{"report_id":"97fef5bb-8880-4710-a2e2-4c1a45566fa0","version":0,"status":"done","tags":[],"date":"2026-08-28T13:46:20Z","url":{"schema":"http","addr":"roobet.fyi/","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"roobet.fyi/","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"title":"Roobet Sports Betting and Casino Online","dom":{"size":65652,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43513)","md5":"7bfd4c75eda4a8f1b032cfbd40038e2f","sha1":"fa0691233b347bd7d6a9ca58b271d8f8114039f4","sha256":"2a1056827d7c6f2bb0a78ebc8f21967e2638def82d16c852c53cc548cd3fd834","sha512":"bc053d1b072b7160c4a61a4310289b47908c138b09499250c0d4e52aef991e84a0cf443b1894ca59326c757e935e057e2f8c9dcacc5e8f5ac195dc57c7ebd80e","ssdeep":"768:vwMTzZdypa9LihRmGRJr4qStyFAEf0Wpe1mVtJzzd3e6MNGYx7P0uOx7wD73AT7e:vB/yplhfOvEcWpAUO","tlshash":"8653f673a1d510b7236b83c992e2764cf1528649c6869a1cb1fd01dce7e2fb549b3b0e","dom_hash":"domhashd37ed4fd68357cdbe426a7fdf9d90f50","first_seen":"2026-08-28T13:30:02.895598Z","last_seen":"2026-08-28T13:46:23.28993Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"roobet.fyi/","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:46:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"roobet.fyi","ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T13:29:56.582921Z","last_seen":"2026-08-28T13:29:56.582921Z","alert_count":57,"request_count":57,"received_data":1409493,"sent_data":31427,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":1,"received_data":43948,"sent_data":564,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":11952,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"roobet.fyi/wp-includes/js/wp-emoji-loader.min.js","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34ea6fa3588e60e9ada0bf4707632032","sha1":"8cf68d3c9f70756a02297fb36c9aa8e5acfd7c0e","sha256":"dfe4cf5db79448cade3361d758b812de47ac26c93700100280559738e913542c","sha512":"5102ef4851acaba7dc5fedef95c75977b587301c31aef15ca41f70c3dc07832769dbc6209bb30b5eb4048e9afedbed9e6b48a2c81420e32a2c8b45e3af015482","ssdeep":"","tlshash":"c3518659eb7538db33fa01f2653a4d47eb614436e684d038c9ae631414b1893c375a56","size":3110,"data":"","first_seen":"2026-08-28T13:30:03.06288Z","last_seen":"2026-08-28T13:46:23.32669Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/cache/autoptimize/autoptimize_single_635cf2fba4c4b40e9738740b2ac342a8.php","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"364cf83099f5da4c389fa21583212bdf","sha1":"1b25dc6175ccb840daead8bdf1c5ddf1c571dc64","sha256":"27a210ff3c792d294c077a8b7a43b8f1eaa80b49b89f8ef809f6f1e98c5adfe0","sha512":"b011bf17f2bda894d451908c526ab0fd7dfafeaa3b45cd39f309aa5fbf46bf1723322a71a3c088b43860b53ed3c76d067a2b095b665c17e823a6f6367c8f1678","ssdeep":"","tlshash":"d641c0f361c5347502e6a98262c22bd0bf945192e452e0b5182fc89d37e3e9351f57f3","size":2245,"data":"","first_seen":"2026-08-28T13:30:03.014268Z","last_seen":"2026-08-28T13:46:23.299616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/cache/autoptimize/autoptimize_single_f5d551b9a65ccf21c422f4c9088ef1b8.php","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9118df8519b878078e47a28c90677e6","sha1":"9f2b3a3a2fd4bba9f44b20a62d97a03ac4b89229","sha256":"f0f3a7e46885ba1eaf4232c0d06fde4dc4f8880364d3a64bef12f2e0ea4caf65","sha512":"820ac45a2f839852c892d4a2847a91a5e6defe02cf548444cd918953b99c23910e2521a9dc71574c5d8601000e2b5da8ee3a0921d47acc4e22914f1404f23bd3","ssdeep":"","tlshash":"012198229098363644a7a6d2b08613e0bbb432c2f55490f93caa986c17d3dd664327f3","size":1160,"data":"","first_seen":"2026-08-28T13:30:02.972387Z","last_seen":"2026-08-28T13:46:23.31258Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/cache/autoptimize/autoptimize_single_af8320fd2bfb152996c9b93fb60064d1.php","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e834ad0a19bce3be7012e453cff7d6e6","sha1":"bd3a102ec646aed8327b119aa6bbf3c7ee3df5c0","sha256":"1716be54c340c09433516d25d34e4a28359fa4fdcc11037738d7eee230186d77","sha512":"f3fe2b0a02a78e0c397a64ea198164caf071abfc3c88cf7135444096174127a625724fa1b7422473b76b46c236b2e2b116dbc817e3e2949e9002388b2d2c2b9e","ssdeep":"","tlshash":"510145a5b1b0603242ff7f97e10757d43a3021937049a898257d2dfe2a963b3870369a","size":792,"data":"","first_seen":"2026-08-28T13:30:03.028724Z","last_seen":"2026-08-28T13:46:23.300304Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-29T20:27:08.476681Z","times_seen":44961,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"roobet.fyi/wp-content/cache/autoptimize/autoptimize_single_063b75184d11504063df81cd8a7d203d.php","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.898Z","timestamp":1787924752898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/autoptimize_single_063b75184d11504063df81cd8a7d203d.php HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncache-control: max-age=30672000, public, immutable, public, immutable\r\nexpires: Wed, 18 Aug 2027 13:45:52 GMT\r\netag: 244947085c0cd633c85d4c783600dab9\r\nlast-modified: Fri, 29 May 2026 16:13:17 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpFKfzZ3nCLVf7Ncx2umFpOnEuFJZ%2BzN0leb%2B%2Bi8T6eq6GVDYjsntRiGp5Ziw0akBMNS9ZtNuy%2BGC6Qeep0LpeUvPpOSH7wGawOLqlENvD3YY4Ht0aWJIJsI6rMr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323c2499cb15694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":465,"size_decoded":1082,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (465), with no line terminators","md5":"43206f366873d55c9c59741b8dab1d86","sha1":"5b82106d26b1141a712f947c0360996902c56394","sha256":"44e88ac3ee3a345158a4459940198b639a1533f22fda2bc210e5d636811f044b","sha512":"af9ed66d723ed13f534efe41d048dbcf887ac775d75dfc968410ef7eb63099872580a0afca34866da2ba03da9b1b75116483a58a6fd8a0bf37f575138a2bced4","ssdeep":"","tlshash":"b9f0dcb3b346e465b1a74f3437ff134c29066151ceb28a1973bad4a0cc496ae13b4a59","first_seen":"2026-03-04T13:09:58.574536Z","last_seen":"2026-08-28T13:46:23.290843Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/themes/lemon/assets/img/header/arrow-down.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.931Z","timestamp":1787924752931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/themes/lemon/assets/img/header/arrow-down.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:39 GMT\r\netag: \"6a19ba43-5dc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MU8KUhmzYciWY17tcLkydEeVD6wVCalz350O2ZeNBDzRJ3sJj%2F%2Fe4izUnQt7ldFD%2BfA5ElZ42zfOV2Pq9qWHlaHf4xkXvOK%2FyUo6Tg574hlzpxqZeUJizRWX18o7\"}]}\r\ncf-ray: a323c249dcbf5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1500\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":2232,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"4fa23fa64f525f1ed09c8b954d9350c4","sha1":"d4af89e68a125b62f6a84375a64d3d9542d1be40","sha256":"efd98b89c76e273c0f2ffd2fe295128bfede98860288bbfd187a43f751002294","sha512":"08efa82ea780946527031cd577430ce60005cfdb6cb0538cfb55bece5a8c1b6e018130357f856ee49844c63db52c255fa576ad9f30f97aaceaade6a28ba5f7de","ssdeep":"","tlshash":"2631e9cbda63bce914dfd3b1c5a4445c5576b81a1e318f8bfaa868ab01fd1382433356","first_seen":"2026-08-28T13:30:03.016794Z","last_seen":"2026-08-28T13:46:23.291715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/banner-section-bg-scaled.jpg","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.932Z","timestamp":1787924752932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-section-bg-scaled.jpg HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-1647f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FM20AhK4s5i7%2F0NxWZtbiFnduFMudF1At6UOgwqCN1A2o%2F5zLJFOErM6VV4oOpkUdQO9FBdmLRDIt%2BoJAuRcIUaBzsaX7S1M2x8omO6Sr5ETWMQN0yJjUtIYFxhL\"}]}\r\ncf-ray: a323c249dcc05694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 91263\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91263,"size_decoded":91999,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x576, components 3","md5":"f2f5810fa60b8bb8e306ed54204d661e","sha1":"563de56090b125e2b9286120651ea43733d2e001","sha256":"12e4c9eb0b4a2c4f3590e3fbaf496651329216df6ac35ef0882dbe9946265c15","sha512":"34c498956c0921a705db4725bc3753ecb08fc4b6519e2c94a8f1079976381df0d5f514bf0224a8ddc89cfe010bce4c23f4d9964dff449fc39053b2be1e68d3ea","ssdeep":"1536:f40u8O6IqlfX0Ds7QeDDRBj42dDwCmtDYK7L7BpkVpW9z29:XxcakIzB0YZmtD/T4VpW9S","tlshash":"7d93023f9e4d5785c58ddef0a8af8e42445a9dc136c6730ab1b4e9238088e613a7d13d","first_seen":"2026-08-28T13:30:03.045945Z","last_seen":"2026-08-28T13:46:23.292327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2026/03/hacksaw_2185-16T_tDViV.jpg","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.936Z","timestamp":1787924752936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/hacksaw_2185-16T_tDViV.jpg HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-6605\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TWTqyB01uPqh3A5BkUYE8zlv2D4feiDU67md1reXtvTsbzwNGO%2FBMNPhc5FSBsQk6bMgmiH9Pcbv0HXBjAsTjikwKeJREIUlzpG%2FSZU%2F2pIYDaEPHdSrKwiclkJ0\"}]}\r\ncf-ray: a323c249dcc45694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26117\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26117,"size_decoded":26850,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 293x390, components 3","md5":"91236fe515173d26e8aedde0dcc8ea8e","sha1":"b135657dd9a5519627735e6c86bc9b4984164582","sha256":"c5384d9ce23cea6c52544b0c4a1d710d6ec0d89efc05412f970a7bd1a80a84f3","sha512":"77540fb24f1f46eb22955c59abf46c078d616be44d1d31b87a80bd875dfaf252f60cd4f9841d424a4e9789185a5ede993f96c6c75c3aadd9ced8fc6f01bddea9","ssdeep":"384:9wLKgiDnOm6VIkO6natWRg8q3bMy5G+/JdcNISPc5BeBko6Uf1LXUNl:CqDTyc6gWg1rMyTYbPBDL10","tlshash":"cbc2e1417329d148ed9824f9a4b15fcde252ea13fc5c930a434b819f70863dacf168cb","first_seen":"2026-08-28T13:30:02.991505Z","last_seen":"2026-08-28T13:46:23.29308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/logo-1.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.972Z","timestamp":1787924752972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/logo-1.