{"report_id":"b016ca33-2865-4be4-8496-7c9120925c52","version":0,"status":"done","tags":[],"date":"2026-09-15T18:59:56Z","url":{"schema":"http","addr":"rovencrest-ai.com/","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rovencrest-ai.com/","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"title":"Rovencrest | Official Website [2026] Platform","dom":{"size":128735,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17566)","md5":"0d61aec9a4182f883d56257d50842969","sha1":"700eedd6520fbf1f2a0e218ae883564a1838bf4d","sha256":"ad71046e29880be92c519c3dc5f11fc594835dd22558869296a17e823aa06edd","sha512":"d3a8dce6bd1b143dfef10dab569eb90c8f55f05b1ef81724087ce53c52291b99e98af89e06122b8b632252ca6158c92c3b8b2e6f71732dbf60597c1eb1d56dae","ssdeep":"3072:qeWYoYJ0rk/CVvKZSft1yFdPIw582WAVdXB0JC:q0Ek/CVCkfwxKJC","tlshash":"69c3c017bcf3102b1123a06a1fff67193f9ad1039249cd0877dc2a985f86d9598a3b9d","dom_hash":"domhash8c1dccd380ee08214d2e42f4ba04dea7","first_seen":"2026-09-15T18:59:57.965919Z","last_seen":"2026-09-15T18:59:57.965919Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rovencrest-ai.com/","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T18:59:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rovencrest-ai.com","ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-07","domain_rank":0,"first_seen":"2026-09-15T18:42:10.592779Z","last_seen":"2026-09-15T18:42:10.592779Z","alert_count":155,"request_count":31,"received_data":879608,"sent_data":17006,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rovencrest-ai.com/","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-16T05:52:32.535318Z","times_seen":201824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rovencrest-ai.com/css/main.css?v=1782701700","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.768Z","timestamp":1789498763768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /css/main.css?v=1782701700 HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-736d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdZxiOEZZz3YrT1cOJhExrjmiI%2FW26kvQZ2tImt7MJpYxib%2FKYJVt6UhpuEcJ2hhcl4dg%2BETA3oKCiv6XmIOZxmZmPnE1ksyQrs%2FerE0x1EdS8mIlSat4E%2B4rmPV21O10jpm7g%3D%3D\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a3b9de499d06d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29549,"size_decoded":6558,"mime_type":"text/css","magic":"ASCII text","md5":"a20505043e76e3eb551ad5d628b3f3ee","sha1":"5202e96e547dff88293fd9099f0538dff071590f","sha256":"15efb67f0082ffebc66f5162eca6e2e1c521f389a963d498e0a5b256cde43d61","sha512":"f960c4529f539636f6b4e6d491783dcdc93ddee484be55380241ba7f5acca6e5175aa53506e47056c5e462900801dfe14c902e6d9e0bc9aad06fdbadee9a52c1","ssdeep":"768:eM0H6tcFBgF3iTH29QaJ6OsEYZETeJarRtZZrw2A5:83gliTH29QaJObWTecrRtrw2A5","tlshash":"bed275a627b12904700b94692a677b65632c8003d60fdebc7ff5205cef891e1a573f9e","first_seen":"2026-07-18T04:13:48.537022Z","last_seen":"2026-09-15T18:59:57.967309Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/images/bg13.webp","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.795Z","timestamp":1789498763795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /images/bg13.webp HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\netag: \"6a41de84-11b92\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1071\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imPfGqH%2FBninZyfCLMbm03awqGMr67oNhX3WmiGQt1F0oz%2Bsgh2kYOKpRjtz%2FSA5%2BBb6ZltZr4TebKwjZRdAw5cToOeKe5mxNYdukrKqhF4qULJ0Yya0Fe%2B2n3TuU7NlLuVLGg%3D%3D\"}]}\r\ncf-ray: