cache-dfw-ktki8620097-DFW, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 167, 0\r\nx-timer: S1778315058.003719,VS0,VE1\r\nvary: Accept\r\ncontent-length: 3834\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3834,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0ae8b26600b17e9bc6398423732f5709","sha1":"a79aca049161e62aac7d886bdf1119f3929c03cc","sha256":"ca7854ca54bf2655ce4fc66a08ba538022118b7ba1a0b8a0dd583fb31b9bdd54","sha512":"ab235d5e10324c6a663ff0c2108ec7cbceeac1c40a0c8153c9b7d32b6cb90eae89f84be713f155f1551a02262b3d4bc8b33926af78c41fc1e301a0cf4b852a87","ssdeep":"","tlshash":"7a816edc7e6a91aae06916f1b2a00b3d841481850c5ca36969e1fe415c7c429fc7ac0f","first_seen":"2026-05-09T07:43:40.512081Z","last_seen":"2026-05-09T08:24:58.072207Z","times_seen":28,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088710633-6f12125780f50cda1cc6b77b6b103de2cb482874dfb13a0f9f5d4ef5de09454c-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088710633-6f12125780f50cda1cc6b77b6b103de2cb482874dfb13a0f9f5d4ef5de09454c-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"e344b5bbe72bd6309415576d16720ad9\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nage: 405045\r\nx-served-by: cache-dfw-ktki8620049-DFW, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 170, 5\r\nx-timer: S1778315058.008702,VS0,VE0\r\nvary: Accept\r\ncontent-length: 3597\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3597,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e344b5bbe72bd6309415576d16720ad9","sha1":"c779f27c8e7399ff6aba55382cd7236818c0e7ca","sha256":"52060088907de54e798d9f266068e1858f29b2b50a2ee722553e4609adca3c19","sha512":"fa461a5c536d196d6c527e625d20c773c29cb0115cd86b4b0343b81848f81fd7f4a9c6ac8b9019b1ddb0e03a1c5646cb75387169ec33be8c39de829adf94c776","ssdeep":"","tlshash":"22716bbdf6cf6840c31c063815aa82bba4c1a15b443a0196806eb68d12a0fbcde2322d","first_seen":"2026-05-09T07:43:40.538374Z","last_seen":"2026-05-09T08:24:58.072662Z","times_seen":28,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358446/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:20.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141358446/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=tvaye4fD_2u1M2lUSAsE9i4CYqs5pYbzZMfCVFLM3.o-1778315060.2389452-1.0.1.1-uNSUoYC3zqEDuNnCEQbpy3xkz10D1ZNkged023GcXzNQwv8I4meZ4dCPv3Lv049kodSsD5fonSkTO1MGEG_fXe.tbpULYAIpJSp2oRxbXMYr99cQN5eGVAu7qMBo5fit; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 09 May 2026 08:54:20 GMT\n_cfuvid=YxMOGEDWPQ82UJJ2_Krc3JesIAGgD0Jiws_W6crJb.8-1778315060.2389452-1.0.1.1-rETese3gAN_h.BbQla9UXYdHyCFKAJ5chEZrioq1RQU; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: 9f8f4ea679a0b1b8-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com; report-uri /_csp\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-d99d88675-w6qb5\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-d99d88675-w6qb5\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kjyo7100156-IAD, cache-bma-essb1270064-BMA\r\nx-timer: S1778315060.255604,VS0,VE169\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"870b486a54858aff06ffa2d7df5245f3","sha1":"095ec89db63edebda11f17f5dfe558737cecfbc4","sha256":"709234e5435e4310d7e3f318ad0e68620d4883a493aa68812383b325d481f297","sha512":"ad7c840bb9acb7d764668f986a5ea5e123fd3dc84f28b4f3e28e6e9390a3c226343cec5c251714a43c62141a96cd6112969a1606136dfbf27d767dc07b786dbc","ssdeep":"","tlshash":"d901fef713d418f6a392a3da9eccb01b5317916fddc168d9a92b5c0c4bed0d738442a2","first_seen":"2026-05-09T08:24:58.034002Z","last_seen":"2026-05-09T08:24:58.034002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/nl.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/nl.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eKYLhCTenkH2dSepBj3eBGWO9bBWzhi9m8EA5CLKuIlCNt3n7vH4nMwF7mDdhHuK2UF7ybpk%2Fa1KGTM5y3m9gX0t7P8u%2FLYJ8NJNuWm5uLDDTX9XTbAPR0dSTAxADPuQDK%2BF\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d8eb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1932756ac7767c2f33986237417d8731","sha1":"84a604da4f8df24af728a73685c4cc2cad9de962","sha256":"8ca8a2dc879e29edd00a08bffc8d825f67d0988e55538d52e43861bb3af22f83","sha512":"9138b8b056aa4c5a5e0179ba58175ec8b98b2aa66b2a9f0bf17e2defed3b441f9f0d5d91a463bb45ed6f002c6e81d85730338890c3990a604677ded0bfdff8e9","ssdeep":"","tlshash":"d4e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-27T18:42:39.858101Z","times_seen":6348,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://randenta-ro.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=_fBAPu31y_xa0RaenIfRGYyFJDlY9NLQaj8NWutSjkw-1778315057.1722062-1.0.1.1-SdZ4v5pHWmvpKd5T_oX5w5FyHPlD63d3BRe2y2rXIXHX4byOZhiT4hn5rGbtmR2lGdsSJdaCQLrELhX6ShEZs3YoQIYTu2yCJmSgZxDPSs71MPSoGHWTQ5o8qfDmVMwX; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 09 May 2026 08:54:17 GMT\n_cfuvid=YEfD.HO4KgCIgtMLv.EnE.5oFMfz261.xJvWRxWd5Xs-1778315057.1722062-1.0.1.1-rSIAKh5jnrJA2prdzgY2sHq1XBfIsvDALN7gnatwdPY; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: 9f8f4e935c9f1a30-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-d99d88675-4fh25\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-d99d88675-4fh25\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000167-IAD, cache-bma-essb1270026-BMA\r\nx-timer: S1778315057.186649,VS0,VE179\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":20140,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11839)","md5":"9707df0b3cc5a4018992c7a2078fd8c5","sha1":"1ec9b2fe210317ad58e9902e6d4e86d7e77f0e3d","sha256":"a6d8b4c9d2c76bdb9751827aa9dd7adaabeb48fd85ff38a3ffa8faf17038067d","sha512":"01277878ff8d85019d1f37bb5929b63d6ac50cc1aa04494edd0ad2d8e26eb7c10788e4fc0a15994a5d700e9c17158622cc57db5faa363e9ab3cf28de1ced0b3e","ssdeep":"384:P0wdeGjumP2ustQLNwcfMIloooZ2WSPqOdM/+MhHFgfEW7:hJ3LNwcfFzWSCOdehHFgfEI","tlshash":"52923c77a580dc6a47554acd5e6ef30d75b9200ffe80ca88f09e9a9c176f9d35a0f088","first_seen":"2026-05-09T08:24:58.073634Z","last_seen":"2026-05-09T08:24:58.073634Z","times_seen":1,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":59,"dns":3,"connect":1,"send":0,"wait":201,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:20:35 GMT\r\nexpires: Wed, 05 May 2027 18:20:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:06 GMT\r\ncontent-type: font/woff2\r\nage: 309822\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"4f40f9c745b49a141e612eff59f3a917","sha1":"f19c314aad546b6a3ade9ff335318dec6e7a6d37","sha256":"3cad1d144b870d6083c79131c4817b2bcf3b4d76fc4aaeaba2eec295fbaa5cb1","sha512":"63bd4fb636d150b58801a6bfa7b5e9499fe8012c9cbaeaa5313fa4662f6d4fba8eed252b4c9ae24f22dfc72225c9fdbb43236b76096850f391d4494230b1e0a2","ssdeep":"768:nH89JOAPM5r9V1tqir40IKkgqy1g9HbSMPCVGyaalG2:H8fOltjU0IKqy1+GV0yaaz","tlshash":"a703019b60d5afa3c6db1060d74de6538820016e9831e3693c55be1b7cba688f2448ef","first_seen":"2025-09-17T17:21:05.707315Z","last_seen":"2026-06-27T14:57:51.071886Z","times_seen":2454,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":334,"dns":9,"connect":8,"send":0,"wait":8,"receive":2,"ssl":318},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nage: 49882\r\nx-served-by: cache-iad-kiad7000100-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 62, 6774\r\nx-timer: S1778315058.370724,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95371\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":326736,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"0740d12309dfb731b29275d11664361d","sha1":"d3bbdfebc332934846d6e86c64d26f86e3ed1d15","sha256":"1b0dafa49d7018694f3d2619e015266663ade8d68596ae633922558bff2ec36b","sha512":"b6b1ec00e23c112e3ef9d7931f3bf9d7fd36d01b37a3f261f12c18c19ba6c93e1b99b410bb65374d7ba6b539981c1d252afb59acc2a99ffd1d60282fa35bb388","ssdeep":"6144:dxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/l5lN:dx/85ucTcProN","tlshash":"bf64f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-08T18:42:11.943066Z","last_seen":"2026-05-12T17:35:05.256088Z","times_seen":789,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358397/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:20.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141358397/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=UbJt1bKQz5nRcuZ_WhgRsp6ae2SXVD0syypwiKiEXgA-1778315060.244805-1.0.1.1-pddohpN3Vk6MxvYLpqsFX5TklFY5run9kqTO7wycMswABtB2uoBKuBYhup9E3dPg2LBqvqB5vSxpz4oN5wUHLtJIraClLG7OxxUhiL_nobiHu3F44vg8Ih5Lkv6AxjIh; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 09 May 2026 08:54:20 GMT\n_cfuvid=z7WQPGOCBStYxcgXpBUcpEcd0901CSDp4qyxRpS286I-1778315060.244805-1.0.1.1-JQdGC3jax7groQTMrmsvtsMEZ3bhhAvDdcTi6OR0cdg; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: 9f8f4ea689b3b1b8-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com; report-uri /_csp\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-d99d88675-44gcm\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-d99d88675-44gcm\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kiad7000101-IAD, cache-bma-essb1270026-BMA\r\nx-timer: S1778315060.261913,VS0,VE167\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"870b486a54858aff06ffa2d7df5245f3","sha1":"095ec89db63edebda11f17f5dfe558737cecfbc4","sha256":"709234e5435e4310d7e3f318ad0e68620d4883a493aa68812383b325d481f297","sha512":"ad7c840bb9acb7d764668f986a5ea5e123fd3dc84f28b4f3e28e6e9390a3c226343cec5c251714a43c62141a96cd6112969a1606136dfbf27d767dc07b786dbc","ssdeep":"","tlshash":"d901fef713d418f6a392a3da9eccb01b5317916fddc168d9a92b5c0c4bed0d738442a2","first_seen":"2026-05-09T08:24:58.034002Z","last_seen":"2026-05-09T08:24:58.034002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/es.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/es.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwZlFJjJIhntnp7qcur7yjP6d9l2YUr3mUZulB0z1vZr3fn8QDnvMriSKKqmrhvq1ltziJYHFlkrfdInD2YaUizcUqw8cNnj%2FwxIful4Nk10Rl3O1rzaM7hFvbMrTJBGASJx\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e900d89b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82a1bb6b96ec71df6247971da6e35155","sha1":"bb5be7dedff6612e4c8cb7c8019563c547238897","sha256":"8fc508fdb3ef11a4e38f9123f1ae903962ca14841cefd7b98ed5550d50d2f1bb","sha512":"dc54baf3110ea3a0512a272b5dac1bd1b24e50ecc32e9944436708791394a98fae1220f440ed1615c7d5e6f05d761190f3720105c9bf5f63300ff940cbb2738e","ssdeep":"","tlshash":"9b019cd4ba6c498c9e15837d0b6c70d1a20e20bc31cf40e8b98c8164b26a3ebe943d50","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-27T17:24:47.295757Z","times_seen":8547,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/ro/img/favicon.ico","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/ro/img/favicon.ico HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBWVDFNVUVuUzZPQ24wMDVqOHVBQ2c9PSIsInZhbHVlIjoiNytOKzgzcXVHN1Btdy9RTzBvdDJmR21GRjcyeW9qcXl3Nis2cE1uNlNvMWxid0JWbjdrMlREa1JiZzhNYTlRcy9hQkVuYzRYKzdMcXlQMFVPV0JvMEI5a2tSRFFpWWF2ZkxUL3MycHk4cVJueFhNTjhhU3RlQnFEVVZVR0JvU3ciLCJtYWMiOiIxNGI4ODU0YjE3MzZhNGQ1MDQ5ODhiOTI5ZDcyZmU0MzUzZjQ2MDU1Y2Y0MDUwYjBkMjEwZmRkOTc1MGQ3ZWY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9tcWl0ckRETFJ6UjdicUpHUFAzWmc9PSIsInZhbHVlIjoiTzlRVTdxcHlpRktrb05vcE1EcVZQVmhhams0bVpIbXJBS2VHMjZteUJhS2pqMVBDLzN6ZUFqTCtjMkpOOC9RalhBaUk1cnZpcnlkSmZQdi91SmF1Q2JlNUlNODljUEtjNUYrNGgrYmNFR2V0RWMvWUhWTitvdml4ckRRdDJnSUciLCJtYWMiOiJhMDI1MDRiNDE4ODkzYWMxY2ZhNWI2ODdhNmEyMDRkYzU3MzU5MzA3ZDVjYWU3NTgxNjU5ZTQyM2Y2YjY4YmU4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z09dlgotz8AszIPak6KH3BDMzyQf3V3K6gfsgFvcm9TIfeLchMzePAOx%2FoSWEaycj9Q%2FiYF3U7JnqvJhwG64m2NmNZOrZgmAkmaOxwRTpXS49CCRw1X19SvMc5kwb5u6mgep\"}]}\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:02 GMT\r\nlast-modified: Tue, 21 Apr 2026 18:23:11 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e97fdf9b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"796b3b95f36c92684d4fd549a4dc6354","sha1":"05acaef055c2cb5d6ed804c105e580412e5a3981","sha256":"f784562797d2c1ab758d272ff8986573a2076dd92d2815dd60b7469dbee0ccc8","sha512":"22de136b7e723e3839b88ea650e297edd751924897c62145018da6d359612690313d2887c3c916c514b2ea705e9a616ecf337caff4927a6be8757fe87d5ee1cd","ssdeep":"192:3RDhmE7/rtdE7KmDbJyLfjCiEiPSBn3yppzrOcSj02Guu:3NoUE7zqzEcSB3Qicw02Guu","tlshash":"01625c00a5ebf40dc2a68671ce34d1fda1e48c208464429616aa3fcf1f79af99d92325","first_seen":"2026-03-20T18:52:09.197203Z","last_seen":"2026-05-31T23:29:51.448626Z","times_seen":34,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/currency.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:20.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/currency.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/frontend/assets/en/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6InBWVDFNVUVuUzZPQ24wMDVqOHVBQ2c9PSIsInZhbHVlIjoiNytOKzgzcXVHN1Btdy9RTzBvdDJmR21GRjcyeW9qcXl3Nis2cE1uNlNvMWxid0JWbjdrMlREa1JiZzhNYTlRcy9hQkVuYzRYKzdMcXlQMFVPV0JvMEI5a2tSRFFpWWF2ZkxUL3MycHk4cVJueFhNTjhhU3RlQnFEVVZVR0JvU3ciLCJtYWMiOiIxNGI4ODU0YjE3MzZhNGQ1MDQ5ODhiOTI5ZDcyZmU0MzUzZjQ2MDU1Y2Y0MDUwYjBkMjEwZmRkOTc1MGQ3ZWY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9tcWl0ckRETFJ6UjdicUpHUFAzWmc9PSIsInZhbHVlIjoiTzlRVTdxcHlpRktrb05vcE1EcVZQVmhhams0bVpIbXJBS2VHMjZteUJhS2pqMVBDLzN6ZUFqTCtjMkpOOC9RalhBaUk1cnZpcnlkSmZQdi91SmF1Q2JlNUlNODljUEtjNUYrNGgrYmNFR2V0RWMvWUhWTitvdml4ckRRdDJnSUciLCJtYWMiOiJhMDI1MDRiNDE4ODkzYWMxY2ZhNWI2ODdhNmEyMDRkYzU3MzU5MzA3ZDVjYWU3NTgxNjU5ZTQyM2Y2YjY4YmU4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2474\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEIq%2FHQIjRg%2F7y9IoXoc7DQo9UHu2Pv5Dbyyfqjjxy0rbHrbSwuOBcLXGax6Tju2KY0O%2FnERzxftZ6UM30h31PinCbu18kxpgSblNAwG5%2BiY4sdVllxqPht8%2BNm3RLv59ltI\"}]}\r\ncf-ray: 9f8f4ea5eedeb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4746,"size_decoded":0,"mime_type":"text/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"4160b6922867907ece073fc2c064ebc7","sha1":"e92a9d8bab66d120ecf7d4f39bc6c7fb7dc60dc1","sha256":"8d4194c5892b959b1bfe12f8ef98473cd58e94b6b68d9b20bb6893fe9b178640","sha512":"e5c81b8851ed78c8aa5bb165f43e5cd5c72f7fb8d3d81ad14c78e88a36d5778e9fdd360dda8737f61de09c442534d2ff857ce20dc2c9c2e0c473e934d504161a","ssdeep":"96:mkMuTXwIKaqEl0Y1ry6YigPWQmxgbKWjdsaqmo6n:mkNbqCo6YVWQOgbKWjds6n","tlshash":"0ba1fdd86a634590c2713199484f7c80a4f2a63b7c09bacab85f810c2f4dc1de935bfb","first_seen":"2026-05-03T18:34:41.365318Z","last_seen":"2026-06-16T05:28:50.787439Z","times_seen":736,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1142047493/outro?on_site=0\u0026type=videos","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:20.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1142047493/outro?on_site=0\u0026type=videos HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=fpfArkiQ2z5evCXCbZKgRhzRyjpM80AsyX38y.Y96Nk-1778315060.169683-1.0.1.1-SIj4BUokzqYsIllg53f.sQnhZibuHFKpyb1NJzSo3e1R7HWc3nAB3fmIJv66U0m8pDSz29oFiXZIODs7tl9_pU8mt31k1MHl6xtcMbHWJHQqutrxHkgarWZhRSjaYH1H; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 09 May 2026 08:54:20 GMT\n_cfuvid=SwKlLc4qSfuuDr91WxJo5.kBpHIIX2MmQU9n8Da_54A-1778315060.169683-1.0.1.1-wg9P8WEzBtp.AEwhj316pmlJIKaDooCxFKDJDQzMDQo; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: 9f8f4ea60863b1b8-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://player.vimeo.com/video/1142047493?dnt=1\u0026badge=0\u0026autopause=1\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, x-requested-with\r\naccess-control-allow-methods: GET, POST, PUT, OPTIONS\r\naccess-control-max-age: 86400\r\ncontent-security-policy: default-src 'self'; script-src 'self' https://f.vimeocdn.com; style-src 'self' https://f.vimeocdn.com; img-src 'self' https://f.vimeocdn.com https://i.vimeocdn.com; report-uri /_csp\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-d99d88675-w9cc6\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-d99d88675-w9cc6\r\nx-link-match: 108\r\nx-player-backend: g\r\nx-served-by: cache-iad-kjyo7100132-IAD, cache-bma-essb1270061-BMA\r\nx-timer: S1778315060.188939,VS0,VE178\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"870b486a54858aff06ffa2d7df5245f3","sha1":"095ec89db63edebda11f17f5dfe558737cecfbc4","sha256":"709234e5435e4310d7e3f318ad0e68620d4883a493aa68812383b325d481f297","sha512":"ad7c840bb9acb7d764668f986a5ea5e123fd3dc84f28b4f3e28e6e9390a3c226343cec5c251714a43c62141a96cd6112969a1606136dfbf27d767dc07b786dbc","ssdeep":"","tlshash":"d901fef713d418f6a392a3da9eccb01b5317916fddc168d9a92b5c0c4bed0d738442a2","first_seen":"2026-05-09T08:24:58.034002Z","last_seen":"2026-05-09T08:24:58.034002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qnJy8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39680\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:20:35 GMT\r\nexpires: Wed, 05 May 2027 18:20:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:06 GMT\r\ncontent-type: font/woff2\r\nage: 309822\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39680, version 1.0","md5":"4f40f9c745b49a141e612eff59f3a917","sha1":"f19c314aad546b6a3ade9ff335318dec6e7a6d37","sha256":"3cad1d144b870d6083c79131c4817b2bcf3b4d76fc4aaeaba2eec295fbaa5cb1","sha512":"63bd4fb636d150b58801a6bfa7b5e9499fe8012c9cbaeaa5313fa4662f6d4fba8eed252b4c9ae24f22dfc72225c9fdbb43236b76096850f391d4494230b1e0a2","ssdeep":"768:nH89JOAPM5r9V1tqir40IKkgqy1g9HbSMPCVGyaalG2:H8fOltjU0IKqy1+GV0yaaz","tlshash":"a703019b60d5afa3c6db1060d74de6538820016e9831e3693c55be1b7cba688f2448ef","first_seen":"2025-09-17T17:21:05.707315Z","last_seen":"2026-06-27T14:57:51.071886Z","times_seen":2454,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/ro.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/ro.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpTpHWBRWwNNGFgWxfHUBHztDmykKsGkYNVLl5WWzuw98vijBD0Yg00weIssYtzNoUQAoVCgNo8nQh%2FCbUFqqogGnY6F7%2F%2BIdLs8e8kVeMXiFE%2BkiRAiTDDlM3SqhSSE%2BN5m\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e8ffd81b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3459066e38308492a7ac98271d7b034","sha1":"bdc08d8b6b3a4ab7eef55fb2b73028001f045581","sha256":"3244688e345eb37de4069b23d32d91b59ecb2c28a14e38aaa4e02678f5d0bb7c","sha512":"5e68e1f9adf42375f8432dfc1a5b8a5f91849b2e3fdaa7ac1de0fb111cce8d61daf0330cca3137ae1ee66e20ba12c7e135114bb565b5f711cc730f8db4e20f81","ssdeep":"","tlshash":"00e0d88595a9c9094a1603795abc70d65123708e158905fc74c42514bd4e79b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-25T13:41:49.39495Z","times_seen":5168,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/da.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/da.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGSVPK16B4GzWrd6ZzAyAN4mgt7gQmCVab87Z2POHCWzdN13t8zIDukvc6mS25%2FmEKMxxlGSxOG86oDJ6VHoZR7gfIPCJbDAcN%2Bkdxl3hkBmr32X50Ngjys5YpARnzku49NO\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e900d88b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4d7abcf4c21c729ea9aab45faa1912a","sha1":"6ecbf40cb392204b8c7af284352108b500111969","sha256":"33815e73a3d07b3ae77cec1fdc77a285646e4e730136632f0ff5de6f8697c98c","sha512":"6d928963ac9562306e34f006030ddb4430cf81f3e37d8a5d805f90d5cc89659457e9f98257a2ec971205cf044387b7c3e87847c85bf7760ecfa2b667bdab3230","ssdeep":"","tlshash":"f6e0c09260ae8a0d4e1543205a3c70e2526770cf218e04fcf0c13e28fd667ab3800f5c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-25T18:13:15.484176Z","times_seen":5291,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/no.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/no.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VORjaW%2FAXJVfP2dUwWq1%2BUGwPJgb7SraemsQJAXH9EZrkR%2F6JN6hbV%2FRr720wRe%2BQfp%2F4MW8GeUVMyKYKCzFZmHmmZhiocLruWrZV5Rc1gBQHMjq82p9GlKY7PA9bgzuf0Uj\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d8fb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":424,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebe2b7f4aefa3c8869fa9f0a402210bb","sha1":"dc0ceab0f048a8c8ac97e3277f2ed237b974f005","sha256":"7021694edfe47096e0aa9a5ea85a6851181f723ae3a8806779a8e01702325804","sha512":"f176bd1aa2416960b0eec285da0b91e983a162a1d475bac76786b33ab0aede45783d422ce4d909b62ee6e6ba1fa55bf5b6b6ffcdf2463e305941e2d804073da5","ssdeep":"","tlshash":"d6e0e5809b9d1a6da91283a41ddcb885022b70e6328c0ced658dae987f412eaf466264","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-25T06:50:03.077483Z","times_seen":4700,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/th.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/th.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9a55yu6XUtxyKU8xFI5F8brPDte87tyEYj8O6eecPXgLQ%2FQknAX9rPhhgKwDljCnBGIznFbd2ArvqvExS41ohiH7jEgftuxMKFzwFDeBJXZrKeQbyYPvaHvRc4%2F8fQ8Ud9nM\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e901d99b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"756f64249f1f943e61bff54780b49cd8","sha1":"e4beba68e98c966f57a6cca0e40915ba60500e23","sha256":"cf1c5911962ac51db0ff4e36a6a91f5ff42c1ba40246ada4067b3b5a846f21b4","sha512":"d8d34a3b82cba3a38c9f4025440e7177ca7ad6347bdff81f1691e88ff0f7e8a58fe3491e2d53e9d433cf685af00af37193c07afd2799fa12aefb54d53ff30498","ssdeep":"","tlshash":"c2e0d8c6a869890e1e140f754dbc75ed5136b0cf214d41fcb1c12629aa4a39f2541a68","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-27T13:41:15.722499Z","times_seen":4357,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141358121?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://randenta-ro.