{"report_id":"7fe16878-42e3-4862-bf71-dade6ab5a344","version":0,"status":"done","tags":[],"date":"2026-08-13T19:14:46Z","url":{"schema":"http","addr":"roomycast.com/","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"172.67.180.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"roomycast.com/","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"title":"RoomyCast | Ultimate Movie Night Sync","dom":{"size":13319,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a309c364a7b683867f7f778837edd9bb","sha1":"f3bb4c36f6fe2040dd7e08b188bd98d3b9316eb3","sha256":"9e12dd7a5fbcd463fe41b0cdf69b9da60a91fa68c637fc359f04d2b488ee4bcf","sha512":"ff841cf7a0a403c3f80f2e31efcf43fcb59a9c58f89811439c2cb84be45e2dd891d47f7421f4d679b8630313d919ff3ea01f0d5b7e7f928968516c6cea423727","ssdeep":"192:bziEBre7tLfcjuVAGc2X+FM+Bl8UNitykXenP:3iEB67tLfcKVd+8m0T8","tlshash":"d452632a60f550330153a2956a6fa31f3ee2a107ca06ca7137fc47c85fd7d9ac9b3259","dom_hash":"domhashb56b1e9415576e87c46f492f381f2339","first_seen":"2026-08-13T18:18:36.091165Z","last_seen":"2026-08-13T19:14:47.768957Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"roomycast.com/","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"172.67.180.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T19:14:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"roomycast.com","ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-05","domain_rank":0,"first_seen":"2026-08-13T18:18:29.094984Z","last_seen":"2026-08-13T18:18:29.094984Z","alert_count":36,"request_count":12,"received_data":4489201,"sent_data":5962,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-08-13T02:30:49.996096Z","alert_count":0,"request_count":1,"received_data":2521,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":4,"received_data":112192,"sent_data":2324,"comment":"","tags":null,"fingerprints":null},{"fqdn":"canary.discord.com","ip":{"addr":"162.159.128.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-11-06","domain_rank":225253,"first_seen":"2020-08-17T07:23:04Z","last_seen":"2026-08-13T18:18:29.763675Z","alert_count":0,"request_count":1,"received_data":2382,"sent_data":645,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":7500,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-10T08:03:00.460584Z","alert_count":0,"request_count":1,"received_data":11324,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"unpkg.com/@studio-freight/lenis@1.0.33/dist/lenis.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92a8be05065e5a269868db1dd2b3b4ce","sha1":"91f2b9454d85ad446fbba1ec16d704eb9833e442","sha256":"228a4541f3c25622518832f47f7be3e800027b046b4ac2bd05118ce9d91493f6","sha512":"b872c6d5a9d371552e475d574c6d06ed4b506097ab73487411f2288d4908bed94079352bb804fac0598fa83221d66b340ef9b145bb8f8fa9565a41293b0b2400","ssdeep":"192:uecFA6O1g/Kb8BB1NzLp8pNTHqXF6AgcuIcVRdja74KmXdHL3s63fbwxDyJz:uecF58wNzSHVjW7cXdrcbxDgz","tlshash":"a32287877111bab523ee51dee1174241b33a92a46301002cf46cafe6b574a7172fafbd","size":10445,"data":"","first_seen":"2025-01-15T14:02:20.52271Z","last_seen":"2026-08-13T19:14:47.788464Z","times_seen":542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f77418caffc806103e9b37a13a9b8f89","sha1":"5ef53ed0365477f57fe65990052a044ad0e406a1","sha256":"795ca78b7a6cc8d33f24c64e3d73a9cd1f89ff0353868e4468920f85f52aa749","sha512":"7a4eb745bc1aa969e6b4b91d3af0cc69c72d8d7dd88c181fcfa0ec99decac0e1eda14d9750851cf60955d287e2d2d5cc927538254c8903f6b92aa7288e0158aa","ssdeep":"96:z+FMMSDCn1yCto88KHhoq82K8Py7lGVHNk5btykXenN+:z+FM+Bl8UNitykXenQ","tlshash":"88c1a25aa17b0231086776782b2fa349313620135a04cdf77b9d53a8af04ebd42f7bd9","size":6023,"data":"","first_seen":"2026-08-13T18:18:36.128679Z","last_seen":"2026-08-13T19:14:47.797115Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"roomycast.com/fonts/fa-brands-400.woff2","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:19.073Z","timestamp":1786648459073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://roomycast.com/css/all.min.