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-19e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zvjRAprRs%2Bj82wrO7454%2FKinZr7LGn53LBSt8npTHb0q8UEYJkVJaRTczafJ3ZZvOHkMFCVaBZZBCCcKWNmYg6H4q1%2BO637G%2F0%2BPNuZz8TxONS3v4AcUMyZcG17W\"}]}\r\ncf-ray: a323c24a1ceb5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6624,"size_decoded":7359,"mime_type":"image/png","magic":"PNG image data, 372 x 96, 8-bit/color RGBA, non-interlaced","md5":"41e05fcb8ed96ccaf1a5d8640b42c1ee","sha1":"cb5fbd7f89432f35adde6fd947b90ef131d88272","sha256":"eecfa73cd91b4cdfb14b9fa908496aaed496bc2a239d1b925b1de2ae852333b8","sha512":"49fb4d9f4ab42ce7e8892901e470aecaec3a4a56b8ad452871094a5acaf5a5f22f834684238ac0f06f70a532ac62f2873b49fde9840c826d3968f0d05322ecbb","ssdeep":"192:0V7Oug4NB3h6HpXCq/uIzd55Ntz4zJL07aD:0lHlx6p1BJ94zJLl","tlshash":"c7d1af6fe96ce0946847472cf990c0c25ae2845e21e2b8fc3c1c6fda396c43d305af62","first_seen":"2026-08-28T13:30:03.009463Z","last_seen":"2026-08-28T13:46:23.293781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/themes/lemon/assets/img/header/arrow-lang.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.925Z","timestamp":1787924752925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/themes/lemon/assets/img/header/arrow-lang.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:39 GMT\r\netag: \"6a19ba43-18e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C70nzeqz%2FJ2pagtpFSSoDGeMCycT4eZzd2YlYBVvIzcgV6dRzMUdzP1bm9329Z%2BBxK6EvynwJBioykF1oZpWKAlydTU9wAi1RsZTiMIncyOHVwh88ClFMqBOlAau\"}]}\r\ncf-ray: a323c249ccb95694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 398\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":398,"size_decoded":1125,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"e7c20a251211311aeb694f5975273333","sha1":"db21b44d80181c6f5d1c94da18b1b9e08e701ea9","sha256":"d36dbf4cafa9de54a5f2b564f31446fc3952d7fbdf83e3d79252d3ac82185b88","sha512":"c8d0b0fdb3ba677672d4145b9828b9a7fbd371523af9860993e6f63ace82685910c68efb4e8db28bc361b9d95f4dd2cfd0cf2c2cca94f8c66c6855e0c1dd734d","ssdeep":"","tlshash":"2ae0f1c3cc99508d8ec8d23213b10571dd191a020b05c859dc07c211e5e7f0ce517719","first_seen":"2026-08-28T13:30:03.056869Z","last_seen":"2026-08-28T13:46:23.294354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/themes/lemon/assets/img/header/en.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.927Z","timestamp":1787924752927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/themes/lemon/assets/img/header/en.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:39 GMT\r\netag: \"6a19ba43-bea\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrFfiRs9JIwZOyiGsLrjLEIeOqbHEjhP3zGujclSGqL5Og0Y9qrPka%2BrwmCYI0AwMWOy9znbpu%2Bx%2Bb%2Be8Cmrw2XPphNgZw235vB9GfCK2UUnfxS5ur9b%2F4NCjSyM\"}]}\r\ncf-ray: a323c249ccba5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3050,"size_decoded":3784,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"e6caf24505f78644865c96b56eff9ff1","sha1":"97dd104ba759536252df2ebe9d855307594d1e71","sha256":"c00702f9586b9406cbeec9419d668f71b309c49bc5a0755f0f1ceecda51a990e","sha512":"dd5dda8671111982c839b5dd6d3aea6fcf98609e00440baf6c74dbdf729728a433ce0bdb4c8dff89883ce7dc21486458b81efb9e248373d9c5ff56dc5991c99c","ssdeep":"","tlshash":"3f513a7612d9533c00e9fe32828396edda61b25b9a85ac15933252695fe3b088e90994","first_seen":"2026-08-28T13:30:02.937209Z","last_seen":"2026-08-28T13:46:23.294944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/usdt.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.951Z","timestamp":1787924752951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/usdt.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-5b0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rii%2FYiRx8v0QTYERDDAhGWeSStv2SkWNGxkLgSNBMwQqVeZRiWK8vrfK%2FI5w%2F2TI%2F2e3Mop5qPaWpMsr9GS2TLjMQBlBFDZ8YqulzJ1wRfzmNa%2F3Lp3aSituabeN\"}]}\r\ncf-ray: a323c249fcd75694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1456\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1456,"size_decoded":2190,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"b0d1ba539233ccba7345350347878469","sha1":"03af69bf7a182f5b1ddacf71f517af0913762131","sha256":"3069aef31fc61c2e0e1f87bc36c436664fff8d9e37d9d16bcb31dad6cc7a38d3","sha512":"3eeb9707426a65aaaa8ae83afb96c7b5c926f278d2cf09bfd8baa426d9fa64c180d70c9f6fa6f667b207d0064f3474fb2f255e7bf832e00949668f87f74fed0b","ssdeep":"","tlshash":"393119a1d76b0e8e5df4e356e30714489264656897339f020b6c5988c265c6cac3e3f8","first_seen":"2026-08-28T13:30:03.032001Z","last_seen":"2026-08-28T13:46:23.295619Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/partners-4.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.968Z","timestamp":1787924752968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/partners-4.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-37cf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WlXUIcHnB44kd5V3zRRmXiv4c0vd4b3%2B5niN3%2BzuDZkK%2BVPdlqfYAvKn7b8JVVOzLIu7XJBBVSNrNMklc9xvS32JPTirml4xI2IOoy2lCQqWndG3v1CI65aPka6n\"}]}\r\ncf-ray: a323c24a0ce75694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14287\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14287,"size_decoded":15019,"mime_type":"image/png","magic":"PNG image data, 414 x 288, 8-bit/color RGBA, non-interlaced","md5":"903ab4fe7d0688adee01fc71fd86c83a","sha1":"76180e09fdc05a8d133172fd4d839ee39e0461b8","sha256":"8a210c860c21ff5d3f1ed5b740b01b37e6f1d0971de7ad97c429bf90ecc3af4a","sha512":"3ac33bc15d1961ec34940c7b6c75d6cce19e1114bdf7a98e0a5573216e5c446a52c93526cd2d6c1d9a97beae9e7c149656fbe0da0d602184a42c0469454de6ed","ssdeep":"384:piDDdP1qMjWZgUr7rPIHZr0dser4OAGcBPxOgeQMNz:piDDTZWZx7zHBTAGcBp1QNz","tlshash":"8d528dc097ddeacd9fc4e6bbe46e0c15341c5d8ce4593fcbb16bcc095629094b0ab491","first_seen":"2026-08-28T13:30:03.038501Z","last_seen":"2026-08-28T13:46:23.296399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:45:52.279Z","timestamp":1787924752279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRDserBxVs62FYXUWp%2FBzOtg0Wro%2FbkJEhwfvwrMYvDzQGS9ATB3CoZypdPZyrJuGMcp0mx9dwbQIqJz3OvyFjX4B0TBvz%2BHeyHkhbHvFA%2BcBlh2hq5JmcRYUSUW\"}]}\r\nlink: \u003chttps://roobet.fyi/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://roobet.fyi/wp-json/wp/v2/pages/7\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://roobet.fyi/\u003e; rel=shortlink\r\nset-cookie: pll_language=en; expires=Sat, 28 Aug 2027 13:45:52 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a323c245eca25694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"pll_language","value":"en","quoted":false,"path":"/","expires":"2027-08-28T13:45:52Z","raw_expires":"Sat, 28 Aug 2027 13:45:52 GMT","max_age":31536000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"pll_language=en; expires=Sat, 28 Aug 2027 13:45:52 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Polylang","description":"Polylang is a WordPress plugin which allows you to create multilingual WordPress site.","website":"https://wordpress.org/plugins/polylang","common_platform_enumeration":"","icon":"Polylang.svg","categories":["WordPress plugins","Translation"]}],"data":{"size":65612,"size_decoded":18878,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35701)","md5":"e76ac93007e51f0f7077230dc87c70d3","sha1":"e7da1ef5a301d9472d0b406d9160f9204d8165c7","sha256":"6e018db778ec2bbc09dbaa3a5d4052f568d7f93b7a3a5c0a091d66f0e4ed4ac7","sha512":"6af1c7af58d32b7930e141cd6822f01bcc32b6a4443a786a8bed74443a4381e698bc7950b067b251ea41dfd68c1c2817fe6519e3d7d2c76d716c8d384be8ba2d","ssdeep":"768:oMVTzZdypa9e9hRdDRJr4qSthlVAfgqmqZjtJzD3hPlstYx7P0uOx7wD73Aa7+bn:o2/ypfhfOpAIqmQZO","tlshash":"0153f573a1d510b7236b838992e2764cf1528685c686ea1cb1fd00dce7d2fb559b3b0e","first_seen":"2026-08-28T13:30:02.928677Z","last_seen":"2026-08-28T13:46:23.297209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":8,"connect":19,"send":0,"wait":427,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/cash.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.953Z","timestamp":1787924752953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cash.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-298\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BTc2mg0rrIK%2F9wL5qILZO%2FxugeAmi8u2InmHXFkihBkrHU4jC4hf6H%2BDKcyxAygs0AtndW2vdQgUb8yHdhlnjy9ERuvpU%2BHkrrKyOBqWn5ktekUT0PzJ1nDBn72R\"}]}\r\ncf-ray: a323c249fcd95694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 664\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664,"size_decoded":1395,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"4e8e0464a0f6a3c1b09c77cba2ad75e8","sha1":"abe845e923240cf88772d4441ed5df65a9b65b6a","sha256":"5ee9d147f38e8092c92c7877ee3cfb34419f8e4c8b3a5e9ba610cb00bf2dc8f7","sha512":"4e91d8752c3f38447b355e6bde08eef288f2e8879b2315e121a91c1df4adac85211168fe8e8c3c5d9105be9554e7c71ad1af9514c8d4157123ac8a7a435ec581","ssdeep":"","tlshash":"840168d6f51395d994ac716e570fc500c2b735077f55890822e228f54d3514115defa8","first_seen":"2026-08-28T13:30:02.911279Z","last_seen":"2026-08-28T13:46:23.297808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:53.370Z","timestamp":1787924753370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://roobet.fyi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 98895\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43948,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-29T20:23:06.406099Z","times_seen":279327,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":2,"connect":30,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:53.502Z","timestamp":1787924753502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 09 Jul 2026 23:54:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5034d1-58e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 