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=BIFZsix6Ubib9yHeBD899qh0Zg2I.qgp_93bJUF2TlQ-1778315057.1741574-1.0.1.1-1dV4mVvla7lS6G2qZ0n9j3q.J8lxI69LfI77jgEtTD8rl0FkqACYm6YUpijXl0Z1jVrMJkWez0GQE36eBUlyyBH64AsQWjXwMN1ipPQz6gebLKjt9DgyB2u9KFiQ6f.Q; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 09 May 2026 08:54:17 GMT\n_cfuvid=W92MVUPSrC4zqoANnInPLjBVEqy2v7Tj_US9U5KLN9Y-1778315057.1741574-1.0.1.1-V2sKHltghPidcvd5_FFEtOQGxxVlcnaYpMjKjOhp7oU; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: 9f8f4e935caa1a30-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-d99d88675-65brw\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-d99d88675-65brw\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kcgs7200086-IAD, cache-bma-essb1270047-BMA\r\nx-timer: S1778315057.189698,VS0,VE190\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20085,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11784)","md5":"5af6095600d9184b639445bc02b30d52","sha1":"4d6a450e3eaf67382c9363d2ce191e9e87b4e484","sha256":"eb35accfe81715cb97e8dcbabda4438b626aeeda8302969d2f8dca2210519903","sha512":"69eb08f7c34fa30667dd4d427792dd57db5e0d345cab0e716211aae4511b081de760ec31cea34269ee2550c6aa4b7f087d0462a401e3738f97cdbc62acee7c1f","ssdeep":"384:PbedeGjivyWNmZx7stQLNwcfM4oVLyPWSPqOdM/+MhHFgfEl4:aVHLNwcf19WSCOdehHFgfEy","tlshash":"33922b37a8c0b4aa86c445cd4f6af70d3076104b7f85ca44f56e6ddc2baf9db6a061c8","first_seen":"2026-05-09T08:24:58.077527Z","last_seen":"2026-05-09T08:24:58.077527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":62,"dns":3,"connect":1,"send":0,"wait":213,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qpJy_KZA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qpJy_KZA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:46:55 GMT\r\nexpires: Wed, 05 May 2027 18:46:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:28 GMT\r\ncontent-type: font/woff2\r\nage: 308242\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34520, version 1.0","md5":"ca0ac9a7afb2bec9eec3cef061cbf20c","sha1":"905455935b875294bb14430b4ae276a4cf6de1a0","sha256":"bf9ad89e9fe6b809e0e867557e05cd1d65cc6b065c2f8ea0ccb6ef89bb922cd3","sha512":"a808476da20babfa34e2f5906de1658492a190501aec6ef702a21440e0c149807b07529ca406fcb0c9dbaba853f89bc4b334833a59a195a3c0c6e333b63fdc35","ssdeep":"768:m8Q1C3/MBbdlkda7x7lwXD7VLLbEIU9lkJocqVyIl3U8McTfwmkP:1nPMBdlB7yXD536uocqIYE8nwmkP","tlshash":"3ff2f1a32ee934eaaa26a83fc5255094d6e9c13f138113423ff6787a5d1336990c0dfd","first_seen":"2025-09-20T19:54:46.37001Z","last_seen":"2026-06-27T14:57:51.063504Z","times_seen":184,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":119,"dns":0,"connect":9,"send":0,"wait":8,"receive":1,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qpJy_KZA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/lexenddeca/v25/K2F1fZFYk-dHSE0UPPuwQ5qpJy_KZA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34520\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:46:55 GMT\r\nexpires: Wed, 05 May 2027 18:46:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:41:28 GMT\r\ncontent-type: font/woff2\r\nage: 308242\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34520, version 1.0","md5":"ca0ac9a7afb2bec9eec3cef061cbf20c","sha1":"905455935b875294bb14430b4ae276a4cf6de1a0","sha256":"bf9ad89e9fe6b809e0e867557e05cd1d65cc6b065c2f8ea0ccb6ef89bb922cd3","sha512":"a808476da20babfa34e2f5906de1658492a190501aec6ef702a21440e0c149807b07529ca406fcb0c9dbaba853f89bc4b334833a59a195a3c0c6e333b63fdc35","ssdeep":"768:m8Q1C3/MBbdlkda7x7lwXD7VLLbEIU9lkJocqVyIl3U8McTfwmkP:1nPMBdlB7yXD536uocqIYE8nwmkP","tlshash":"3ff2f1a32ee934eaaa26a83fc5255094d6e9c13f138113423ff6787a5d1336990c0dfd","first_seen":"2025-09-20T19:54:46.37001Z","last_seen":"2026-06-27T14:57:51.063504Z","times_seen":184,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"player.vimeo.com/video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","fqdn":"player.vimeo.com","domain":"vimeo.com","tld":"com"},"ip":{"addr":"162.159.138.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vimeo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 11:55:53 GMT","end":"Thu, 06 Aug 2026 12:55:51 GMT"},"fingerprint":{"sha1":"D6:E1:3F:D8:FD:5C:3B:D4:99:72:24:5C:10:67:DE:50:68:00:1E:9F","sha256":"AA:99:7A:5D:AA:D6:C8:12:18:9B:D4:1B:A5:A6:F7:08:E5:D6:D0:48:83:D8:B3:BD:3B:1D:B6:61:E3:6E:08:3E"}}},"request":{"raw":"GET /video/1141358350?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1 HTTP/1.1\r\nHost: player.vimeo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://randenta-ro.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __cf_bm=Q96IJLNa7hDXVgmhMIGMYydhJLRNSpqphXvhLULPeN8-1778315057.1626863-1.0.1.1-T.oteIvF_mXDlyvyQsH.yQvH5PBKPSq.miX.Gfgezl4JYKYibAe2I7C_lMH5FHmG7GAfMCbMkYCoZqxp3XzgFPimGkvlAMuFqXiI2cyadClAj9SCVzuSy_99WASKtvb1; HttpOnly; Secure; Path=/; Domain=vimeo.com; Expires=Sat, 09 May 2026 08:54:17 GMT\n_cfuvid=.VflgAUhnj5USvH4IH3jxqthyz36c07ryZNdajdqmAY-1778315057.1626863-1.0.1.1-84BsAh6zPWZ_Y6RXX1NGIT13PGOwweqoAIstFqgmY9s; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com\r\ncf-ray: 9f8f4e934c7a1a30-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Fri, 15 Dec 1985 19:30:00 GMT\r\nlink: \u003chttps://lensflare.