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdW2yy00VdQo%2B2R5379bOjwqv7CK2KFO%2BX%2BPHGK%2BLF7pOnaIWyX6UDmGX8DRZat8eBhqoww8itqtWZTGpbrlW31AQI2YCAmN5swXxfKGlhqPQsNeQ5%2Bzd6HZ%2Be4iu9DB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3a4ec9afe318dc8593c84fd27213b89c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 13 Aug 2026 19:14:19 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2aa0ac53d19b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 108020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108020,"size_decoded":108808,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 108020, version 772.256","md5":"8b0ddedbb27cbc9971c8667caa8a0cc1","sha1":"4350f9ba93384634faf35f41c503c99c767f1069","sha256":"748332090c4b8e20f95d0ff59f0be20fa9c889359d3b36d4b886d73376054207","sha512":"d3b4791b988fcfd9911a2158163d0c44d6797650890b5d4ac769417e09d8fc2c67edc595be8e7927de0519a85eeb3577d0c7e385bdc99d762c7a6cfbad021b39","ssdeep":"3072:MUdDCdwgz0kLytDzAUhcJz8zfleLXsg4OEpUtbeONfQfG:1d+dNBBh8zflIWGP9Qe","tlshash":"8db312128031ef76fd4aa621de6b1807b03da30b67f249a9ded46a37c050997b471b4f","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-13T22:17:21.112143Z","times_seen":24368,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/images/pppp.png","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:19.183Z","timestamp":1786648459183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /images/pppp.png HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fnXwCr1k3e7imZl3iiyVmajo8aAUtBlETCxvJHlkLCyn9zrpj15%2FUeDfuNqImDq8c4AugztliaHe3Wx7NbRQNaBuqmgoTXeUzoS5Ym5r6TMi3D5jC0VLb%2Fr4hxt1Fwv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4b856c16bdfb8111f9dcad62700b27f9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 13 Aug 2026 19:14:19 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2aa0ac5ed25b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1340547\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340547,"size_decoded":1341353,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"de6c17ab2b20fc9c8b00000b062953c4","sha1":"47da4bd792a2dbad25f04627f6ecf7a54f6e4a2c","sha256":"e4e0dd109b1793132320ba4040460bd3723cb6c62480a0420d8820a6a5cbb1f1","sha512":"16c6a87bc341bf3fe59b84423751a92584c30f2fb55ceea661914a4320644fe3c365fb77d371c31c0000c6b9fd9e7bfbb895adcf993c04bee62e9f6bde255ace","ssdeep":"24576:iLsftonCL82qBJmIAprFMCk/KJEdB3bFASQf4EJ:WgwDVBmNHk/O4BrmSQVJ","tlshash":"db258df0651229f1d4869a7298724097fd313f1939ea046c69f7d08cbbdce22265b7b3","first_seen":"2026-05-10T04:19:44.483335Z","last_seen":"2026-08-13T19:14:47.772007Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:20.087Z","timestamp":1786648460087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:56:10 GMT","end":"Wed, 11 Nov 2026 10:56:07 GMT"},"fingerprint":{"sha1":"F3:18:40:3B:2F:29:8F:72:5D:C9:F9:8D:83:FF:1A:13:26:F5:A1:7A","sha256":"17:EB:45:1D:BC:F6:67:CB:CB:85:0A:03:6F:55:93:30:F8:33:F4:78:1A:C0:46:17:64:09:C8:78:62:38:02:5D"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nOrigin: https://roomycast.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 13 Aug 2026 19:14:20 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: GET, OPTIONS, OPTIONS, HEAD, POST\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://roomycast.