a3b9de49cd27d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 72594\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72594,"size_decoded":73349,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"95f3ea1df44c0fbe9c394e251ddf8687","sha1":"c73aa0d3861ec6749a872034d6a561259f44e9e8","sha256":"c8c965d5e4f11e901a0e586b260bb2911c85d7bb2b62aff3f4d397bfe1eeaa02","sha512":"a4c373c96c7a56cbdfe282ad281c4339ebb3d24dc322948da74ea99ca9f9879b601c0ab5d06874e88733c506e351263c2d0149a34b807fd26f39c07bbd4b3471","ssdeep":"1536:PkesWYOmIiunU/B4FAObBtcbOcVQ0+VDTSgZWJPu:pspvoUJ4FA/OVD5klu","tlshash":"a06302ea61cb46af57893d2fcd9740dd9411820d31083d523063bfea6e8c67991bf0c6","first_seen":"2026-07-01T01:34:34.071717Z","last_seen":"2026-09-15T18:59:57.968395Z","times_seen":9,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/lv.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.811Z","timestamp":1789498763811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/lv.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7oVMVRd5jkrUaK5Utn4p9bnYw8tqx1oKXHXYK46%2Fsikx0L9tWnnXrwQmBh4q8OixU5Cbv%2FDDRm%2FxDRgLQaFFSmLkjBtYIL5nJQSBrsB8eUkvj3uATjbvWzuLqQ5LVaW6UT4fw%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\npriority: u=5,i\r\nage: 1071\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a41de84-8a\"\r\ncf-ray: a3b9de49dd37d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":851,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12cebcfb5d166f7cd2b6a3fb48c0924d","sha1":"388674b2cf8c8c65742d9dfbf128aaeef6bb87e6","sha256":"442240b6d0d4290a8a5bf289beae6d52665dc71f7cb529034682c8fdcf313bb1","sha512":"af40c36be143cb5c528c23d6503d027587931611d0b2a00ae2abd1484b2bd73d16d7903a78d229850e83f116c7b7e144d1547b15e422832e646b2a4761ac2b7c","ssdeep":"","tlshash":"b3c02be4807c0f008a1887f19ded31c14069308a309404e8f6d1353221023fbf482d31","first_seen":"2023-06-02T00:03:05Z","last_seen":"2026-09-15T18:59:57.969316Z","times_seen":97,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/sv.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.812Z","timestamp":1789498763812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/sv.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRDuEsy8jtgRacnyjJ3U8iOweoB7GR1oGjAcq%2BkJhIjCJ1NXRAzFiWrd0P%2BCxey4BD3hPnSuFUsthdnIXrzU8BrOEA4%2BIWUmN5nyFzYyFkS9DHOv2ktvKzLkLG%2BO8ipcmJua%2Bw%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\npriority: u=5,i\r\nage: 1071\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a41de84-d8\"\r\ncf-ray: a3b9de49ed38d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216,"size_decoded":875,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f642770ccba1a8f5948ac69923c15ba","sha1":"2ccce0709119188a1cc30358bcf197415c812abd","sha256":"1d7c3fc0594c8fb856d9fd0a13a752dfaf8643c8b073582909c88be24e7e416f","sha512":"a590463aca1346a92e76bca94237dcb8b5b636aa4ffc87d5d109f7eb752b7c6231e9e095c7f901f58d5ff248b9f1924071cc66707924bfc40cddbd3b547a5540","ssdeep":"","tlshash":"f4d0a764718dc10886004642061414c51287d0ca531d0110fecc3925b04e9fbfc702ad","first_seen":"2023-06-02T00:03:05Z","last_seen":"2026-09-16T04:11:53.432611Z","times_seen":165,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/module/reg-form/reg-form.css","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.786Z","timestamp":1789498763786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /module/reg-form/reg-form.css HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-790\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d6jAD0k8jSg7948S3gOnsEzpNha%2Bv0RpfWUB8SYmSx2ZT8h0U4CW0q2iSNEMTk%2FKInQsZhfxUpAlBOHrh0RWqGG%2Bc223uCJREFreoglVHL7Pj2ikAGn5b15Z46RW2KzGBEVk8A%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3b9de49bd1dd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1936,"size_decoded":1506,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"63fa3816b55563b3add8ff7279775a7c","sha1":"7c882c0287f5a3289e433b10c4453e7cf17beb74","sha256":"5e14f9312126b7b1685896b1343565c531be9e5dff18eaabe7d8fce3623f024b","sha512":"e1740b640e7c91bb6fca84573ae102daad7368051f68113b40cf4c1eb84f9a7e0ca989ab2338264a6f9d632a2bdc54c37554b73da53a3080ebddbdea7b39f219","ssdeep":"","tlshash":"79413fa2c5b30d54305341a967f693793b8d45039b8bea74bf9473588f893e1a2607dc","first_seen":"2026-07-18T04:13:48.559954Z","last_seen":"2026-09-15T18:59:57.970347Z","times_seen":7,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/es.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.801Z","timestamp":1789498763801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/es.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-1b6bf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQB8S6uCxoYs44yWtLx27s3uV7FUqa6O06R7PeCPzMEaZzCQRiVDOnpRYfYm15zKe6PVXQGV3VWSS65n1Xl9EJuCP1v8tlHefofeINTMA%2B4ThsuEY6yedym5%2F%2BaFn8lD%2FPaQNQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b9de49dd2dd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112319,"size_decoded":74801,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e00ce59428927284366e58e96c8cbb11","sha1":"b8c9416c9539405dac43f1f84dcce1d6ffc1684b","sha256":"8144a4ab1822dca70e28d9dcf496a12beaf292cbeb009d37208c4ed15f14554f","sha512":"854003116025b2f29e4bab106fede048b7535d0006ea352bf57b6e078898bb5dcf28817b28f15e21dce4444db2b7301ead096b707d8336d7f715aa2ecbde0f96","ssdeep":"1536:tz7F/oiKGLFL/DWApNvWmHUvsHifhbOI1FnX1J3WIZtMfav3wYXiXq4/+SYqyfJY:t3FTxLyApNaUCb3HlAILlwWi5x8J4Lr7","tlshash":"4fb39eb1c28e77f9ec75fcaced489d034c094882a15ac5cea949d3b2177b8a94c0ed75","first_seen":"2026-07-05T04:52:57.843594Z","last_seen":"2026-09-15T18:59:57.970857Z","times_seen":11,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/lt.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.810Z","timestamp":1789498763810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/lt.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AdtSqpzAJ91svK4p3ntZ6WY36H5l6zn%2FJ6rpvdBPJfeTQy27Gm4szXDlj%2FV96avNQHvnTP79ndc2DUmJLZC91Vev3m9mq%2BVnEzw9%2B1ydho3WJ2JR0wl8vSNW22mDop8Yp3xbEQ%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\npriority: u=5,i\r\nage: 1071\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a41de84-b2\"\r\ncf-ray: a3b9de49dd35d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178,"size_decoded":866,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"60ce52ef375f0a7bf84149719ad6a8e2","sha1":"3d701e7b8bfe1efd9007a8923a5840b8980f156e","sha256":"429d40e370103a47cb2fa03e143136308ce0ad387fc05acfff349d40406440a2","sha512":"5a8069085ac543465be7b60127e2496c665a2c131f92ca40c3012e38f5d5525ea8bdb9bf3e78d0660907ecd3a59f7f142ac038d3424c3106f914413525932664","ssdeep":"","tlshash":"80c080d5507c6d404d1043735d9c30cb51c720d7309401dcf0c41528234d3cb7d45d51","first_seen":"2023-06-02T00:03:05Z","last_seen":"2026-09-15T18:59:57.971917Z","times_seen":82,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/layout/css/main-unified.css?v=1782701700","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.780Z","timestamp":1789498763780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/layout/css/main-unified.css?v=1782701700 HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-3736\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JS4s0FHtpaPW%2FSUtmu4rKdH5fz3PJNjaF9PnifBsA3q1qcz%2BTtNqUp1NJAhw2hGquFxWcVv0d87XWYxQwBcWN3gi3h7PQKem2xYyEeuZHYsTuo9UQco%2BfEY2o%2FBgK3gY7F1E%2FA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3b9de49ad15d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14134,"size_decoded":3456,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6f9e5a30c0f957da9c7385b0c69a53b6","sha1":"7a47aa1c512e18a2224144c686039377d9088ec0","sha256":"26b19947ba8009e5d8ba1ca90860e71d53f17380d441171084434c74902d8427","sha512":"c4f5dc27ea8274d13468c44c0580f7c6105887d71aee4351ab3d4a5f8e76c6de6b91001476d3089a9ad5ab6f3dd641b1c8391a973441d75ae2ea4cd02fa3b77e","ssdeep":"192:P4OBwMikJk95PoFUYu/SZJsPcBYF1fb93+e8EV1rvL/dlX7J78rDG1eFWniXAbin:P4O/FDEF35VXu","tlshash":"f352eeb3a7430508b516c21c67ab8b49637d710bb208f9687d9931588fce38dd856ff8","first_seen":"2026-07-18T04:13:48.586354Z","last_seen":"2026-09-15T18:59:57.972523Z","times_seen":7,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/module/geo/geo-flag.js","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.785Z","timestamp":1789498763785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /module/geo/geo-flag.js HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-47b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTWN3Q8QV7BA%2BJpLJAeCyxMXU1WJDtyYUYL%2BW8uA9hVjFlHW6hM7M58MLwzd416cJALkPZV3jMFHvYPYVRVKUbpkD7jwy1fOE0iu3ppQeCfT8FwmMiM1jyR%2FwfdeMXRP3qByTA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9de49bd1cd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1147,"size_decoded":1328,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4356e963f78e4937cd1e0dddcbbe5997","sha1":"bc8d412d4608c04ccb9dcd7780875be304b5e3b7","sha256":"3af01327aa9b196c1313f25b4bd7aaac0511d84867a9b9fef0c84320eec69d52","sha512":"808952959c8445ad7ed1f15deac91987a299eb39d6a058b6df7bf835f10ec67e8660e5ec3750977b2c2f9732cd535b173704a8b1f253bbff7bd5bbe4014f0c62","ssdeep":"","tlshash":"0821af2dbce3247a8917f17824af404972b52023110ddd057d0d85589fa95384af47dc","first_seen":"2026-07-18T04:13:48.526404Z","last_seen":"2026-09-15T18:59:57.973089Z","times_seen":6,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/en.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.797Z","timestamp":1789498763797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/en.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qX66vTx1QtdGWKlB6%2FwQXtlJwIYaAv97NUD9JJPJc%2FmOXl1R00zO0lC3u72Ko%2Fqv1gl6UpmkHBDcrJLhE6zwHBuoaWz%2Bi%2BWvqUwQ1vgk10%2BRzJj7IDr7H7fvlqhqAEe5IMDK8w%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\npriority: u=5,i\r\nage: 1071\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a41de84-20f\"\r\ncf-ray: a3b9de49cd29d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":992,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c39480d514fe1af4c7e5f62a3ac53b67","sha1":"80a3f070bc7a8b0a8edafa1927ee65b2a3a30b42","sha256":"910e4fa63fb7a23d30d59dee2feb08da51a405eb06b38a7e12d18d9b504d13b5","sha512":"353e7893f13756905ec7612d0c2411231450b2d11781131794c45668f281a7c092acb8cdbfaf8e5809cb5bdfe89860ccdc339a54cad35544ce58e28403abb479","ssdeep":"","tlshash":"4af0b45d22695966e21b8364dfbc74b4013f24dd2288204db8453378c51a37f79bbae8","first_seen":"2023-09-12T12:51:11Z","last_seen":"2026-09-16T04:11:53.003075Z","times_seen":2713,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/hu.