987\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R38Y2a2vBD9IHxjNf%2FzYqkemb14cZw73q6o1i2nDJCAsEYbzvWvXqg1AAJDFFF5JxQAv1T%2FOYLHucwWcaN4lGZmAEghrVAbRUAMgq9x8NkZmRr35UKY9QTN67LFF\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323c24d6d105694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22752,"size_decoded":6149,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-29T20:27:08.476681Z","times_seen":44961,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/cache/autoptimize/autoptimize_single_635cf2fba4c4b40e9738740b2ac342a8.php","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.915Z","timestamp":1787924752915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/autoptimize_single_635cf2fba4c4b40e9738740b2ac342a8.php HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncache-control: max-age=30672000, public, immutable, public, immutable\r\nexpires: Wed, 18 Aug 2027 13:45:52 GMT\r\netag: 1f18cfd583b9141d357b34258d6b643d\r\nlast-modified: Fri, 29 May 2026 16:13:17 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWjCcyUZIK5p%2BnKcO25wlKx6DNxGAnvcQ3LmF1A1NqcPB4XQ7fXQ%2FuZ62pKdNmuBkw%2FPMEICFDKPBlaPUoJ7Y%2FUgarVogK5bzKaahPkZIth2vJFm4Jse6g0Cym43\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323c249bcb55694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2245,"size_decoded":1420,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1034)","md5":"364cf83099f5da4c389fa21583212bdf","sha1":"1b25dc6175ccb840daead8bdf1c5ddf1c571dc64","sha256":"27a210ff3c792d294c077a8b7a43b8f1eaa80b49b89f8ef809f6f1e98c5adfe0","sha512":"b011bf17f2bda894d451908c526ab0fd7dfafeaa3b45cd39f309aa5fbf46bf1723322a71a3c088b43860b53ed3c76d067a2b095b665c17e823a6f6367c8f1678","ssdeep":"","tlshash":"d641c0f361c5347502e6a98262c22bd0bf945192e452e0b5182fc89d37e3e9351f57f3","first_seen":"2026-08-28T13:30:03.014268Z","last_seen":"2026-08-28T13:46:23.299616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/cache/autoptimize/autoptimize_single_af8320fd2bfb152996c9b93fb60064d1.php","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.917Z","timestamp":1787924752917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/autoptimize_single_af8320fd2bfb152996c9b93fb60064d1.php HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncache-control: max-age=30672000, public, immutable, public, immutable\r\nexpires: Wed, 18 Aug 2027 13:45:52 GMT\r\netag: 3e6d9f923920992d871a3a73de3c43c2\r\nlast-modified: Fri, 29 May 2026 16:13:17 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgaMx3VhaWsw3flOVxRISI88WTDpvk2YcHIOMg%2FgvDj%2FHp0x%2FLeBWAqdHDKBnyJ80ctcEKRzkpnRy9pLpwxHET9FXjk9Oc7Wwfy6Il6VY8%2FeB0CDTJ3Dpep5z4z9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323c249bcb75694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":792,"size_decoded":1186,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (749)","md5":"e834ad0a19bce3be7012e453cff7d6e6","sha1":"bd3a102ec646aed8327b119aa6bbf3c7ee3df5c0","sha256":"1716be54c340c09433516d25d34e4a28359fa4fdcc11037738d7eee230186d77","sha512":"f3fe2b0a02a78e0c397a64ea198164caf071abfc3c88cf7135444096174127a625724fa1b7422473b76b46c236b2e2b116dbc817e3e2949e9002388b2d2c2b9e","ssdeep":"","tlshash":"510145a5b1b0603242ff7f97e10757d43a3021937049a898257d2dfe2a963b3870369a","first_seen":"2026-08-28T13:30:03.028724Z","last_seen":"2026-08-28T13:46:23.300304Z","times_seen":2,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/details-screen-1-scaled.jpg","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.940Z","timestamp":1787924752940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/details-screen-1-scaled.jpg HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-2186e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3irfV0OPdMn3kSZ637S1t3JwnH5HuWBoKv21AUuo2B13GCGjaI7dYWTbzrwc0uoKFr9LsuL2BB67wZOAkekrPYQb1avQ1tIGH8pq1Nj5CtYIrYLm4MvjHyclBECJ\"}]}\r\ncf-ray: a323c249dcc95694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 137326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137326,"size_decoded":138055,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x931, components 3","md5":"e2f83bbf7dae2057b7328d604e04c888","sha1":"ff01581715255f09a4f083c41aefe0d36a09fcdd","sha256":"fd762dd2b039dd1ecaeebaee76c5dfb1ad88ff83f70685140c2bb35f541d48d9","sha512":"eafb9c804afe242472cdcdf0c0033a78420bda81489176fdcd9bbfba0332e35d75c15dd3d201ef66447a40fd198a90b2e3699bf49724da18c1775370a58ee45d","ssdeep":"3072:hldn+K0qB/wwwwwwwwwwwwwwQwwwwwwwwwwwwwwwQQPSvP1IhykJjc/LFnCiEqHJ:5X/wwwwwwwwwwwwwwQwwwwwwwwwwwwwY","tlshash":"3ed3f10fcfb2f8c4d4eb6cfba549142950e38a99fa53c40416e4e0d1b6f65183f98a96","first_seen":"2026-08-28T13:30:03.040684Z","last_seen":"2026-08-28T13:46:23.300952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/details-screen-2-scaled.jpg","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.940Z","timestamp":1787924752940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/details-screen-2-scaled.jpg HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-3d2e4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggTPPl910z%2BUvllg5wWh9iwD2gA2hrWmhNsVASmX2VjQKQU3mNiaGiVa6u9NWt%2FdDw6sgx8qUA%2F9nMvD2taxraeSt9KtzsdwTrXtbCPOfJDuFhWCzCTWFlvhj1Ls\"}]}\r\ncf-ray: a323c249ecca5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 250596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250596,"size_decoded":251331,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x931, components 3","md5":"b99dad9378c3477bbdd209eb5e2f9af0","sha1":"ff38121126a9692c3857187472505910f8e9b1fa","sha256":"15b2d2672d3d2bb97d7415de83c40d6fa615262b019e88adfc6186d5ce9c8afb","sha512":"798ce8ebd55913a9a3bfbade24620dc0a436e337fd7b0179707bac3147c90bf79b140d11e3bb19ef38bbf9359ce819b7e92ab689e6dbe761bb01ba0e2c1b3bf1","ssdeep":"6144:Ic5NlF3KRpSS3c49a/b0dKm34dKGN1Sv9:lBPEcr/oddWtTSv9","tlshash":"7234cfc1ed10a8856fae4af089d68687e4020266eef7f83d1d276ee0e142f4de617745","first_seen":"2026-08-28T13:30:02.999712Z","last_seen":"2026-08-28T13:46:23.301556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/awards-2.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.960Z","timestamp":1787924752960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/awards-2.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-1363b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XowWun5xiAhcjnUpPQ3OgIU4mrSFpQBwADH0bsLS7jjlvDRwVwz%2FOUUKDFHfafQQS0fp9nT8bj%2F6yOBEbeVGMfzGU6A8bHiFFrclXdgA3n6xc2zqqzlHiX65yRNq\"}]}\r\ncf-ray: a323c249fce05694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 79419\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79419,"size_decoded":80150,"mime_type":"image/png","magic":"PNG image data, 504 x 336, 8-bit/color RGBA, non-interlaced","md5":"13ecfbfcfb678c8cacfb966a3d164f84","sha1":"d6fd0cc5f396c5f053394c072dcd99a8ad4e975b","sha256":"d118d3e2bbe3bc48f12b5a9438f38d5e82ddbf4e89073e79b16bdf7b594a51fb","sha512":"41cccb63c4531112bc66c7d50c3ac410560ecfaa107fcd55dca1af37f590d806bbe43e2cabd6f6403901749ee7fda67e8bbf429bff8862daa614cf405f588756","ssdeep":"1536:/ZAILgB4JCz8f5GdzM4LQsZV0ZQdZ3sZrC6QKQakxbKcwaNKKcF:/ZAZGCz65mAQQO8Q3sZGiQakP3o","tlshash":"2b730213e143d01bab14a5acb9f8ee74abe24873c60115235f6f4a1feba85f184139d3","first_seen":"2026-08-28T13:30:03.058592Z","last_seen":"2026-08-28T13:46:23.302197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/partners-6.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.964Z","timestamp":1787924752964,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/partners-6.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-48d9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jWXOaECKj583tUKD0vWUYbbmAsKouHgeW7TnsVVgpYlVD02Ff1ahDBWodig5wLb0ZM4OYrLnizbUHQKe1VYzOAGQIOQRFhU3%2B4A1s%2FK1AE0y2pD8JY7ZgnSWQ5Of\"}]}\r\ncf-ray: a323c24a0ce55694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18649\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18649,"size_decoded":19379,"mime_type":"image/png","magic":"PNG image data, 474 x 288, 8-bit/color RGBA, non-interlaced","md5":"b08b18801cc3a053dac311c7ebb60d79","sha1":"788c8c1d35370513f1cdcccc12b101341a89d595","sha256":"8355fbf7870f02393cc178a492b455f808793198c7ceecb0a48e9313c3c7bd51","sha512":"2d74c47729fb625bc78d9ef711b0b830e3ad6896f773cb38f22521b61e34b386cac587e57e3cde3b59691e590cc234e05f6bb9fbd955fdb3b2bdbe9d9379fecb","ssdeep":"384:gLJKbLhzgeGvYV2H52kUwcaH6dvly3Wk97:gNK/VgiEZSy3V","tlshash":"b682bf895ac014becd2e097d1ab258f910910dcad9a15633fafb8f88177f8844d27b60","first_seen":"2026-08-28T13:30:03.018205Z","last_seen":"2026-08-28T13:46:23.302731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/responsible-1.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.958Z","timestamp":1787924752958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/responsible-1.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-2a62\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9kEuSbsWgrx3ZvQzhstEt3yIZOVRtzBedRqqeRJjP%2BTFxDRwK41AGK0TO%2ByZW%2FKCJ6ly9%2BJFUsZqVYyTWPYEr%2BnmLHT7y62JD40SRc8P7jLyKDiYJ97cyv%2BF8Vu\"}]}\r\ncf-ray: a323c249fcde5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10850,"size_decoded":11588,"mime_type":"image/png","magic":"PNG image data, 378 x 336, 8-bit/color RGBA, non-interlaced","md5":"d8d5633443bb3abce18a945373ee27fb","sha1":"dba7cdb9bbbd88e0bc698f718a8b7d3734397b31","sha256":"bd6565b7e92e7d16f597205cc5562fdf7a4d8ad4a86604d113d052b3fbb035b3","sha512":"5654cd515a4d9a31b0918efc27ac2d2bdffa0a9904391fb8d0e1ec34e93fd9afc72ba08b87727917d8564af8a57f017fa10a3a2e87f6c56aa0865fe4aaece36a","ssdeep":"192:iYsyYXxD2aEHElrw+5GzyoTekopNyBx2OdZYQqyNKvgaQl3ftDFiO:rLYXZoEszyotMacO8QqkK/QRfziO","tlshash":"5f227df3149f2960d2593b0f9d997c1f2793b9093b5b3013cf3326e0600fa144baa95a","first_seen":"2026-08-28T13:30:03.050402Z","last_seen":"2026-08-28T13:46:23.303277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/partners-2.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.970Z","timestamp":1787924752970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/partners-2.