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roTj3miWhuN6aNNPkNUDDYVrd0Fkc1ovTnJqO1PVOrsWFySgQPTD0D4xFt3OP5bXRFeDc2dF15F1yWbxJBDUzX99ZeY0uNLj4MKAvmF2a23X0MAyInEMgqwI\"}]}\r\ncontent-encoding: br\r\ncf-ray: a2aa0acb9b531a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":2129,"mime_type":"application/json","magic":"JSON text data","md5":"c072daa1c2cda30d0f3f81ca812ae319","sha1":"d5445a8099ed4730982271c1ed6f80fa78de8c14","sha256":"33c5189253a521d59112bc6a96710c6dee86b2d05e85e945f5bd56ac736c425c","sha512":"84df51623e52eb7458514c9b46c5fac80f3293a9123643f4f411ee7fbaec100ce117dd72327d9a9c16254ab67b90c36d536b902c003b5a10c304974f44478743","ssdeep":"","tlshash":"f6012f68e4780e7b9cb813587078690b103422176e523a8e7bc0a74d0f8d8bf30b035e","first_seen":"2026-08-03T13:31:59.23668Z","last_seen":"2026-08-13T23:27:37.354175Z","times_seen":350,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":4,"connect":2,"send":0,"wait":201,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:19.070Z","timestamp":1786648459070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roomycast.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40818\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-13T22:23:50.378348Z","times_seen":20289,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":22,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T19:14:18.458Z","timestamp":1786648458458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVqsFOGs7Pa0bBcs0idtNMepZuKVQgixlxjKciCwM%2B4Q8E%2BW%2FWMqLeZIEeRsebi7aLvBA3M5p0karnp8e5M890R05P4wlIa828Q9C5n29cOmEXaldGMnh5X4PNSQihru\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\ncf-ray: a2aa0ac19ce6b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":13312,"size_decoded":4869,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d98e234fa9f71d424d6315b6ea00d59c","sha1":"de9071ee6bfa569c7616c21c5cf596461d87053d","sha256":"9aaa6d8f625fc76223ca579f8f0e2d7104a3b5cd7013662cab77d35d3704a874","sha512":"1a50f485a36de5aeba404a7abfe880c9e56cdf764627b535b74605bf7582e670f49eb3ab680575a85ee39718d535494f28145e5f406d8737e2a37504668e1f82","ssdeep":"192:yzipWBre7tLf5juVAGc2X+FM+Bl8UNitykXenwM:aipWB67tLf5KVd+8m0TLM","tlshash":"d352642a60f550330153a2946a6fa31f3ee2a107ca06ca7137fc47c85fd7d9ac9b3259","first_seen":"2026-08-13T18:18:36.10962Z","last_seen":"2026-08-13T19:14:47.775158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":16,"connect":17,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/css/all.min.css","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:18.919Z","timestamp":1786648458919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /css/all.min.css HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1lEnR%2FJWMhha%2FuEIpOkbkwsW77%2BaHUaqRQOaf%2FTUEV5ajN5D8fN8jt0%2BdphvC3afsRAv4j30OkPSrko7OkANPi6R5ShJqiIA1AQE%2FtW5En%2Bvl69feqRt3ZPBF%2BoVd0z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"6a4ff98d046571dd11d6dbc14f20487a\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\ncf-ray: a2aa0ac43d08b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101965,"size_decoded":23959,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"62d51fa0e9619f6439802b76d297add8","sha1":"7a61b897c42a66f6e494dff46fa0c63b1c6016fc","sha256":"4785b6972fb2353f0b4e7bb64ff081d2f3cbbfc555de4132b41cd9fb2faef104","sha512":"956de15dea3aac1d7730843ca32f0d5a484352827b1a195f06bda09a126a5302c8feb7bc143bcbbabc26b264636104c2770ed7168e50c3a266b6b12ef367e19e","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGujprfZCJ:S709gMGFiyPGujpfZCJ","tlshash":"03a3b7f8e44c15d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-09T00:29:24Z","last_seen":"2026-08-13T19:14:47.775883Z","times_seen":269,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/images/userv1.png","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:18.936Z","timestamp":1786648458936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /images/userv1.png HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Q7lK933WU5ecCWph%2FZaLnzpwd4lzwDKWNdtsq3GFeaODTvgsoV4PSVpVQImAsDeXq2MftLh1hi8GkAlL5YyOxX20AilHKK4CGzLytTKtfqBT4N5mFcX5VTXEKGNmE0t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2af7b46759b9d266c8c446121e6a18b8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2aa0ac45d10b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 131799\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131799,"size_decoded":132599,"mime_type":"image/png","magic":"PNG image data, 1907 x 871, 8-bit/color RGBA, non-interlaced","md5":"92c7de32d1337fe928e52da0f8d7a413","sha1":"5a41c4278f2253dfa04edd29414f35e3bcc57605","sha256":"b39049d30001bcc2dc502b6f2aaf6d230e10072c0bf3e109aa226fbffd8f83b0","sha512":"14d9d7032ac44f0dc435b60d602dd628dad4d2683c1b6a289d09ba4b3ea9e1785f77e9f02c8ef9c579d6b3e4676b2faf85207e07127947c3996acb5286a71c71","ssdeep":"3072:YfaO4W3XUDCC6i5tAEwcsKGCyp9cdlZTv:YiOv3XUlttU3ydlZb","tlshash":"a3d3f1f43e4e3ac6f29f097a9015a3bd2f3d126171e063b7296351c44b9b24f478a897","first_seen":"2026-05-10T04:19:44.482129Z","last_seen":"2026-08-13T19:14:47.776542Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:19.074Z","timestamp":1786648459074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roomycast.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40818\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-13T22:23:50.378348Z","times_seen":20289,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":33,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/images/santov1.png","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:18.929Z","timestamp":1786648458929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /images/santov1.png HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckNadf2ippnQmKHxt0w3GvQA%2BWcgs5m6E8HFe7wPcwNZFUJXrc7SqLRON34R1oqqDegqMb8PyNbR7bhcRG9lO%2FyaPQSOpaOOtV4wxL4mhw4K61IHNzrPB5MA7RV81F0x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"57faa74f50fffd95892613de083eb82b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2aa0ac44d0cb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2274296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2274296,"size_decoded":2275099,"mime_type":"image/png","magic":"PNG image data, 1906 x 938, 8-bit/color RGBA, non-interlaced","md5":"06dd89bbea1923efe1de2a11eef62903","sha1":"ceb2d84322cb045d2952444d91335037da6ff8de","sha256":"404d6e19ad4d73bc0f4815cd593fba5f4e5638d9a7da50cd0c8e8985331e8187","sha512":"c416e4133fff374813bd41e3cf4472df922ad93b79ec3a5cda739e793a7d1fbbe6e3469daf6c9a77fb43af4c784d9d801e485d242c6b27faaf7fe3e7de467c90","ssdeep":"24576:ArcnQxhWktsUYCBznledtpe/fbtoGI70ondq54jlfb9:ArcnwWktjYCredtvogjRb9","tlshash":"2f25339d8ba640dbd2cd32f892f8da4cd05746394fc1edff06a1f6e811a99395279c02","first_seen":"2026-05-10T04:19:44.499486Z","last_seen":"2026-08-13T19:14:47.777457Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/fonts/fa-solid-900.woff2","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:19.075Z","timestamp":1786648459075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://roomycast.com/css/all.min.