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.804Z","timestamp":1789498763804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/hu.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2D%2BWsHAjDNCmZman2R9Ja4%2ByZhrMg54mcY9oGfv1nUe9dyynHppOXre28PzrN1dsxuUqaPpJCszDKGWS8aQVrLmoqJEtMcCKsPvy%2FigpWbp9KYqlUAYy1QNEKJI0vklijr89g%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\npriority: u=5,i\r\nage: 1071\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a41de84-167\"\r\ncf-ray: a3b9de49dd2fd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":972,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3621c5eb449691cbe1d3bc8757c831a1","sha1":"e7e3674fe42359cc9a376e543d7548418071aea0","sha256":"2c1380bd6fb1a88cabcae439eaf960d4dffa929a74cfe3d44f7552084fc1150b","sha512":"7c66bd80019b994685400d020e37d38ba3c45ee3cec449b83bf8a2e8d08d346e03d6245e81f9b868eab42325782107cbf837f3c057efb2c83a5151b22b1104c7","ssdeep":"","tlshash":"61e0d8caa9e9c90e9a1947694eed71da416270cd21cc01fd71843528fd4d3ef2411764","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-09-15T18:59:57.974361Z","times_seen":5276,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/br.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.806Z","timestamp":1789498763806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/br.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-13ae\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CfRhF3MTXLseMpcZ7agOlRwZJnP%2Bv4V8xdhBsaRUwXEjUyU2%2BYJlvlJ8gYggxkdFUAos2YwYb7lFv0ywGql2vc4kATibtYr3jfpGU95jr0tharJ5W5dKCG9SWE%2F8S6zs51h%2F1Q%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b9de49dd32d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5038,"size_decoded":2184,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa1e61dad0a31deba6b118583bcbfbbd","sha1":"9c5b1347557dd57f308fbd4495b1935a89aeefd8","sha256":"6379aeeb756c0b62f4d676e74821b6e4a97652f51fc690ede2a77c7dd48c96e5","sha512":"44380a2f94d762471184e808018ce7050c96b3974f2bdc504d312eba16fd92a650e730da2a51e2602bc7ed2f156d3609008d2e98882ab41f85f849746cf1b826","ssdeep":"48:cg7m1DF+vSogV8XhxbCzD9iW2TLzLaLtLbLHsuNTZTWgUXgJQpO+uPz1QRF4:T7m1Dkvl+9B2TLzLaLtLbLvTEiz1R","tlshash":"d0a1ca21e02e153f592973ccf1edafcf970b8a637203195fa1369dda837ae12c14a184","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-09-15T18:59:57.97574Z","times_seen":26,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/sl.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.809Z","timestamp":1789498763809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/sl.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-651\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0K6uBYTKGYNId94BKQmxWhzFxg7%2Fdb34aEi0%2FHUMILr9nZkeQoTcix3AbJ3%2FruVgVwZZfCOhNZb%2BKA7diOCskI6mrDRsU48qkFejtzD3KJl6F0wbMrMXpRX2pbfTYVssXifHw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b9de49dd34d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1617,"size_decoded":1416,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b4bb3b189e8285e10fc2637df225958","sha1":"e303bd704bf87d97b874f4c34e1877aafa7eda33","sha256":"aa4fda18694f1e60c937933eebd752cc3ed0701652f0dfca84677c3267b26db9","sha512":"c49b5bd7f995ed7610e4290785f8e53552991cfee1d04db7b60180f93de9f3c51a67739024c539f78e2809128f46bdc6f0a1d2bcde129bca788c2007d3695ddd","ssdeep":"","tlshash":"6d319bb0719d104f662f8b4746a8aca0c76e24fa711100566e1d33baaea3fd2df43960","first_seen":"2025-06-21T07:33:55.796421Z","last_seen":"2026-09-15T18:59:57.976403Z","times_seen":23,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/zh-TW.