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://arclight.vimeo.com\u003e; rel=preconnect; crossorigin, \u003chttps://i.vimeocdn.com\u003e; rel=preconnect; crossorigin, \u003chttps://f.vimeocdn.com\u003e; rel=preconnect; crossorigin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Referer, Accept-Encoding\r\nvia: 1.1 varnish, 1.1 varnish\r\ncontent-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://*.vimeo.work; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.paychex.com https://*.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://*.wirewax.com https://*.wirewax.video https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://*.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://*.vimeo.work; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://*; worker-src blob:; report-uri /_csp\r\ncross-origin-resource-policy: cross-origin\r\nx-backend-server: srv001\r\nx-bapp-server: player-backend-d99d88675-vnv9d\r\nx-cache: MISS, MISS\r\nx-cache-hits: 0, 0\r\nx-content-type-options: nosniff\r\nx-host: player-backend-d99d88675-vnv9d\r\nx-link-match: 105\r\nx-player-backend: g\r\nx-served-by: cache-iad-kcgs7200093-IAD, cache-bma-essb1270064-BMA\r\nx-timer: S1778315057.177949,VS0,VE184\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20093,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11792)","md5":"b2a310c1832a281e4cf7999d3c5b0f49","sha1":"7b9f1ece48dc299c98250ba77797f0af7bea5c26","sha256":"4d2fa3d00798b8e8ce0142c06e8ae9e116170fe92b2490f46fdb36531c670ede","sha512":"04f6d49621e90b39fcc4138c5a24025e6b2899882fcb379b90de89f9151d8c43f0bdedc227f61b46e549ed8edbea90704aba19f446d2ba3dbf2dd3ce361e1f68","ssdeep":"384:PdddeGj7u/o78Ippmr+2dNstQLNwcfMs6oF1ygWSPqOdM/+MhHFgfEA7:/hoIpexLNwcfCwWSCOdehHFgfE6","tlshash":"84922b37a5d1e829878c55cd0f6bba09357a210b7fc0cb84b4ae5a1c27bfdd3564a1c8","first_seen":"2026-05-09T08:24:58.078469Z","last_seen":"2026-05-09T08:24:58.078469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":52,"dns":5,"connect":1,"send":0,"wait":208,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.vimeocdn.com/video/2088710341-20f068504b46d97707b78818288a95e4ec3805f9922e2da5ed884b1324fa538f-d?mw=80\u0026q=85","fqdn":"i.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://player.vimeo.com/video/1141358446?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:17.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /video/2088710341-20f068504b46d97707b78818288a95e4ec3805f9922e2da5ed884b1324fa538f-d?mw=80\u0026q=85 HTTP/1.1\r\nHost: i.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://player.vimeo.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=2592000\r\ncontent-type: image/avif\r\netag: \"f30d6454894b571e3855807ce1ad872c\"\r\nviewmaster-source-region: US\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Viewmaster-Status\r\naccess-control-max-age: 86400\r\naccept-ranges: bytes\r\nage: 389358\r\ndate: Sat, 09 May 2026 08:24:17 GMT\r\nx-served-by: cache-dfw-kdfw8210041-DFW, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 170, 0\r\nx-timer: S1778315058.951935,VS0,VE1\r\nvary: Accept\r\ncontent-length: 3139\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3139,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f30d6454894b571e3855807ce1ad872c","sha1":"7e1af900b69aa8db76a8f231de35e15df9b0b847","sha256":"366b9f97b6f938573e1ec54d3b6a4023794a46d35edf2f6ecd0a647291c27530","sha512":"d133db8ada0756f49fab0f47d6c30aa6a11f90408d6ce057d0a706a3aa9db806c0546c2556cfbb22e63ee003abca2e8c721623d4a3d34a80be7c3cfb0530de28","ssdeep":"","tlshash":"77514c5a7b8c1c73d06c39748634d1731401ddb61753bc7d6d402a798567aec9132e1e","first_seen":"2026-05-09T07:43:40.47179Z","last_seen":"2026-05-09T08:24:58.079354Z","times_seen":28,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f.vimeocdn.com/p/4.46.47/js/vendor.module.js","fqdn":"f.vimeocdn.com","domain":"vimeocdn.com","tld":"com"},"ip":{"addr":"151.101.0.217","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://player.vimeo.com/video/1141358397?dnt=1\u0026title=0\u0026badge=0\u0026autopause=1","date":"2026-05-09T08:24:18.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.vimeo.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q4","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 24 Oct 2025 05:39:42 GMT","end":"Wed, 25 Nov 2026 05:39:41 GMT"},"fingerprint":{"sha1":"6D:35:33:58:FF:BE:25:3A:A7:84:6C:25:7B:4D:08:14:3A:7D:F6:0C","sha256":"44:99:66:20:D6:9A:A2:F7:3D:C3:6B:30:AD:7A:04:76:76:4C:DB:D5:3A:C4:55:DD:21:2A:B4:10:49:EB:9D:8A"}}},"request":{"raw":"GET /p/4.46.47/js/vendor.module.js HTTP/1.1\r\nHost: f.vimeocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://player.vimeo.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://f.vimeocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 08:24:18 GMT\r\nage: 49882\r\nx-served-by: cache-iad-kiad7000100-IAD, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 62, 6773\r\nx-timer: S1778315058.343660,VS0,VE0\r\nvary: Accept-Encoding,x-http-method-override\r\naccess-control-allow-headers: Cache-Control, Pragma\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=1209600\r\naccess-control-allow-origin: *\r\ncontent-length: 95371\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":326736,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65422)","md5":"0740d12309dfb731b29275d11664361d","sha1":"d3bbdfebc332934846d6e86c64d26f86e3ed1d15","sha256":"1b0dafa49d7018694f3d2619e015266663ade8d68596ae633922558bff2ec36b","sha512":"b6b1ec00e23c112e3ef9d7931f3bf9d7fd36d01b37a3f261f12c18c19ba6c93e1b99b410bb65374d7ba6b539981c1d252afb59acc2a99ffd1d60282fa35bb388","ssdeep":"6144:dxrQb8XM5U5dAbYwlkc9IERRcRDZx12r/l5lN:dx/85ucTcProN","tlshash":"bf64f7dcb2d6f07143e764a6403f200bf23a5e15a84d8454e26ae4d57cb9a4e823bf7d","first_seen":"2026-05-08T18:42:11.943066Z","last_seen":"2026-05-12T17:35:05.256088Z","times_seen":789,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/calc.