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3swnUb6kjBIXg3wjEukzD0DIB4b9jNYimQ5Aw8osazB4ft4fmiQO%2FGlgwx868UgMVkmDEjYAJG5Y%2FDSOGJXiKR%2By66a8QjFXcaGE8IHuL%2FiL7EIVPgYJynGRaFzv83sI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"6debc981290f4342b5bd63e83a92d28c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 13 Aug 2026 19:14:19 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2aa0ac53d1ab4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 150124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":150908,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-13T22:17:21.089105Z","times_seen":45224,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"canary.discord.com/api/webhooks/1536447175163248640/ivOxMSBiU9AgHnN7mY9MNApU42XTornvtCoL4gJZupbc5gzNGwqna33tqxJmJMPRD18r","fqdn":"canary.discord.com","domain":"discord.com","tld":"com"},"ip":{"addr":"162.159.128.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:20.328Z","timestamp":1786648460328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"discord.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 20:41:23 GMT","end":"Mon, 28 Sep 2026 21:41:17 GMT"},"fingerprint":{"sha1":"10:6B:C5:E3:42:95:F8:9A:18:49:58:E7:AD:E7:A1:BC:72:C7:48:C5","sha256":"D1:F4:2C:18:95:0F:BC:3C:69:C8:1B:0A:83:3D:6C:36:25:15:7F:25:CC:30:37:16:FD:6D:26:32:6C:42:22:77"}}},"request":{"raw":"OPTIONS /api/webhooks/1536447175163248640/ivOxMSBiU9AgHnN7mY9MNApU42XTornvtCoL4gJZupbc5gzNGwqna33tqxJmJMPRD18r HTTP/1.1\r\nHost: canary.discord.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://roomycast.com/\r\nOrigin: https://roomycast.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:14:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: __dcfduid=2fba9b7c974b11f18785ed6adf7af3e7; Expires=Tue, 12-Aug-2031 19:14:20 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax\n__sdcfduid=2fba9b7c974b11f18785ed6adf7af3e7ca95bba2165881d8332482df73581527fc3f856d074eb3009f92582b7d165624; Expires=Tue, 12-Aug-2031 19:14:20 GMT; Max-Age=157680000; Secure; HttpOnly; Path=/; SameSite=Lax\n_cfuvid=Sem65rNzap4IbKPtpDlMKGE3iZsIuiPXjEhJ7pGQqV8-1786648460.3375652-1.0.1.1-27hdyXegqJg45t7jO0UNfxngM4S2YyZQ51526phlZ9Y; HttpOnly; SameSite=None; Secure; Path=/; Domain=discord.com\r\ncf-ray: a2aa0acd1fbe8deb-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://roomycast.com\r\nallow: DELETE, GET, OPTIONS, PATCH, POST, HEAD\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\ncontent-security-policy: frame-ancestors 'none'; default-src https://o64374.ingest.sentry.io; report-to csp-sentry; report-uri https://o64374.ingest.sentry.io/api/5441894/security/?sentry_key=8fbbce30bf5244ec9429546beef21870\u0026sentry_environment=canary\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EY8z1cJVJaIcfzBwgyp65Bp8GrFuWwj1ooaBUxjvSNnteZkG%2F2Gfq9rHSKq7nQeZVJJXJeRhGGTXprApFPhtBnUmC1%2B4JeAG5JQ1vunNonMcwyWSMoit9PzFVwvZH%2B%2BNd8hdrQ%3D%3D\"}]}\r\nreporting-endpoints: csp-sentry=\"https://o64374.ingest.sentry.io/api/5441894/security/?sentry_key=8fbbce30bf5244ec9429546beef21870\u0026sentry_environment=canary\"\r\nx-content-type-options: nosniff\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization, X-Audit-Log-Reason, X-Track, X-Super-Properties, X-Context-Properties, X-Failed-Requests, X-Fingerprint, X-RPC-Proxy, X-Discord-Locale, X-Discord-Original-MD5, X-Discord-Timezone, X-Debug-Options, x-client-trace-id, If-None-Match, X-Captcha-Key, X-Captcha-Rqtoken, X-Captcha-Session-Id, X-Discord-Resource-Optimization-Level, x-science-test, X-Discord-MFA-Authorization, Range, X-RateLimit-Precision, X-Discord-Features, X-Installation-Id\r\naccess-control-allow-methods: POST, GET, PUT, PATCH, DELETE\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-discord-features: webhooks\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2382,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T22:51:57.013279Z","times_seen":17877309,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:19.069Z","timestamp":1786648459069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roomycast.