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-5013\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sdAaq8Bqe8PN6R67bFBuJdjGJj5oN%2BgyFW7atMhH%2FJhVoXRIlhuAu%2F9cI0fI%2FSY5OnDxZ5SJg%2FQinXQDSOFVCj6%2F%2BsQ%2FcgNS6W%2BHgwRdNcn2W%2FlKEcwIaGABm0PJ\"}]}\r\ncf-ray: a323c24a1ce95694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20499\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20499,"size_decoded":21245,"mime_type":"image/png","magic":"PNG image data, 468 x 288, 8-bit/color RGBA, non-interlaced","md5":"5d83403b2afc2e9195fde977c5715466","sha1":"24e13b5b45d9d07fb9ec9b91effe35113cf2dc83","sha256":"47fd506bd9a7dc7e88f106a91b6d062f77e73ca4e6cc2242b6f41a96a9d4b5e3","sha512":"6547db0599671f4b7f547849ec1cced0b652b21d45c8cbb02d8238ee67e849bb0c74a2a14ba8e576c0ae793c397f7948f27ea49bca951d1bc62388c0760c0253","ssdeep":"384:n/ctzK/rEfmHSm47wt0Gr+D5pdtTZj5JG/91iIqTUQZOn1R2:jEfBI5sRfAG5O32","tlshash":"3892cfb7521b4c81ca9e17b1427e9310f56ba88ef839c713cde590642e936c1cd316e9","first_seen":"2026-08-28T13:30:03.007217Z","last_seen":"2026-08-28T13:46:23.303945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/icon-grey.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.942Z","timestamp":1787924752942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/icon-grey.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-950\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQNemkNySgBTL12Pxn%2BWgGhSntW05Sic%2F1JEzh5mkTvDEAJi4RQ9dWUrJIKtZhUH9zv4nJ5Ea%2FSDgRMvQxFgXXadnTl9unYrEaK9K3rFDtJkk208OWB3IrRChw66\"}]}\r\ncf-ray: a323c249eccd5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2384\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2384,"size_decoded":3114,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"3a8c0232a52fa25c5b4cb8560a0d1c22","sha1":"eeff6bf59c021cb7667d92b1c5c763dc5ff2c251","sha256":"606906c5d85da76fcf320172872d7b0c8eb2a0026086d5cfee9b554cd5fd446e","sha512":"d7abc34847f824c5c97e953e7c8ba787c9d69b6be1c02377c8762cd7de9ae2cbf0ec611dac0cd19fa46c59c9e880a4705973eaa94e776c143a5a38a345080980","ssdeep":"","tlshash":"ad413a2230c494ad1bd18187efc24518ef53318bca8a9a4c7996f345f2d788acc19951","first_seen":"2026-08-28T13:30:02.953961Z","last_seen":"2026-08-28T13:46:23.304627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/ltc.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.946Z","timestamp":1787924752946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/ltc.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-6ca\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5MYnt%2Ba0w5BZgq3TKO0IJi8zqGHf%2FNowl78NTZmkExjgPY1Pf590oF3M%2BwNE3%2BSEOvqppOGgmWGDNUXnF3s2Z1scVRYNbLaMq8rmUziG5ElKqPnSqox9Arx3V6ZO\"}]}\r\ncf-ray: a323c249ecd25694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1738\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1738,"size_decoded":2470,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"054733c9fa61d9f585da495293f6eb22","sha1":"8db7daa639e81d4ba4911155f1c7ba5d1ec48963","sha256":"05ac2f823c7a5d9893cbb1cf33a4dbd4384dd10c5fbe5bbe64b6363a095c1840","sha512":"4ff77a5e3c67c13a4a01e78f18afa1accdd9876454d7ed40242269054678299cc36279416cecc8c436056963d81660ba80510cc4f86d6706daf3b5a19bd13f62","ssdeep":"","tlshash":"153106d30a481c70581465b9805aa836f0b2dadd0f996851642efbb082aafbc7e29173","first_seen":"2026-08-28T13:30:03.047848Z","last_seen":"2026-08-28T13:46:23.305255Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/usdc.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.950Z","timestamp":1787924752950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/usdc.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-968\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aq8VSAA8GyrSvSFBLxRSyp%2FU2PX7j7VckjsCiaTDi%2FbsHO%2B7YSDpOmIwbt8Ia6Yi%2Fb%2BxX2yNsCHnP0i7qHqVWD9ofyV3zAP2U7yWcxvwD8Nc5Xo%2Fe2j7AU9oj6MG\"}]}\r\ncf-ray: a323c249fcd65694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2408,"size_decoded":3144,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"12713d5aed41fe9ddb53d164fa6b2a87","sha1":"551ae121c6d17343fefb58016f700b112213082d","sha256":"85a2da8418cf734fe5b6fe067632b718cbe22349fb1de5a4214035bfd7507e59","sha512":"ddf402e87f7db5b1baa931210869805f554ecf8067baf4c7af2aa2faad675b7a7628348f9aebd4712356fbef6024ed9f4bf323a2c8f1a4700965b3caee0101fc","ssdeep":"","tlshash":"7a413bd34e114e439a6e447d43ee3f4652be2e080361797900b6e00c2f701b3faaeb48","first_seen":"2026-08-28T13:30:03.049169Z","last_seen":"2026-08-28T13:46:23.305969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/awards-3.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.961Z","timestamp":1787924752961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/awards-3.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-1aba1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jnfpu17BoBT7Th5W2WFeJNdhkfx%2BNLrM4sPNSnq7Kw%2FD7dLMHA7C7qdotZpF9etmVwpkTRFKnPilKslADbY9n5dfVVQOW63G%2BD6EPWl%2B0oof2mCGgo3Hc00dYfNY\"}]}\r\ncf-ray: a323c24a0ce35694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 109473\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109473,"size_decoded":110209,"mime_type":"image/png","magic":"PNG image data, 594 x 336, 8-bit/color RGBA, non-interlaced","md5":"74f67dead14173caf065aef8cca635e0","sha1":"5bba962bd0ec1ee449d932d3cba7ba5fb6d59ba1","sha256":"7320f884d3f927542832905af7be35888cf632122c10b85ff05c6fdd38d3df62","sha512":"b7bccc9535f020b2125bd851ac6cafd08b85fa84143ab61d153cbbd9e4beb33541bca00acf8c1caf54fc0c6074108d4a93061b261cb04ed7c499048cbc1aa694","ssdeep":"1536:8bV7pwS5kjiOKCboVxvNjmmbSlHpUub/pUMRdfRujfmXTRhhY0dKN6hr5tyzZhav:8ZRQinCWlqmu9hGmushr+PaJADmlK+j","tlshash":"0eb3128515a88c745e678f4b1f201fa2d7b4af0db22c483e12f1ed6ae888df966c6451","first_seen":"2026-08-28T13:30:03.053396Z","last_seen":"2026-08-28T13:46:23.306549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/partners-5.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.965Z","timestamp":1787924752965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/partners-5.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-4db3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w19WyOs9W%2FzSc3SlgoBPyzKT5dZaE65ROY92rQ5IcJCAsu6kuj2Q45EhVJD1sQWvmeOgi36XjpPE%2FoYGq0zMjncWUfrNX2QmTv7k%2BXKHOFNkM2nR%2BqiZ%2BXBqroiG\"}]}\r\ncf-ray: a323c24a0ce65694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19891\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19891,"size_decoded":20627,"mime_type":"image/png","magic":"PNG image data, 336 x 288, 8-bit/color RGBA, non-interlaced","md5":"58d1842015d125746cff915c72aec5a3","sha1":"6abee30941d4437ae98a5ad07e62030cabc12189","sha256":"84b1eee216c28fd5fcd970bb4c7a81172215f7c38ad75c968d33e28245ffedae","sha512":"909ce3371973293ca7f73639629fbbf979748d57ab8bdd89910933d8f3ecf0a674c286fd93a360e630812d2d793d999bbba94f703ab1765e33dfc23baa114f06","ssdeep":"384:Zi+70QD/uH5887kk/Ap7t+zC6waMCuyUS66bINrRfj5AXTW75JbZ9fLS:Zi+7bD/uNx/q7t+zC+xvl66bITflAQ/6","tlshash":"7392bfdb490dfaf7ff3849ec4bac51707817713090573637a2ae2681a6ea8773920270","first_seen":"2026-08-28T13:30:02.919546Z","last_seen":"2026-08-28T13:46:23.307138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/eth.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.949Z","timestamp":1787924752949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/eth.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-717\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WPxJW%2BumBL7dqooys%2FlnuxIugh3HBZcH6t%2Fkub8Dnyvp9356%2FWcVTR3G4k8mSfF9Y2NVG%2BwEE9mf1LXUCDAcvabYrKf3wADT1ulDNxHG6nW%2FJzEoAdkH362mNYR\"}]}\r\ncf-ray: a323c249ecd55694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1815\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1815,"size_decoded":2551,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"3c80d01243d3ea9f43baf09e13520b21","sha1":"b62d2453236242da7d9c6e6c0ede8a3ae8df390b","sha256":"8852f8515f0808558da530396423a882848b1e9f3d219969ae06f0f5e0df2c74","sha512":"d8cd3f843f094e38eef8ac8738e1002732223b3fd1e0504724b7630bbc94667f8bbf1b0b6a46520fbb84bde1618d4f2c99d46da0fc968bd37bc6f2adcaf7052a","ssdeep":"","tlshash":"10310b4bc9d331d13e0a7d3a33a236c8fbfa11320e235b40396b4427a9afd113488786","first_seen":"2026-08-28T13:30:03.002405Z","last_seen":"2026-08-28T13:46:23.307765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/partners-7.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.962Z","timestamp":1787924752962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/partners-7.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-2623\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vh0VhVJZALFpw%2F49Q%2FGdbnru2MZCElNy3rV9S%2Feiw19L1o76UtCLELZ1%2BjFcPo5n2fNXOtWqMyag2D3dOU6uDZNhUxfJ9Wg1E8wrLQSNLqtnNJgguzTrERmy5BES\"}]}\r\ncf-ray: a323c24a0ce45694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9763\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9763,"size_decoded":10496,"mime_type":"image/png","magic":"PNG image data, 240 x 288, 8-bit/color RGBA, non-interlaced","md5":"c29f4f62ddeb16cff4a9cf9995e3a27f","sha1":"482507311bd51f81b73410a4322a0bf1ea45f8e4","sha256":"aac9807ea6548f950e022ced6590b2c81b8321830f29ea7a283df05f679a359c","sha512":"955f976ffa3a975ffe463a0d327d9b2b0f67f3015fb6132c59a39f103d55fc5bf59c69dafbbb72c25a2952a3b4aab9440fd2ab5fe928f41cb0658bc3f6eb9978","ssdeep":"192:0enyVPXQafGr3pfPFkvxhxsxHYcm5hnN6nyvdisRjt1BBQ4:xEgjTkv99h0nyXRBBQ4","tlshash":"7f128d3f2e37ac0a36b1d55655cb803b82d460e300c517d7a88a7a6446fae51fbf5e83","first_seen":"2026-08-28T13:30:02.91461Z","last_seen":"2026-08-28T13:46:23.308479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2026/03/pragmatic_vs20fruitswx-1.jpg","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.934Z","timestamp":1787924752934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/pragmatic_vs20fruitswx-1.jpg HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-5aa7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2qT09ztYyMvEM7Zm28A19tCf1%2BDsh1DBJ13Zk3BtZyRmNwQ91LIr6QdJz7l0cHvb4994BnwYkAxBJ%2B9NJWZ7so1Gpv7lhnr67UPoafnwhXc05YQrhpgpGOEm3ZFD\"}]}\r\ncf-ray: a323c249dcc25694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23207\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23207,"size_decoded":23938,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 293x390, components 3","md5":"153c977db1175760f8ca8937efe49487","sha1":"25320f21d8e1dd7c3f245b58cd33857e406d7932","sha256":"a23794cf456b90e6819255f5b762cb72c8efefce795b6abf2e41b4b0efeb77f5","sha512":"9e0b58ecd3afdfba1fa30e4f7006bff5c719f6081c6c6fbb0491700efc880bf082d0b07f89a6c0decf5a3ba8bc16df56b431016d2cc2230e4fb6f83453cb595a","ssdeep":"384:9wulmMM1O5W2azGIKQfHNrg0FYQxntNDhI7XC/7FCQK59L:CcmMMQ5W2LBEyQrNoCzFYzL","tlshash":"63a2d0392bf18358ef472276c8051732fb4ad5419ef1497f84895fac3a88dd8e62343a","first_seen":"2026-08-28T13:30:03.005193Z","last_seen":"2026-08-28T13:46:23.309052Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/gcb.