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:20.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/calc.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/frontend/assets/en/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6InBWVDFNVUVuUzZPQ24wMDVqOHVBQ2c9PSIsInZhbHVlIjoiNytOKzgzcXVHN1Btdy9RTzBvdDJmR21GRjcyeW9qcXl3Nis2cE1uNlNvMWxid0JWbjdrMlREa1JiZzhNYTlRcy9hQkVuYzRYKzdMcXlQMFVPV0JvMEI5a2tSRFFpWWF2ZkxUL3MycHk4cVJueFhNTjhhU3RlQnFEVVZVR0JvU3ciLCJtYWMiOiIxNGI4ODU0YjE3MzZhNGQ1MDQ5ODhiOTI5ZDcyZmU0MzUzZjQ2MDU1Y2Y0MDUwYjBkMjEwZmRkOTc1MGQ3ZWY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9tcWl0ckRETFJ6UjdicUpHUFAzWmc9PSIsInZhbHVlIjoiTzlRVTdxcHlpRktrb05vcE1EcVZQVmhhams0bVpIbXJBS2VHMjZteUJhS2pqMVBDLzN6ZUFqTCtjMkpOOC9RalhBaUk1cnZpcnlkSmZQdi91SmF1Q2JlNUlNODljUEtjNUYrNGgrYmNFR2V0RWMvWUhWTitvdml4ckRRdDJnSUciLCJtYWMiOiJhMDI1MDRiNDE4ODkzYWMxY2ZhNWI2ODdhNmEyMDRkYzU3MzU5MzA3ZDVjYWU3NTgxNjU5ZTQyM2Y2YjY4YmU4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2474\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nD0zmikDkRtyOhjKlOBzuw%2BQIwS%2B%2BW5J4P%2B6W2mmQr1ug4r5bfVYtivCZCOU8Al9%2F57bmXyesprj4Y2mG939wNTJMdnn606RMl8twMIZr56vnq4cfFC8qdaJDqV9wiKcnzh1\"}]}\r\ncf-ray: 9f8f4ea5eee1b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2116,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"8db1c397f4875a2f87a43231fdc04d1f","sha1":"f085d10aa760378cb58a4427f9811737f04f4233","sha256":"2d0a615e04ee58fe04a7fea897a6e519a7c8e272f0f996d72ec50854ea214605","sha512":"0665e2c41eef2cee0b21045b74c34d264027c9ee313cf833b7f0cf7ec35f7df81a4187522e5294231cf90d58f1dd7c42d9f608b0da5757e896b3e44a4a7e1d05","ssdeep":"","tlshash":"a441ff567ff20070cdb321d527ab4a44283d36433081d6c4b71c86211fb1d92e15bebd","first_seen":"2026-05-03T18:34:41.366198Z","last_seen":"2026-06-16T05:28:50.817994Z","times_seen":789,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/en/js/sliders.js","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:20.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/en/js/sliders.js HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/frontend/assets/en/js/deferred-imports.js\r\nCookie: XSRF-TOKEN=eyJpdiI6InBWVDFNVUVuUzZPQ24wMDVqOHVBQ2c9PSIsInZhbHVlIjoiNytOKzgzcXVHN1Btdy9RTzBvdDJmR21GRjcyeW9qcXl3Nis2cE1uNlNvMWxid0JWbjdrMlREa1JiZzhNYTlRcy9hQkVuYzRYKzdMcXlQMFVPV0JvMEI5a2tSRFFpWWF2ZkxUL3MycHk4cVJueFhNTjhhU3RlQnFEVVZVR0JvU3ciLCJtYWMiOiIxNGI4ODU0YjE3MzZhNGQ1MDQ5ODhiOTI5ZDcyZmU0MzUzZjQ2MDU1Y2Y0MDUwYjBkMjEwZmRkOTc1MGQ3ZWY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9tcWl0ckRETFJ6UjdicUpHUFAzWmc9PSIsInZhbHVlIjoiTzlRVTdxcHlpRktrb05vcE1EcVZQVmhhams0bVpIbXJBS2VHMjZteUJhS2pqMVBDLzN6ZUFqTCtjMkpOOC9RalhBaUk1cnZpcnlkSmZQdi91SmF1Q2JlNUlNODljUEtjNUYrNGgrYmNFR2V0RWMvWUhWTitvdml4ckRRdDJnSUciLCJtYWMiOiJhMDI1MDRiNDE4ODkzYWMxY2ZhNWI2ODdhNmEyMDRkYzU3MzU5MzA3ZDVjYWU3NTgxNjU5ZTQyM2Y2YjY4YmU4IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:20 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, User-Agent\r\nlast-modified: Fri, 13 Mar 2026 05:05:58 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: gzip\r\nage: 2474\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FA%2BBjCuZauRGZWSR7eAipL9t7TFaVBKDNE6lI7s6EcNjauuAiJWDFXs9DPh4e45rAU2rVnLehpAtsVpCVMC%2B0hFxn50Oiaxvq9JqvNDN1dl0kFI1PGjOkV3dnooCoSWTr5Jy\"}]}\r\ncf-ray: 9f8f4ea5eee0b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4454,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"67dd1e2333e167a77697aca034eb3df6","sha1":"306594dfb8433db362be7a689933e0eeca162f48","sha256":"eede0d06ab82379d31524d842f64e1ac779e3b3e5b0b57c026290af86649b706","sha512":"7fc94d65c296988603ad1d10539e40a52db78e8ddea794bc22ecd118084675d2fb7fb3ee16aeac57a10443e95af4db7a2a55ce5b0bbe1d2b425163bcfb553f07","ssdeep":"96:hWrrPGI8yDdWTAAOxlfWG0eTnCa9JeUW7Y:hWvPG/eeA5xlZCa2M","tlshash":"ec910366303223358a6742edae0bcc41e2dad0477905d581f58e471a8fc6faca6e5dfc","first_seen":"2026-05-03T18:34:41.351704Z","last_seen":"2026-06-16T05:28:50.76667Z","times_seen":736,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/hu.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/hu.