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40818\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-13T22:23:50.378348Z","times_seen":20289,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":29,"dns":1,"connect":0,"send":0,"wait":28,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/css/style.css","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:18.915Z","timestamp":1786648458915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S82abx%2BzxfFuoE7KBZnf4HUPTndy%2BzbukxcLt0gIo3mehSwqTmBZcpjC6n5ykA1IT1G0gjbjqEHQ%2FQc34qGImgUm19qTIkmQxnV%2BOICIGCWd55sZUMGGVpltJ%2BSEmaOP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"d572202f6667646cf5006089f8172f61\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\ncf-ray: a2aa0ac43d06b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9596,"size_decoded":3513,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ca4ce5bb6f41a6268b2568e1b3307309","sha1":"fdafb8cb12ac17f63d5db1745538703dc16cded7","sha256":"541482b13530bfa65f835258779300c3fdfb0de75e891641f695bdb94ed8f520","sha512":"dd12dec4abe604c046a2c6fa965314de5c10e16846113a1d8638f73ed47a263af6ae7aeddfb0c66510a0fd75a1b3967beffa5e3c60632873fa8a08432c96b212","ssdeep":"192:2E+1CCNJ2V/wQZHZ07h+v7+j8eGduhz/R9iy6KF756A4pMzZXQy3y9Hd8oOPmLu5:2EbmzFv","tlshash":"5012622266132514b42be698bffb9b4c236cd403d50ac57e7b891149cf893bc92b2f49","first_seen":"2026-05-10T04:19:44.49802Z","last_seen":"2026-08-13T19:14:47.784659Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:18.918Z","timestamp":1786648458918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 13 Aug 2026 19:14:18 GMT\r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6816,"size_decoded":1312,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f44b70088408cdf4e636ed7d07525dea","sha1":"129c3c6b14aa268b30639d45162550f378d5eb9b","sha256":"6e5005ecae525460af6ccc1c12848a2b8eddcdd2a2c8f4549519796e8142227e","sha512":"2b1814421ee1a8a624494b8d1939b622ffe962e9b278da5cfee49b03a38316ccd5e96eab85f971c3e51f4bc7f0bebaacd712fd94d694f61e9eb9b4302791aa09","ssdeep":"96:HOEaCyOEauOEahJc+ueOEaCNuOxMaCyOxMauOxMahJc+ueOxMaCNuOpaCyOpauOJ:ACFJRSUCj3Ro7CcQRvSC5VRed","tlshash":"2ee1a2a0092fa540eb431cc663cf3d3a9e9e6196601584b99bfd0858dc7ec2a7375b1c","first_seen":"2025-10-09T01:43:30.836812Z","last_seen":"2026-08-13T19:14:47.786825Z","times_seen":69,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":37,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@studio-freight/lenis@1.0.33/dist/lenis.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:18.922Z","timestamp":1786648458922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 17:56:32 GMT","end":"Fri, 09 Oct 2026 18:56:21 GMT"},"fingerprint":{"sha1":"81:08:7C:A2:AA:81:B4:77:02:EE:53:FB:23:6F:1D:97:C3:92:2E:A0","sha256":"13:42:07:B0:BF:53:83:27:C3:6E:69:00:B5:F0:1C:58:6C:AD:B4:DD:93:08:84:F0:97:51:3B:60:91:10:85:76"}}},"request":{"raw":"GET /@studio-freight/lenis@1.0.33/dist/lenis.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a2aa0ac44be423eb-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 169679\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 13 Aug 2027 19:14:18 GMT\r\nlast-modified: Mon, 10 Aug 2026 16:06:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:IopFQfPCViJRiDL0f3vj6AACewRrSsK9BRGM6dkUk/Y=:\r\nfly-request-id: 