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.956Z","timestamp":1787924752956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/gcb.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-210a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30j6QMmGb%2F6yLABW9XFhB1R6FmV3UyXvA9l%2BNJWib%2Bs1GHn4cTb83%2F7nmfr2nOWDJs8PK9mrykM5IerquqrxtzM6wwWMb12m%2FDz%2Fx%2FldUoF4yLKLVYqesofKT%2BXv\"}]}\r\ncf-ray: a323c249fcdc5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8458\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8458,"size_decoded":9199,"mime_type":"image/png","magic":"PNG image data, 336 x 336, 8-bit/color RGBA, non-interlaced","md5":"e042efcb9aab433665697dbe0d5b365d","sha1":"6fe94841c24cd6bf22939dd393c3a0b17f2b2c60","sha256":"d733f7d3fb55d879961dd9cc4d725360d5d3593f838f9231ddec8ac73756cc5b","sha512":"d7d97bdb47a42c55020703663f12a92524e3601fecf795418b9b829447722b03dd4a79347448c70dae95813f02fcb624ece3af3b6438dae24a9db2511687870f","ssdeep":"192:Ee6qOS5vLQNV18xF8gP/sdWxwZGRKB1hFPwk2tl+od+8vn7soQ:xzuGx3/2WxKCsPwFd1goQ","tlshash":"fd028e620b3388ab385075250e5104ce33ef21bf6304305899a1d5fa3bd859f9b94fb6","first_seen":"2026-08-28T13:30:02.976495Z","last_seen":"2026-08-28T13:46:23.309706Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/logo.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.919Z","timestamp":1787924752919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/logo.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-28c3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4oh7ShRUrWr4UBoSzSY82SbOIdvoVBDcpZHkP6SoeBp%2F5%2BzM%2BE5RRKWTNQWmur6dtPAy2%2FuvTwSnvMkhsFxo%2FD1JEI2zETYqxotrdjeV26Z9V%2BNZPNTOxIxKaFX8\"}]}\r\ncf-ray: a323c249bcb85694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10435\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10435,"size_decoded":11173,"mime_type":"image/png","magic":"PNG image data, 558 x 144, 8-bit/color RGBA, non-interlaced","md5":"de176fe1573d6fec87ff8d32269ce226","sha1":"284884977e76b76de0a975fcd71aabc15d4e5989","sha256":"0d661c3d01f4cddc05b8dc4493c4f8df1603aa18572752c29b7939041f3008c6","sha512":"afc3661031b8d482e763120c41bcf3b7afb871e38f02e657b48dabfc5fde4684bd2b8b46be65d59a8c21da6c44acad74ca5844c83f3f1e958676ce6f2ff2d7f4","ssdeep":"192:cA/3u4Y0BUEXTxl9WLmiMl/i8VCYjT4e2ro80KhJGuPqj51Y7pM:crsRjzJJJf/UTET","tlshash":"4d22b0ced9f42d761da65761e60610f1f86b4d792a1cb33c6056e639ac0f4c389920fc","first_seen":"2026-08-28T13:30:02.984737Z","last_seen":"2026-08-28T13:46:23.310259Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2026/03/hacksaw_1067-tLa7Rl6FW.jpg","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.937Z","timestamp":1787924752937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/hacksaw_1067-tLa7Rl6FW.jpg HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-567e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3F%2BUX5K4cc0IEcBs1itzevEYj%2Bt1qwkHqw5qYePmLF7MmSxEHHkCNre8lLIxZVR9MB1wHZ5sSvbvnmwnb5evmv%2BTQmlTUiZYJQ4AIU2XA0JcshTS%2BP2zetCBvpv\"}]}\r\ncf-ray: a323c249dcc55694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22142\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22142,"size_decoded":22877,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 293x390, components 3","md5":"1d1af105fe11762083f568cb1f714830","sha1":"274ba4f177764e015bfc29d8057fea73f5397c6d","sha256":"3706dda264ce4ef16c41f8be24776d6a3fff7d9b885c392260e52a7d44b9fde3","sha512":"35c9f9b69dd399ebfd4cae6ec9d1bf2dcd408cc195bfcade67547850c2b9c98361c62e41e0b74c1754ae77874c8e80071f1ddd7d21c28beb5ca3b281e87b0b11","ssdeep":"384:9wOxmTI/kFh1maiJn/eP3c5tIkBa7mF9Wmzuz1ZT1miTlLV3ZggOm5A5HdshGbfi:COETY1aiJW/cfEKFb21NjhLZZzON5HdM","tlshash":"12a2c0455a841427f7b4cab10f432eb162c598a19753307da52367b3cea5c30359efaf","first_seen":"2026-08-28T13:30:03.019895Z","last_seen":"2026-08-28T13:46:23.310805Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/xnext.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.954Z","timestamp":1787924752954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/xnext.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-db83\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjqL2b8oHb4k7C6YKIVkyS20AkGl1RY1qxG%2BWW7ctxP0hrxlYmHi9FwHRRw0QO8hMLV%2Bezk6xSF8WGicJDLEYexQS0mJ1P5ry%2F7SzfMZCMUw2kQ4LAILwdo3pTz6\"}]}\r\ncf-ray: a323c249fcda5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56195\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56195,"size_decoded":56927,"mime_type":"image/png","magic":"PNG image data, 336 x 336, 8-bit/color RGBA, non-interlaced","md5":"9d5e57627d3b96ec132080ecef47fc3a","sha1":"29d631672afbbdd255fbba5c71964fcfae6f144e","sha256":"7ab0d9c001f5d165f614252436fabd305bcbf49ac2545654281a847f0f52701a","sha512":"6091f9debc4080bdb68e50216022f90ba6d5f53112948044f20ce812f0ef1a34ac1deaded2b09a5b51f01b8e2976d1aff09d98bb82f00a7c36cb9c6b36b91362","ssdeep":"768:rP9nfjYmT8/1GIA6DeNjvuoVAMrsDCqX4ZZQaBHV32GQPk7KqNxHYA/WhD2SxZ:rP9nf8VA6IRAM4ZkQs3g6WhD7X","tlshash":"8f4302a1178a723e3751f803a57c7894264c2f1856b3a2eb894a5f59f0ae4fa30fc415","first_seen":"2026-08-28T13:30:02.996255Z","last_seen":"2026-08-28T13:46:23.311417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:53.231Z","timestamp":1787924753231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 13:45:53 GMT\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11268,"size_decoded":2352,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0480a7b5f548d87b4900258575726b59","sha1":"db195efb64363a35a75bf835ed23cef2f8e211a6","sha256":"89796185ab1f9d2ea2acff84d1f6fa64f5f902130cd7157268bfd2389157e26b","sha512":"25b9f18ef84686f84d608bc54ea9dd03d2caf50f41b225ed37a5407283088bf151ac9b12304cef90ec83936343a5ff7d381af4d7b27cee64b459f960bfa6a4d1","ssdeep":"192:yuNJGCuNJbuNJT+uNJMcuNJPq1uNJebqGIwV4nuNJ1uNJ+AuNJ0N9fKN9DN9MN9n:ykcCkhkx+kRkg1kUqY4nkbk3kk9fw958","tlshash":"d6321e91040b50449b838ce223cebe35fe1f92507141d1b9bbfc9b6baddbca2526835c","first_seen":"2026-02-19T23:58:38.600237Z","last_seen":"2026-08-29T18:03:24.093291Z","times_seen":6134,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":33,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/cache/autoptimize/autoptimize_single_f5d551b9a65ccf21c422f4c9088ef1b8.php","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.916Z","timestamp":1787924752916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/autoptimize_single_f5d551b9a65ccf21c422f4c9088ef1b8.php HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncache-control: max-age=30672000, public, immutable, public, immutable\r\nexpires: Wed, 18 Aug 2027 13:45:52 GMT\r\netag: d6b37efeb405883ed63ea0cc450e7408\r\nlast-modified: Fri, 29 May 2026 16:13:17 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3jJ7HuLvB4KRvXhgf2y1PRy%2FCyYgSgrt6tYxbNHp4m%2Bt0yFmzod9puL5mYnBPBtHmkq3akbheny2B93cSeOG4FLCXuAr52dHmiZ4bu6CQK3xgkbuplLnMo7fDAMx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323c249bcb65694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1160,"size_decoded":1235,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (742)","md5":"a9118df8519b878078e47a28c90677e6","sha1":"9f2b3a3a2fd4bba9f44b20a62d97a03ac4b89229","sha256":"f0f3a7e46885ba1eaf4232c0d06fde4dc4f8880364d3a64bef12f2e0ea4caf65","sha512":"820ac45a2f839852c892d4a2847a91a5e6defe02cf548444cd918953b99c23910e2521a9dc71574c5d8601000e2b5da8ee3a0921d47acc4e22914f1404f23bd3","ssdeep":"","tlshash":"012198229098363644a7a6d2b08613e0bbb432c2f55490f93caa986c17d3dd664327f3","first_seen":"2026-08-28T13:30:02.972387Z","last_seen":"2026-08-28T13:46:23.31258Z","times_seen":2,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/awards-1.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.960Z","timestamp":1787924752960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/awards-1.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-8b59\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQhEjLmJ23O0fcIn9%2Bb8jNYh6bI834inuYHIdff5LtDwE6LHut70x%2FuywDFR%2FPtAhG9FWFYLuLFYxyMQehD4iWY2BzWjTsR05LVpIU4Oc4ypDFLjV%2BhgsRrlkZqj\"}]}\r\ncf-ray: a323c24a0ce15694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35673,"size_decoded":36407,"mime_type":"image/png","magic":"PNG image data, 576 x 336, 8-bit/color RGBA, non-interlaced","md5":"dd3a109c85db7676ed0f0ff7a7555238","sha1":"d3e43faf6878ec838f9769d86422fc7bb554721b","sha256":"61b8e7a0ec717b50efecc74d7ac0f9f1bb6490c29ef60daad02e8dde5ffc7710","sha512":"bc7716e5334fed09ed90d6d42d3ee19f456c2ae350ef484ef88f061f1c76718d80382022a249c8b79a2efddf08e3f03ce5112b22df707d6d5338af0fa674b7ed","ssdeep":"768:IUsQQQQTkYp+eAZTvM80iAHufD3B+TcTOhmIkniuiLocU8CZu/N80EFG4+BCdNVW:IUsQQQQTP+eoTE8ceBmdmIGW5rPNCn/g","tlshash":"eef2e0ca9f9aeb0decae8660846df96933e8204d8d28f570095c8ccd4f04e11997b5fd","first_seen":"2026-08-28T13:30:03.043739Z","last_seen":"2026-08-28T13:46:23.313219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/themes/lemon/assets/img/icon.