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qf4SAu0m0o2U0%2BItGg9OajBpaw2ShsqUF5%2BvwGm%2F3zSUvo2VB4yZxE1z98mISDXKoo8Q2O1w68Z95WyTR7WrmVrH5SBuwAfB8Vtcij9ZFQtRTxwD7VIWsJho%2BVgGN84%2FoycI\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e900d8bb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":359,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3621c5eb449691cbe1d3bc8757c831a1","sha1":"e7e3674fe42359cc9a376e543d7548418071aea0","sha256":"2c1380bd6fb1a88cabcae439eaf960d4dffa929a74cfe3d44f7552084fc1150b","sha512":"7c66bd80019b994685400d020e37d38ba3c45ee3cec449b83bf8a2e8d08d346e03d6245e81f9b868eab42325782107cbf837f3c057efb2c83a5151b22b1104c7","ssdeep":"","tlshash":"61e0d8caa9e9c90e9a1947694eed71da416270cd21cc01fd71843528fd4d3ef2411764","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-06-25T06:50:03.070348Z","times_seen":5158,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/flags/cs.svg","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /flags/cs.svg HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2FE%2FDcnGGBvRglJP2Q4692wgCQcsoX61yXUdzYs0rLWoj00Z5vFTaKanyvDrHzpy4%2FWtr44%2BPosvOBykWqr%2FE18c%2BGh5yscRTNN4c59oXTZ6Vfn7we5qNlJx3PZ8ltPykSuP\"}]}\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Thu, 12 Mar 2026 12:14:08 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\nage: 2475\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e900d85b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fe0a2e4225eee5dd8a3c73a5ab5a312","sha1":"c930c1341640bee697cf50053721ddfd750dae2e","sha256":"2a3a7fa3da584643cbac6234aa452705982f50454ed0a259d8c8cd6a9c2fa8c8","sha512":"92390117a5b345c7f9123d5d06839d95959664b32e621961e0d28a353ee515df51a446563354cf9f3911acbd0032a0fb61b1ca356250262157aae05dc907fe8e","ssdeep":"","tlshash":"80e06889a0e88e094e1803b60efcb0d5612330ee208d02ecb0c06619e9197cb2808ee8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-27T17:34:00.094685Z","times_seen":5262,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"randenta-ro.live/frontend/assets/ro/img/responsive/blue/hero-mobile-320.avif","fqdn":"randenta-ro.live","domain":"randenta-ro.live","tld":"live"},"ip":{"addr":"172.67.179.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:16.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"randenta-ro.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 03 May 2026 17:00:39 GMT","end":"Sat, 01 Aug 2026 17:00:38 GMT"},"fingerprint":{"sha1":"DA:91:5A:5B:3D:1E:AE:97:A9:35:C2:79:F8:7B:03:22:58:A9:43:D4","sha256":"36:55:AE:27:0F:0C:F8:97:21:02:AD:CA:A2:C1:07:EA:38:74:1D:3E:58:4A:E1:9A:69:31:7F:0A:25:D5:9D:1B"}}},"request":{"raw":"GET /frontend/assets/ro/img/responsive/blue/hero-mobile-320.avif HTTP/1.1\r\nHost: randenta-ro.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://randenta-ro.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNseXYzcnc2YXl1SW9NN0pvc3hpUEE9PSIsInZhbHVlIjoiTUtrd1l2K2FkSkNnTGwxbU8vb000Sm1CQ2lqNWJNdVNMZnVoNWZIN2YxMnkvNGFxc1doU2o5bzlxNG9wR1FaT3JFcjMyeUVKQzdieERPZ3owZmpXMW1zRnM2MVlaSVk3K1NFK0V3L2RabjIvS3hvdElqNDc3aFhFZDI2aWxyT0wiLCJtYWMiOiI4ZDM2ZjM4NWNkN2FjY2Q5NjVmNTk3NGY5NzZmYjIzNDYzYzcxYjYyMDc5OGIyNDgyMWRjZmY1OWNiOTJkZTM2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxxS285bWdabkNPbzF0ZWVHUkxvdVE9PSIsInZhbHVlIjoiMDlNTjRwcTZmZk1TWmI0SXB6MHpoS01ZalVadGxlVzQvQTFmeGRMYlhFcDhNaE5laWZxSEVzYTFhRDdnUGh4elRFaTZZeG9JRWNiZjkyeC8rMjN0dkE0Y2dBaUVnWUIzK2ZpaWpxTTMxYVZWWGhLV0htdlIyaXNzR1FBLzVNSSsiLCJtYWMiOiI0MDNmNzAzNTIxZGViNjkwMzA1ZmYzODAwMTAzN2E5NTRiMTdlZjBkZWNmZWQzMmQzYzFkMmJjNWI4MzJlNmFkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 09 May 2026 08:24:16 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2596\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 16 May 2026 07:43:01 GMT\r\nlast-modified: Tue, 21 Apr 2026 18:23:11 GMT\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\nage: 2475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzrPootpmtaCvlz%2BvX8Swo6n80MY8I36O3KvmDLNiBRghO168XkcIJfyesN6y2W6DuNevYL503XB%2FTiYwLkTK4%2B4p89XkprzyBVRgZED9%2F4T1Ps%2BFEnjpzUYZ4RNQYEbPuBh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8f4e902d9eb515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2596,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"06326a82bebf7a2e148a822bc4a4c206","sha1":"9ac2c542016ac74d22df2ecfc8f0babdd5bd5a26","sha256":"5c2c4e7854e8eb3c8293f1d3cf153a3d933f3beface7facf3bbf70c571b595a0","sha512":"71172047f2db561693f021a44d47bd574cccf0f067ae037d88beed7076383ff7ac9ae689e4979e8c8072b1da3f5eb853f56c2559b04845d0a9f4432daa13d114","ssdeep":"","tlshash":"4e511c71db5d5962fef1277075ebc1817f623439a35e4292e821f64a3d2d884cc20dad","first_seen":"2026-03-12T05:25:58.728474Z","last_seen":"2026-06-14T20:35:45.67679Z","times_seen":39,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"randenta-ro.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/questrial/v19/QdVUSTchPBm7nuUeVf70sSFlq20.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://randenta-ro.live/","date":"2026-05-09T08:24:17.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/questrial/v19/QdVUSTchPBm7nuUeVf70sSFlq20.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://randenta-ro.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 May 2026 18:52:05 GMT\r\nexpires: Wed, 05 May 2027 18:52:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:52 GMT\r\ncontent-type: font/woff2\r\nage: 307932\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"3eeb887885cd0e81fa6fa76301ea4eef","sha1":"7c922da80cb48dc5e2c40e3e7ab518bb7d9ab3a1","sha256":"1dc95bb946f0c4af9efdfd520784858b0a89b5bfed3e9954682fc9d4c043ae44","sha512":"fa76a191bb47e650687be3e20e60cd1086608dc3736663eedd910fa87368ea86dbedf6ffd30da2a7735d91d09b44a932817d134d242dcec597ba933fdb0b0e17","ssdeep":"192:5Ucmle9Pn1edYAlSYYmcoVe9IujBLr8yxPtTe:BmlOWY0l89IWLAyxPtK","tlshash":"69f1bf9603b72b51443d34f3c60a07fdc645fa3a382b80e49cf195e0adb4d615169a2e","first_seen":"2025-09-16T08:55:44.832998Z","last_seen":"2026-05-31T17:18:31.369165Z","times_seen":53,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}