01KZF6Q3JHE4X7TQAHQ5RGVVAZ-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":10445,"size_decoded":4019,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10444)","md5":"92a8be05065e5a269868db1dd2b3b4ce","sha1":"91f2b9454d85ad446fbba1ec16d704eb9833e442","sha256":"228a4541f3c25622518832f47f7be3e800027b046b4ac2bd05118ce9d91493f6","sha512":"b872c6d5a9d371552e475d574c6d06ed4b506097ab73487411f2288d4908bed94079352bb804fac0598fa83221d66b340ef9b145bb8f8fa9565a41293b0b2400","ssdeep":"192:uecFA6O1g/Kb8BB1NzLp8pNTHqXF6AgcuIcVRdja74KmXdHL3s63fbwxDyJz:uecF58wNzSHVjW7cXdrcbxDgz","tlshash":"a32287877111bab523ee51dee1174241b33a92a46301002cf46cafe6b574a7172fafbd","first_seen":"2025-01-15T14:02:20.52271Z","last_seen":"2026-08-13T19:14:47.788464Z","times_seen":542,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/images/groupv1.png","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:18.930Z","timestamp":1786648458930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /images/groupv1.png HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HP%2Fp7ynSDZh1wOF6M8aE9u4tanAqnvDzrjiK%2FaulEENxqjUgThujmMm1p9KoKtzQXDAx6WWn1LI0AfPn4rjqT5FMKnbXvfOSCGn23Cf%2FuJVUn0GRzdxLxWxKhqyc11lE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2c142656ed93d8c674bc286284e10040\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2aa0ac44d0db4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 82022\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82022,"size_decoded":82825,"mime_type":"image/png","magic":"PNG image data, 1910 x 770, 8-bit/color RGBA, non-interlaced","md5":"91f9255cacf63b3e6a35987ddc3ea1ee","sha1":"d04b071621061d9afbf8b1b5a213f6668a1f9db8","sha256":"f1d956e34efd7ac2982f63b4981d4429234504d33497aac14e2d055ef85bbc0b","sha512":"a4f1f6e16c2c02962b5f9d2bbcbd03eca10b383aab24f6069db70db9bc3b645255b41e823ee7622fbe953f62365dbd75dc7b62c61f98b4b5eb22898324772b9c","ssdeep":"1536:r9sGOBB2JNvLL/5/kvu2NLLJAICBZae5SpmI7egwXn7OVjsl8dAAda:r9sGOrEH5IDNL+ICB6qgKnQjs+2","tlshash":"cb83e0a86b07a1d8f4fed0b725f56f26239e10c563494f8c5f50ea642d3647f21a2cca","first_seen":"2026-05-10T04:19:44.50291Z","last_seen":"2026-08-13T19:14:47.790913Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/images/platv1.png","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:18.933Z","timestamp":1786648458933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /images/platv1.png HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjF5YzCpUrmKZ3RFvZQffs%2F9yyoIEgOdimvqmnhn7qAEBhzVfKeyOMe%2FDrkop%2BkTgnEqyMq%2BPaFTvWC0v%2F6W1tskafbrXTS%2F4opFdR8L6AfAIr%2BX84SmxTMnadYfWdTx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9cdf2c10ef761e8f5638acb741a1d308\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2aa0ac44d0fb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87980\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87980,"size_decoded":88791,"mime_type":"image/png","magic":"PNG image data, 1906 x 763, 8-bit/color RGBA, non-interlaced","md5":"f5c2b727cedfbfd74730e626161a0e7d","sha1":"eb26c33c53b0c00d4bfcce243a3321d37d7f1552","sha256":"c924cbffef756e762d368d417fb823e533285c944bbe6aa27c4dac52e9cdfdf8","sha512":"a5060b0f24726c25112b0d1f639181af001aeca46467ff0d0c808f46b6cd944aa1e077bc62a9d7b35d357a5c7b1e407f331d0ec6782e0634b17717d30355dfdd","ssdeep":"1536:ZD8izqR4k8FpW3ZedK69GVejBPuCtAmXrx6wa9PfCFKvRqk5gn/2MvBFJ3Qqqqqe:ZdzW6XLVrtAm7x6wam/2+AnO","tlshash":"0683e0bccecc2469cef9cf768dd296b6b22d17c9502b73b1866191004f2b6e7145ca36","first_seen":"2026-05-10T04:19:44.505728Z","last_seen":"2026-08-13T19:14:47.792906Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/images/netflixpartyv1.png","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:18.928Z","timestamp":1786648458928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /images/netflixpartyv1.png HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITM%2BZZMQ8NT4IxHxszn%2BI6AzyUhCfQPtivUiTCcu%2BDU0hJ6JFKdfyZgF%2BPA45TREZDWFfBuqo0t%2BZuRCkJVvqKFS2h8C12hsMnKzK2RWxZWWNtK7jcilleBll7hOoj26\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"78b739b3e55e3db9cd3d9e300bae33f1\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2aa0ac44d0ab4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69448\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69448,"size_decoded":70255,"mime_type":"image/png","magic":"PNG image data, 1902 x 946, 8-bit/color RGBA, non-interlaced","md5":"fd107da6affa53c9f64003b9f8f9cecb","sha1":"cf31878b625638eb452213b0f8b5bd8716809ff2","sha256":"c7f49d70b8c84818b98476c54bdb45f88f142a22ac6a11057b2183c60e1406fc","sha512":"6f2f9186382f4e7f216001e9515617fff4e62b0b33e071b1def1b3dca9eb84e2f82ea76c2f42a40adc46df8e69570aa33a9a957886116a34da5dab00ab7d365a","ssdeep":"1536:4wW8J5l6o3nuPT55FDhNbwQABLKuqUCSvWC8FxF:4wPPbnuPFhnABkUCxfFxF","tlshash":"c863aeb99da2b4a2f0324a319cf955f47db8498d90fce536d474e279dac021f73c8822","first_seen":"2026-05-10T04:19:44.481046Z","last_seen":"2026-08-13T19:14:47.795261Z","times_seen":3,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roomycast.com/images/profilev1.png","fqdn":"roomycast.com","domain":"roomycast.com","tld":"com"},"ip":{"addr":"104.21.31.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:18.932Z","timestamp":1786648458932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roomycast.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:31:59 GMT","end":"Fri, 02 Oct 2026 03:31:51 GMT"},"fingerprint":{"sha1":"D0:11:60:0F:2D:8C:4E:73:58:6A:8C:42:6A:E8:24:D3:A9:87:DF:53","sha256":"A8:C7:6F:08:23:FD:12:96:32:97:0D:8C:2E:74:57:4E:A3:FB:CB:87:5F:69:8D:65:36:B0:7B:EC:CA:94:2F:C6"}}},"request":{"raw":"GET /images/profilev1.png HTTP/1.1\r\nHost: roomycast.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://roomycast.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KMM9gXMEAwzMmYfImYgaJfP9RF2aGhL2gg2zhCQUpDGTC2wsRuU%2FoS1nEGmdPD3mNooM4nyIgFWmISBl0TRJ3Lt%2BsBvHZwlYpqaGE1lWUoZWeR859Ft1Ra3PxK14GFm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"572cb0b527ea816883485a13eebb8319\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 13 Aug 2026 19:14:18 GMT\r\naccept-ranges: bytes\r\ncf-ray: a2aa0ac44d0eb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 110462\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110462,"size_decoded":111264,"mime_type":"image/png","magic":"PNG image data, 1909 x 943, 8-bit/color RGBA, non-interlaced","md5":"2d4d287dcf94d4b1ef8cd907de1ef60e","sha1":"38fdb2a07c3bbdda1a88784dfb9501b66f2c1978","sha256":"15a69cb47ff5b54169ecbc695f99fa191b39069793854119739c0ae1d80f785e","sha512":"f5034f574c40323c0a3ae1bce648693813b3300de6df14624364bdeb362e7c583f33b019366dd72974155d8ed264942475a6efeecf31c89cbef11107939cd0dd","ssdeep":"3072:jZ7el2khlcxBhuuUaNZjfQGCBUW8Bnu/qQ:N0heJDQiBnu/qQ","tlshash":"9bb3e13d490c12cdcaf604b97ab4cf27be706b9d0652a60d4b68a3e4c75e152cf9da34","first_seen":"2026-05-10T04:19:44.476514Z","last_seen":"2026-08-13T19:14:47.796299Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"roomycast.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roomycast.com/","date":"2026-08-13T19:14:19.068Z","timestamp":1786648459068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roomycast.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 40818\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28048,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-13T22:23:50.378348Z","times_seen":20289,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":18,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}