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:53.627Z","timestamp":1787924753627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/themes/lemon/assets/img/icon.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:39 GMT\r\netag: \"6a19ba43-5661\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jeEt%2FRpTLHv42yRyq8QfjduEDAavhIbAvo2JU37JZip5%2FjbXeuDGcxZaRPGdUJc3GuSj1SsCd4unkaV4aqoD8kwQpGyen5RC8ItC4lncKBVnHtcR2IJBRUJMadm\"}]}\r\ncf-ray: a323c24e2d215694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22113\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22113,"size_decoded":22846,"mime_type":"image/png","magic":"PNG image data, 216 x 192, 8-bit/color RGBA, non-interlaced","md5":"e8cd1c95d13f4c414d6e8b0358d7180b","sha1":"f4ade676e72fcf8bb4945b44b2501494f8f26d33","sha256":"bb623b6cf03947a858062550c10b27c01db4722b534ef7d42f15028bf145611d","sha512":"7d27a1e5c902cdabda1d1c2dadf2e27b82c49c252872d5dba2261ac1a0a047e8ba9acd483c17ce238aa04b3442e5b8cca751808a3d0aa0fa43a330d41da964d6","ssdeep":"384:Of4+BpEe0WdjuhTzMQn97uG6RwIewNw9iRA5yXzkJygFFtZvtv7fljtUNkZddt7W:2JpEPWdjufMQ5ui+C9r5yXzkggFXbRj6","tlshash":"e6a2e12ec07448524cf91ae5e46aa5a5d8348ad6c3c9357d44a23cbc1a3c74f19f3a9f","first_seen":"2026-08-28T13:30:03.012114Z","last_seen":"2026-08-28T13:46:23.313841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/cache/autoptimize/autoptimize_single_6f0e95550384d6d7f0cdcdf36dd60cc4.php","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.901Z","timestamp":1787924752901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/autoptimize_single_6f0e95550384d6d7f0cdcdf36dd60cc4.php HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncache-control: max-age=30672000, public, immutable, public, immutable\r\nexpires: Wed, 18 Aug 2027 13:45:52 GMT\r\netag: 23c6e0a492019bbad6e5bc9b3331b9cb\r\nlast-modified: Fri, 29 May 2026 16:13:17 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qdFHbBhFxNMI38wCR9Fbixndm3ScTakeq5fzyfCRBiUGyGsGlO5SlRSQTsnZKCY6KVyDmKBxsWRewvqikycsgeKG%2F63c4gBneNmcIbKyuBrp7O87%2BHJEZJu%2BH89i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323c249acb25694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11236,"size_decoded":2958,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11236), with no line terminators","md5":"12a2f757bc2bcd9909742dfdb5de8e21","sha1":"2be3f79e4ca8ffbf90aba16d0e2a16b08201abd7","sha256":"d8b16ba5e4338871ad9e14148083b2d0f1cee6c2cfae51b8c015643d26adbe66","sha512":"33f6e5ccf682c0150a9c572501649cacef9c99171fb5a69eb4e8a5c0e2ad0bf9a9de580aba6a393c70ff876a6f73b4a3ec0fae0e02b372f5627158212923860c","ssdeep":"96:U+31XQl2i/isUJ+GDZuAoi65sQMLP8IiucnD69lAUog52KwKtyunq6:9QkJ+Gpwsz7fP3BiW","tlshash":"593201e21d113a682067d01be6e76744633dd246f32304ee691f5b6e47c336603b2e8e","first_seen":"2026-08-28T13:30:03.024305Z","last_seen":"2026-08-28T13:46:23.31448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/partners-1.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.971Z","timestamp":1787924752971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/partners-1.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-5559\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xfBD5%2FMTaGRYIZPWM2MqP4NY2k0PIuHqCfM02iyd2s8IoTeGaaXB7aLi1xOWO6b9unlicgACdgQnTKzNrir7eo5%2Byecnjvg8slBCPftQTcswP8jKpjZS%2FiD3Crdv\"}]}\r\ncf-ray: a323c24a1cea5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21849\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21849,"size_decoded":22581,"mime_type":"image/png","magic":"PNG image data, 408 x 288, 8-bit/color RGBA, non-interlaced","md5":"722e96c7aae2b0e4c3bc98f796ce9d12","sha1":"d355d5ee4a07e9a3cbd56334af52370ac0d522ba","sha256":"550933315422e4aab1b73e620ca183d957185a72787076287a3d678205ef501b","sha512":"944c63538467fcafe5be1aff11abcecd12e058877e7bf2f52641d4329a99656e665a9d97f04791b281f3061323c1b763337eee914b71cacc158b28226adc1919","ssdeep":"384:zPwgu3WeJ8O91wINTeHu8blQN1CTcS3vH6iq2RMwQabvawwF35omdfKPnwTH:zPwgu3W88O91NTeHX3iileVTvifQH","tlshash":"17a2c0f11da7c961c0ae96420ff29c117f9bbbcced20d006c6aa8112ff95f650887e55","first_seen":"2026-08-28T13:30:02.923061Z","last_seen":"2026-08-28T13:46:23.315207Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/themes/lemon/assets/img/faq/arrow-down.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.943Z","timestamp":1787924752943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/themes/lemon/assets/img/faq/arrow-down.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:39 GMT\r\netag: \"6a19ba43-5dc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=occ74sOYPbYOrZNRuCmRf%2B4yQtn0JRO2HqIWNB%2B7hqUp%2Fd6vvnNmYIBoV%2BK%2BLZK6UxT3y4GEa7BuN8pfOZ%2Fxc8I%2FX6wyiKZOtzP9QqVvxQf5UPxBai203d8ASa4F\"}]}\r\ncf-ray: a323c249ecce5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1500\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":2238,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"4fa23fa64f525f1ed09c8b954d9350c4","sha1":"d4af89e68a125b62f6a84375a64d3d9542d1be40","sha256":"efd98b89c76e273c0f2ffd2fe295128bfede98860288bbfd187a43f751002294","sha512":"08efa82ea780946527031cd577430ce60005cfdb6cb0538cfb55bece5a8c1b6e018130357f856ee49844c63db52c255fa576ad9f30f97aaceaade6a28ba5f7de","ssdeep":"","tlshash":"2631e9cbda63bce914dfd3b1c5a4445c5576b81a1e318f8bfaa868ab01fd1382433356","first_seen":"2026-08-28T13:30:03.016794Z","last_seen":"2026-08-28T13:46:23.291715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/bitcoin.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.952Z","timestamp":1787924752952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/bitcoin.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-674\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zn3sBmerH%2B8BkSngkh5paAofm%2BsqIDtrFR%2Fg%2FrB7DkA3dgSdVZ8JiBGxCKnwNCgNS79A2N8a%2BxjDHhDcszr0Q80lVmgEoYIspcdC3SR3oMpcM4tn6jt94x06BAcE\"}]}\r\ncf-ray: a323c249fcd85694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":2386,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"ce2c71ecc65b371af21355d52f8563cd","sha1":"0ab44bfb81dab4ec97a4d46efeeb9f001c400bda","sha256":"98f0f885fee3d78d82bda45546a33886d8498bd05ba7de1ae05f9419843f55e4","sha512":"887e6028c30634b6c01b5b61b1f7f059956dfd8beeb40cfe02dc9800e212f60d870b0cf9cae40365342b95712fa2122a919d25debc81781f38c56e1f3f059679","ssdeep":"","tlshash":"ac31faf5f64e0d22be426c250ab74270a5e56ddb1096fa81c633c09d0a3ae487594bda","first_seen":"2026-08-28T13:30:02.994691Z","last_seen":"2026-08-28T13:46:23.315735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/partners-3.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.969Z","timestamp":1787924752969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/partners-3.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-3736\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2BhC9ctvxyCpyw9LIFqAl8j7gnVldr6JLf38Dxnu2ZmxMMcjZ43v7UZAzkOwkEbPmUalvZvXa%2FUiMDwFCPw4GEdpOXnwE3XiQT8fP4lPGKgUsc6k7sHxHKcQEqBH\"}]}\r\ncf-ray: a323c24a1ce85694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14134,"size_decoded":14864,"mime_type":"image/png","magic":"PNG image data, 306 x 288, 8-bit/color RGBA, non-interlaced","md5":"2b13fa2b822dcc163742ebabb2ff200f","sha1":"a21508f24db83b375b245841a6aaeb14ad15a90c","sha256":"41e1ab104957a69553560ca45da2805c7d89a0b22e920a3c77c91410ffb56c64","sha512":"b433c2595d9cb015eeabd65aee3d00b05bbcfe2e7a791af4b2cdd037f4eb67171b6d3db41ca5de12b989313dd93e5a399dbe0bcf0a4234a838950964411a2106","ssdeep":"192:1v+UPsqSmn6mk+qwys1/6Ne8wlliS+oSuuOmxIM1rkkMISuurSlVU1K0l:clqSnBCFiUiTv571cICMq1K0l","tlshash":"2052bf6c3dd5206a2dff97bab318e5409f29cc9507b6e9cd773e02b901109f99b88e44","first_seen":"2026-08-28T13:30:03.03357Z","last_seen":"2026-08-28T13:46:23.316396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/cache/autoptimize/autoptimize_single_fcda04291a87292eaec697b0e45934b4.php","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.900Z","timestamp":1787924752900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/autoptimize_single_fcda04291a87292eaec697b0e45934b4.php HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncache-control: max-age=30672000, public, immutable, public, immutable\r\nexpires: Wed, 18 Aug 2027 13:45:52 GMT\r\netag: 10b89f6f756dfd63838c9aa002a06d3a\r\nlast-modified: Fri, 29 May 2026 16:13:17 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80CGoSJKLd4Sz5MpWAZjGenuvWOzelPMQGByqkT0uixWCeRY0neOpyJuaVKDi5WCfXhlijC3pUCQa7GIlcwDoWCF5f3ISCEAzH0jNgjQ5%2Fn1YX%2BH9%2FSv1I8sk9Zh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a323c249acb35694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26174,"size_decoded":5845,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26174), with no line terminators","md5":"aa42d7622e884aa6cb87dee56bcd9fde","sha1":"75bd56b78ff4e5574f1d142fedc00ad5f4c0a380","sha256":"033d84b342b927bb8da90df0fa3370d8efcf43938241cdc34d844efbe4791997","sha512":"b14ec4fcd0667d16dbad8ee7c412ae5673b81609dbfd8ab25b47cf2289721fd0c9a7dfb22bfbf4adc5b87937a2bf6b60aa8689d4cec04df423a525896111db19","ssdeep":"384:ZjGgmWNvbNP8a0L+ZV1b41gcyOnEfK+c8F36:ZjGg7RbNP8a0L+ZVl4nyOEfK+c8F36","tlshash":"b3c263715664752c7027d44af5d26bce7138c203e2234aeeea26ab1fc5c71a317b1b4e","first_seen":"2026-08-28T13:30:03.027105Z","last_seen":"2026-08-28T13:46:23.316937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/themes/lemon/assets/img/header/nb.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.929Z","timestamp":1787924752929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/themes/lemon/assets/img/header/nb.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:39 GMT\r\netag: \"6a19ba43-648\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7gohDLsfl0oIspnLko%2F9sjt1C6BtG9PHb%2Bqh5P1hPjPdqVdBraynZA5xPmUDOmi5%2FcbDhQDTqGa60mjA1MRh0Wp9g7Ovg0SmAAuaKFUWM8gw4nejOhzoYD25bYmS\"}]}\r\ncf-ray: a323c249ccbc5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1608,"size_decoded":2338,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"d70dfeed773333aab5c16dca9403051f","sha1":"81b9d30beae7b6f508daa3f57e54f668c8a91be3","sha256":"07aef67081de420985f7be1e733657c1ec30960df7f62daa612f7d6a2617f6e6","sha512":"2a5264fad7ad2b7810773fb5d4740e6d9166f6c522ff756bdb9ef316ba93e510eba066701e982af44822a60f39608c1930bb7e7906007561c45f6289170031fc","ssdeep":"","tlshash":"0d31c8f73607514c0c7aeb46449a8d9a642347046ab5aa0633065281c66d473debf5e3","first_seen":"2026-08-28T13:30:02.998164Z","last_seen":"2026-08-28T13:46:23.317685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/icon.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.938Z","timestamp":1787924752938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/icon.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-5b9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXi7%2BAFYFBDk6MtCvrAmyxmlc6NDLY7oihHYRGRiSVLIALnrUZHciRhkD4Mxvql770PElzjmKaJ6%2BWDQa5eJdLpVa%2BSTl7g080ZnlAAD97HzeWH30AofELWvKAYw\"}]}\r\ncf-ray: a323c249dcc75694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1465\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1465,"size_decoded":2195,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"58b84a7a78fe5c8dec6076e89d4d4d4b","sha1":"ee014ce3483175d839360600597c98eeda931c65","sha256":"0eac8c2c057230e8f11e4643c4ea397e369bec7b29dfc9ad2cd503af7c51cca5","sha512":"6e077942e84fee41002da4b680480dc6de6f2a14c1a8f825f849c3ad5ac6486bb60f3f158e8402c0da61ceef4b337a17f13b369a97bda51dc7de966fb10569fd","ssdeep":"","tlshash":"3e311ccd7d17c0c49e31c291953beba41e693de12619453ca775b1a1c3da0522d407a0","first_seen":"2026-08-28T13:30:02.898665Z","last_seen":"2026-08-28T13:46:23.318222Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/responsible-3.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.957Z","timestamp":1787924752957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/responsible-3.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-1e6b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2WdXdmVALoop0aV7GAyQ1scxFpGO%2FHjQiULqyoJ2jaKkB8i5ob3%2FeQi7deEVlrVai6aWnmolGIr%2FehWzewSteh7eYtzxWJYJGy3g3fBVm6eJv6Ct754LUjYSYqlS\"}]}\r\ncf-ray: a323c249fcdd5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7787\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7787,"size_decoded":8518,"mime_type":"image/png","magic":"PNG image data, 336 x 336, 8-bit/color RGBA, non-interlaced","md5":"583fccb89eecb9a9a07e00f8109338c1","sha1":"a5aa06a45b39143795362535122e8bf3b722ad93","sha256":"2691f723f1c3c38b88cde62d372421248b26f19f74623982f34bb34d2760235b","sha512":"6a308e2a645009bd3d484efb346111efe6c2a5abae457977574aeb19eadb0365260667ec96ee93c2db9ae9fdb8cdc6b1f160fc5de76ad2da1a6c08db5e9ba25c","ssdeep":"192:CbpkyVuXAaIxjb5xx+EQr/zyQQXSjh+Sq1CK4:Ct7VTH5xx+fygEz1v4","tlshash":"8af17d66ac1cd5b9f5ced7fa01c52591f6dd11a88c1e4e9fb6324a295c18820f1c7263","first_seen":"2026-08-28T13:30:02.967076Z","last_seen":"2026-08-28T13:46:23.318829Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/themes/lemon/assets/img/header/sl.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.930Z","timestamp":1787924752930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/themes/lemon/assets/img/header/sl.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:39 GMT\r\netag: \"6a19ba43-76a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hkw5wcI5ptJrKjby6ZWLujWxuWNf8gwelcDsqfYFsdJ6xZOCU%2FCOTxcyvPmYYFwJUJV%2BD%2F2gm1Iw0q5Zj2PwKgrWv6LhiGAEuIP%2By0rLIaxwv9Sg5uvfUsBK30wa\"}]}\r\ncf-ray: a323c249ccbd5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1898\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1898,"size_decoded":2630,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"45c175f873fac5a69ee3c666a01c2cb1","sha1":"060046b372eca156c0ce50bc10d1abfc8465a594","sha256":"e8ec56f5a8826426bbb34f6b5654dc8ca081063c629b952c6fc99942c7b64455","sha512":"986cc0e32af5147ff60aa66bb5b73035f537d4635ec609515f9959c03ba38b70df5408d40b262372557ae9fa9ec370e79a6bc2226c3f54b574e9b53d74393bb1","ssdeep":"","tlshash":"1c413bc94f4e10a5b8aec0e28d934188adf71d55b0e605984c82112716a2c5ca266924","first_seen":"2026-08-28T13:30:03.055896Z","last_seen":"2026-08-28T13:46:23.319581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2026/03/pragmatic_vs20olympgold-tPIoAOc1Q.jpg","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.933Z","timestamp":1787924752933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/pragmatic_vs20olympgold-tPIoAOc1Q.jpg HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-7b52\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9RIEaFa%2Bfb267TPpFZtjFHr8Gv%2BFT1SCs94Oa61ZBz8fUzVfihV%2BEt7VY0Gb4oYvf%2FIu0xYtdI0RpLfNxERlLrKOMiDGvE4aXz7rjtNSrcs%2Bt9i%2Bk%2FhHa1jG6UbE\"}]}\r\ncf-ray: a323c249dcc15694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31570,"size_decoded":32311,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 293x390, components 3","md5":"211af21e15cae8cd31a323cb3374e0ec","sha1":"2b539255f04e85c8d30643249f1f56479932544d","sha256":"079914d556982bdb323fec9d632f81ad86e45ee88d3a5c01ea6944220d8ce56b","sha512":"86e5df6d00e6ecb9b736d3140311558055833e6e2d29f03351f789e0a1e0cd7416e279c0615781bfc2c882893e6a3de98d12a3a6513d370744a7e8936b72fba2","ssdeep":"768:C6VsyRzXnVd3qEWlnt7HnPqICuaqvHkPbcveAIiZ1eM:ZvRXVd3AlnteICuaqsJi3eM","tlshash":"5ce2f236e78aa129fa35697161d45132ba363ff47b7b42b242e360d98740943e4e8fd0","first_seen":"2026-08-28T13:30:02.989449Z","last_seen":"2026-08-28T13:46:23.320132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/themes/lemon/assets/img/header/it.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.928Z","timestamp":1787924752928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/themes/lemon/assets/img/header/it.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:39 GMT\r\netag: \"6a19ba43-4ff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TNX%2FIfOZh8ZPxQ6BUHvRKGNmHnZ9FJ67koz%2BnaxWvuLRCykhAsJLK%2F1c1npCRq20Upp0KhGrM59x7LbPvwGkQRfuHY1hQCvOJFhB8jsCul%2BgDekiXDoe3NzufGBv\"}]}\r\ncf-ray: a323c249ccbb5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":2011,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"8c9cd688a50f0b3d963a1660f8956cff","sha1":"bf7b076093a119800cce2f301f1fa64eefb3b77d","sha256":"b960836c94201962c75a7c3983e3e9e4b3fb015625e3ca78291bc187f6ea3e15","sha512":"b12f30c9ee6454f21a8981de4011853f44c9fcfab30e61c12eb941b1460ed7b5e0c22cbc9e8ac50fe57ef97593a104f5c4d15bef0aa4c42fae4dc803730fe800","ssdeep":"","tlshash":"c721c8f3b124bac93f5fdbe7b2a554d4603e6fd599a71d1c2e8604804200db18d70a18","first_seen":"2026-08-28T13:30:03.037277Z","last_seen":"2026-08-28T13:46:23.32066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2026/03/hub88_zcl3u_cctvgame-rushhour-MOhk4Ud4l.jpg","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.935Z","timestamp":1787924752935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/hub88_zcl3u_cctvgame-rushhour-MOhk4Ud4l.jpg HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-6f0c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YW2ds7C5tiUW5k8n82Mz4e%2FACzpHto8uI%2Bykxlg8C8jSoefUiPj6sqr7ZEyIM7lqOT70Oza9UeblNEmSpeXqF0VcE2a3HysqXaxy0p1HBwAS%2FL4ha6a2yLzmt2qW\"}]}\r\ncf-ray: a323c249dcc35694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28428\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28428,"size_decoded":29161,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 293x390, components 3","md5":"1ddf202bff4419699b4b21a108a581d7","sha1":"306d96a6f436346b40538f65ffc7998d6d6c190c","sha256":"e19ae259e12e5c59fde735f228180c3c9c13e8ec511f74f5a1222781136faeec","sha512":"bfb86aeb97379582481e7b26a9935131c40e0a20012cbe665fa320240457cee35fbbb0cf51f89de4a8f2e90e6d828e02d3e2bced2c9a039cdf14fd9d0d2d18a4","ssdeep":"768:CLLr22zVftrv84PJsQ0tORyLNPJP2Nso+dk4NcSZFn:MiYdtrEIOLno+drd","tlshash":"d8d2e0329782cf66c92b8a3abe886fc5c6e4f704d4b73ef304192a5904803a93345837","first_seen":"2026-08-28T13:30:03.025594Z","last_seen":"2026-08-28T13:46:23.321326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/bonus-bg-scaled.jpg","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.938Z","timestamp":1787924752938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/bonus-bg-scaled.jpg HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-13ca3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vjo85sU10CqZluEpLot%2FtFrOJrhiWO6RugeVxFG4IQGJ0iRr26vt0tAJUiAWSjf2Y9VSdQUQd89qM6mc3dk%2FxjUYHkitjdZ%2BfzSMVVRp5xcLNa%2BRGzkyoGI%2BY5nO\"}]}\r\ncf-ray: a323c249dcc85694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81059\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81059,"size_decoded":81797,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2560x573, components 3","md5":"432b48d1ad8b0614ef5f85f45901028b","sha1":"3a2ab4d8fdcac4ee8364b659e8ba3226200dfc2b","sha256":"043ae846f3173e4ab1ceab7c96210db798c53fd48eea5e67ac2a0ca30541a3e5","sha512":"b46ae1134280e80748bfd9f4813155620612280f33cedffec74efa1108e091157e7c463fa7e6c6c05e46eb45565f12348bcce934ed54abb46cd8f9020077670a","ssdeep":"1536:rWDeVSDIb2GXGJPqxj/m1aQCRfzLx4KBtXO7ucxuPMi9yCt9+58uFW:IewDGGyd9V9LCytXMpli9n0FFW","tlshash":"ad83f1b2eb92ac05cecd5f7cf5e3731d4739153746641906e3acb8332b8629995aa3c0","first_seen":"2026-08-28T13:30:02.992948Z","last_seen":"2026-08-28T13:46:23.321808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/responsible-2.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.959Z","timestamp":1787924752959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/responsible-2.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-1808\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOirCa8NmDQL0CSw52TX35e1woYz0OOKOrCB8hZwZbEe0PhRUi%2FopQynbzmNeAc6KgzMuyHw1082kI1OL44NyWzhgdFwFqGziFwDRAqwITehyScBViEgGpRzaavZ\"}]}\r\ncf-ray: a323c249fcdf5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6152,"size_decoded":6879,"mime_type":"image/png","magic":"PNG image data, 336 x 336, 8-bit/color RGBA, non-interlaced","md5":"0839d2f116f0610fb56553dd5d5b09ef","sha1":"c7cbff1c62d41be606d9cb64da753e1c25311432","sha256":"b80621054abfe0aa1c6f6f9e797169db3aac85071a1e1e652d6ccc01d20f2ef0","sha512":"5529434af60309285121deb5e99808ef804a434c5f8baf77ae5bc57f8f8438d2fc7e29cdd583aa6c27e57156cf53a3772c37a656d10f75a8814f92f90d3d7255","ssdeep":"96:G0yR+UlCF/2lTaUcUGtDZOMdrqlYxdCD3+B2ml4aJ5SHyT2wtYPN1AQgubdksQ:9Y+Uo0+UwZOMt8GdCDuU+GyT2wtcNWQs","tlshash":"84c1d9a2087e851783ee43fdcfaf5d0b769be24cc5941a6ccf06836a475db74b0a504a","first_seen":"2026-08-28T13:30:03.003708Z","last_seen":"2026-08-28T13:46:23.322277Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/icon-1.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.941Z","timestamp":1787924752941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/icon-1.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-a6e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7k%2BZX0Jc6zB4TTyylWsRVgiXEyYbSUCYM1gYg9LcpF68%2FVIQuhig9drxOrY%2BLs9QRwkwJrlMWJKRboVhzW5N7Enoi7UtLQ86GXegCSAFGnTAGbDWB7s1EEOpgSX\"}]}\r\ncf-ray: a323c249eccc5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2670\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2670,"size_decoded":3400,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"492b52301e9f51314bc42d99d088b8e6","sha1":"ae6afcede43987ac03990b0bff5abf12051cc276","sha256":"a567d34a9107791923b950fbe098e1d5e949a7b425ca23680de9473f81ddae3f","sha512":"76ffed895bc428b2647a8925e01c8b6287af3dba6ead4b152638ce6ca4c71b05d57d64aeea945c275147b48b8f745f14a11b6fb7b4300616866823c66247eda7","ssdeep":"","tlshash":"0b5129b31b66dd28a357ea23070ad040df84230e0751eb3f2aa248cf543d9f1d8c8935","first_seen":"2026-08-28T13:30:03.030487Z","last_seen":"2026-08-28T13:46:23.322836Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/themes/lemon/assets/img/footer/arrow.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.944Z","timestamp":1787924752944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/themes/lemon/assets/img/footer/arrow.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:39 GMT\r\netag: \"6a19ba43-666\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3L4qy0Ym9tg8A17fav1w3XuoX6EBxm7ulRPG%2FQaAbhMjqeFSg699Eys3tleaNubMcjoUEif9Ng9DPlw5sdKtPY0p8LhS3a006lw9Ov8a7sslvMg4OLDu4xY8ULmU\"}]}\r\ncf-ray: a323c249eccf5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1638,"size_decoded":2364,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"fbb9ac90cabf6fcfc05527fa817c7845","sha1":"c836b2f693903a51f80e92e67f076a325e0828df","sha256":"82ee5a16dac83725cb9e32f75fc0fbf710201e870c806d1ca790db661f0e25fc","sha512":"b8b92a53e25ea7f49c81b63d1cdeaace4eb9fab7f28f0f2a57aaa8d2670f35502939ce45379347654a4fd1037bae79ce9e825c09a308accccb2afce5f64527e2","ssdeep":"","tlshash":"db31f8abcb180844926f9325100b12b6280a43d7da2b089e0a3ce274c14bb4a398f753","first_seen":"2026-08-28T13:30:03.001114Z","last_seen":"2026-08-28T13:46:23.323384Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/doge.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.945Z","timestamp":1787924752945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/doge.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-147b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gGi5H4gwdDyYVRRe57POu70xnDqz2fCpwaupCcCN4yWkvRehGnS5GHXs%2FyuIONcaLerRvM%2BxoBfgVJHksiRe0WiIy1rvJdjYN88ojQAA6hXHh8YIBLE8H5xu%2FvcP\"}]}\r\ncf-ray: a323c249ecd05694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5243\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5243,"size_decoded":5974,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"d0e3bee0b1b3ab0f1a78e7bf9a085af0","sha1":"46b509bac802e5449606e29e0bd058af44d828ee","sha256":"2a56f23432947d83679126e84b3fd9ea70c3029c4dbdfcd4d20548f434da3e07","sha512":"2ef41f1e86a81b30ac9d20a02be99bdb0409ef0230fbd947ef9d776e8a44d79107353856664e049bc8129e57e5373e919990a12a270ab2d3a3081741469aadb1","ssdeep":"96:zVHQfdXrbh1J8rVN3crfgg18I515qshvfz/SJJOVu0H07HC7uYONqJYhmqY:zgdG5ar4+8I51MshvfjIX0cCKYOMmA","tlshash":"4eb17dd192aca7f4e2d2d01b6135386afb7a94da183ec33f903310a612edb45101b5da","first_seen":"2026-08-28T13:30:03.042445Z","last_seen":"2026-08-28T13:46:23.323919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/trx.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.947Z","timestamp":1787924752947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/trx.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-84a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=584SjqDL5vWFnb%2Bu48eMBJ52aTehqSaL0fgWQjKhAmaWpfK8iAxfNiJNnjd1gBmsUAx5sWCBw4VyAyIqRILZ1UkD6D%2FjwQRBabqJ4czPcQ9kF9mr89p3r%2FPQbseO\"}]}\r\ncf-ray: a323c249ecd35694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2122,"size_decoded":2852,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"d9aeb3c8c9633ed7d047d0c0e4b097d3","sha1":"5122874f20b0d641642bd11a2d1bfd65c329829e","sha256":"e833d14af994d6879e5a8ed0c6ff956e1ba2c8313edb926fc96649fb2ea6cd5f","sha512":"29d986c6aadc78efcc38847c6e1c065ed31487ede5b46cba614920c462c542c26fedeba5b239d603d3a2d1925f0678e905d8452397282b11624ad6b79ad0df2c","ssdeep":"","tlshash":"7841fc93f33f14908701453449b69db0e92f2b793555e59fe219b80e8edda6b4cc10d9","first_seen":"2026-08-28T13:30:03.021329Z","last_seen":"2026-08-28T13:46:23.324486Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2025/08/xrp.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:52.947Z","timestamp":1787924752947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/xrp.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-432\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jRhRZpWzJZa30b7vauRdbnK7TMVirwz6m9A356mYqhtdpn6jKL2YQnsjFXAjmeTj0LRQvxV1YuEeI%2FAzUJMF6Tf1TeK6swowW8KvDxPwOeTz9cu42t5GYeCgVF%2Fz\"}]}\r\ncf-ray: a323c249ecd45694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1074,"size_decoded":1802,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"8ca916636a9f20c4dbb033ce77f5a5ff","sha1":"d4798d47ba9ca25558505aea4f927cd541a11591","sha256":"af1de6b79d31108de0a98f89bd9eb609824cd7e1a5122f2904fadc8aebef5135","sha512":"4c16b54547538f707d5b349f2de8dd565b7dac6879ca913c16db3fef1f75132de90219a5989b9de0cad8fea2f5e057de3586d12f6d0d3633110b8ac09d005147","ssdeep":"","tlshash":"081189d4f1f4a9b892de620e50905cd8d27909140aa1e444747dd695b02e89f4b75608","first_seen":"2026-08-28T13:30:03.022841Z","last_seen":"2026-08-28T13:46:23.325028Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/roobet-3.com/wp-content/themes/lemon/assets/img/sidebar/arrow.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:53.345Z","timestamp":1787924753345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /roobet-3.com/wp-content/themes/lemon/assets/img/sidebar/arrow.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://roobet.fyi/wp-json/\u003e; rel=\"https://api.w.org/\"\r\npriority: u=5,i\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SsWVe3T4zCbL0nEKUPVnfo55xBkes3ytmrT3Aiz2OCPujElRgWnoCO00RL%2Br73fwkIPpY1I7xBO1Hwspyf3eRaghbbA%2BPgbM9jZSW536TP%2F2dezIQu%2FCfmI%2FMfJX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a323c24c6d0d5694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34491,"size_decoded":10818,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9392)","md5":"209c7982820934aea6f74077e5c38b95","sha1":"553f9d604a7d3cc614dd9e1efee9be9afbee505b","sha256":"fbfa0f4708b50697d9a4dfbe315c93dd39893e95fa7b28b4115fd289550f1baa","sha512":"07ed3cdbc72e815d6de1d4a668be7fc885195f8a4883ba76061a252b1eefb98b1fb67600482536f92db3bbeb66ce408f39cdb392b0b2813d7c83b6d8f8bf1832","ssdeep":"768:GMrTzZdypa9X9hRdDRJr4qStUEtYx7P0uOx7wD73Aa7+b0vLBO:GC/ypWhfOwO","tlshash":"49f2b5b2e0a400b7372f83d99391731cf5a69605da06e769b1fc219cabc4eb644b371d","first_seen":"2026-08-28T13:30:03.035096Z","last_seen":"2026-08-28T13:46:23.325575Z","times_seen":2,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roobet.fyi/wp-content/uploads/2026/03/favicon-32x32-1.png","fqdn":"roobet.fyi","domain":"roobet.fyi","tld":"fyi"},"ip":{"addr":"104.21.1.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roobet.fyi/","date":"2026-08-28T13:45:53.626Z","timestamp":1787924753626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roobet.fyi","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 16:52:15 GMT","end":"Fri, 30 Oct 2026 16:52:14 GMT"},"fingerprint":{"sha1":"D1:98:61:26:D4:74:7D:18:AC:D5:E3:96:FC:58:71:6E:D6:7F:BA:73","sha256":"50:45:09:A0:17:45:88:80:2E:C7:88:A0:9C:B4:F7:23:B3:97:85:1F:BB:7C:AB:5D:BF:C3:A4:C8:19:35:CA:93"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/favicon-32x32-1.png HTTP/1.1\r\nHost: roobet.fyi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roobet.fyi/\r\nCookie: pll_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:45:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 29 May 2026 16:09:38 GMT\r\netag: \"6a19ba42-23d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 987\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaTaAbpMiz4596Hj26Gw%2BUukmvcdLAURBwovCYaChIRNZntZidgy4jcC%2Baua8Xtotz4na9buXsBrxgV9ZrdzSUXpWKZpvmZ%2FFMUYWtt2ozlDVyOHrEZQA2SQ2YI9\"}]}\r\ncf-ray: a323c24e2d205694-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 573\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":573,"size_decoded":1305,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"24cd40b1459fffdfb02d4e15c8d8c6f8","sha1":"aeb767f9a48aba836af7f853a5e8f9262c356deb","sha256":"b251d41e4e9888b8538de3d5861a287d3995ba4567c37368951f4883d469078a","sha512":"f5a8f81a2e713e22706c08a0edbbf3c8af19ab0fd48b4a939a565ff705e1b811abcac603730b32ceac57a8143bd84d59e1466dff9b3bf65a43eda5702c9d8272","ssdeep":"","tlshash":"9af09d5e33f0dc04b71c1577e22f996f5c119d3142df270370711610b533019d081b24","first_seen":"2026-07-17T05:04:37.655178Z","last_seen":"2026-08-28T13:46:23.326082Z","times_seen":4,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"roobet.fyi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}