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.813Z","timestamp":1789498763813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/zh-TW.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6SWmC8%2BsmZUGezjxXHL%2BkBBv5VGPrVM2IXXOdNBnkWAwkFOguEaDzLHtqb4R1VfPJbZb7t3bOmqF6OHxndlGP67B4HApSs%2Fmxj7Lws5Os3Hbb4pBxeoa2lx9%2FvUc2qMxtPgWtw%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\npriority: u=5,i\r\nage: 1071\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a41de84-1a0\"\r\ncf-ray: a3b9de49ed39d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416,"size_decoded":1005,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3088980d12a3e9e5253e803cf348095","sha1":"54aaf5c117de313a17930d3b0f14c12d1b6aa776","sha256":"ea364b17f2d75dc89cbbf3ed7739639bb26971258462684c2344f7016ed3f353","sha512":"c8747bef4ed3aedd00e39fb3b01881fdc2dc15b89a9ce2249ff65bd3ef1b190c33020504fa34ff2d97d940b37d3a0e35bed50d5d97458044b3582cd7467ca00e","ssdeep":"","tlshash":"b1e0e5ac19081c19cf80d370d68ef8ca129bb18ea25302baf2057427124396f29ca215","first_seen":"2025-07-24T14:35:25.12448Z","last_seen":"2026-09-15T18:59:57.976951Z","times_seen":27,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/ch.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.800Z","timestamp":1789498763800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/ch.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-14466\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QX1kB%2FqVr3t4z7ikM6RqUtuPPIGEa2CZ2iCapDtWbXqV0LgQKOYTEIFuBMZ76L0iZGNCmLGwSmftaX1VmjiDmsnqk9VT48lq36qZt26n%2Ff4vippTs7IX7qf%2B4Jh60H7zwMDaw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b9de49cd2cd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83046,"size_decoded":4006,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc0a75295cf31768787fb267ac590167","sha1":"4120b02953956c141dc9ab6d3062914fbaaf226d","sha256":"a06b0fef95c11010ccbcf40ed08c635db3a40dc91b3970245426961840e2a38f","sha512":"ee1cc9b7bb437c94fddd1c3c69abca703f28edb2bf4413cf2792ebd699340f1cc4a509e6fd989aac4a17caf4bd5e1c4c180a1e3810f48d6935ebfcc67586c415","ssdeep":"768:jZZZZZZZZZZZZZZZZZZZZZZZCDDDDDDDDDDDDDDDDDD7flflRAAAAAt1111117N:EDDDDDDDDDDDDDDDDDD7NNU111111R","tlshash":"cc83822e1c4daf5e37361d6ecb03207e6e8664ecb20985cf3a8f35edc3224519661da5","first_seen":"2026-07-19T04:12:11.624021Z","last_seen":"2026-09-15T18:59:57.977433Z","times_seen":8,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/hr.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.803Z","timestamp":1789498763803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/hr.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-dc0a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SdqrTSIpvAX2xCBaUCUqMV%2Fddg4B4ik0O44brfiSwQ2u8zImb8No9h%2B2VMXf7PIgGR22VnTF51l5%2Bdb8YLRMD8gSeDOeyB7RKLiwAYw68eEQAIbcAyJsL5TwlEUgP9HNq250bg%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b9de49dd2ed8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56330,"size_decoded":36379,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f2d6a01e6484d4a56335187d802f957","sha1":"1bba652beaea5493033e9fcd7035f4196f6499b8","sha256":"e3ade1edd7a8e12d0720f44984473f91007891fe9ae39c85457749f8a0e612d1","sha512":"cc2849c96299b1c1c08d46982bedf102d90487a2824826658165646b61b11a9e4c5c46ba4ee31b3aab45d1a3cbfe5e7810aaf172403c0f2fa85055e2d7287644","ssdeep":"768:dU3BB/dxVkvqkeZM9QpYEYoUuUmi56+CMkMw//mYaylsP+ihMPpG227+:q3jdnGP9AYEW0+CMkD/ay4MPp6+","tlshash":"21436a39688ead2e3376098ecf12117d9dda65dff24486cf688f31edc33a4154a21c91","first_seen":"2026-07-05T04:52:57.902436Z","last_seen":"2026-09-15T18:59:57.97822Z","times_seen":10,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/vendor/css/uikit.min.css?v=1782701700","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.766Z","timestamp":1789498763766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/vendor/css/uikit.min.css?v=1782701700 HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-4235b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3IM3DSE48nd6BpHlW9lnU8hZaslc%2Fcr%2BKiV73AwWDSm%2B%2FNn%2F6PLzYIcb8ATLRCjEhX%2Bl8ikb340UTJqZgmVDb19nPRqvUDTc2oluvVzfXkAdSMAkESKXLbk7c2sASqVo%2BanTQ%3D%3D\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a3b9de499d03d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271195,"size_decoded":30956,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"069dab2087cfe449dfab0443912c3427","sha1":"8de1ba9ba591cccbdcc89e4a3b909ba94493a03f","sha256":"14aad0bfb03b7a363818478e72ed1ae18a1f4e9ce89a4a4ffdc7e9c0b6e753ea","sha512":"ea30982d4bd17d1f189ed8d5a5abe5a4b215d5fbd401c0b64ad87d02434c171d0c8a1ea3c7c405983ac066a007920fcfb5860cfddbc8ce75dd124f336689c4a2","ssdeep":"1536:2OJ9WL6OOSnCEirktQ/22n9s6kxhoCror9ACQgv6:2MSnCEiC2nS6kLog","tlshash":"1d442094a24479fe8d37059b90a8b5fdf7998d01b23a2ef7b6ee82c14e457430135c8e","first_seen":"2025-04-08T10:05:49.34209Z","last_seen":"2026-09-15T18:59:57.978781Z","times_seen":2901,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/css/header-banner-top.css?v=1782701700","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.770Z","timestamp":1789498763770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /css/header-banner-top.css?v=1782701700 HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-4f9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oypya0eO67pFpnftIbmTs0%2FHvsa2OegTn1cBb%2BRQdu6WO2I7jBAQhcMKa%2FYjWE2T1AOvQjSza45iA3eYihKjFGrRZo4p%2F7IktpwFLA%2BzWA6ug926ySs8GLFmYyI%2F0gFQEh2IHw%3D%3D\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a3b9de499d0ad8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1273,"size_decoded":1240,"mime_type":"text/css","magic":"ASCII text","md5":"d26cbf932bca4869426dad7f9faed726","sha1":"4e3dba1d1c006630dc8b71d6316e72001fdc3a52","sha256":"297fd1945b4ef7b56e20108bb4cf64c06a12dd9c0ac56e758711f475e196027e","sha512":"22594b5876ae8c0e3b92e2a7aed65fd37bb8bee875199464b28f3cf22f769b135efa0ea0bc4c503fafe40606110e1260238e4877312d05ffd80e991de8d836ca","ssdeep":"","tlshash":"3c2108338f18a144711855f8ada23fe2621e8007e6586ef8af90812df348555ee607ec","first_seen":"2026-07-05T04:52:57.79447Z","last_seen":"2026-09-15T18:59:57.97932Z","times_seen":9,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/jp.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.805Z","timestamp":1789498763805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/jp.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-901b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHxjR8XC7wZPZGmTP0iRfGlFfx7bHnOb4QhcgZBXgJVZ%2Fy4AzFHvBFjAt13GYr51vmMRbvNtrNq4UMdOgfFEPGD4Y%2FN7FheAJ2OmlYFtPQ%2BdGOXI7f71yJS6MHcc9XoZgZ7m7A%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b9de49dd31d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36891,"size_decoded":22729,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9c5d0ee149b9697233a5b43dc7d5979","sha1":"b1416f3100db98b6ab12aaeb4046f570be1ceb85","sha256":"479c75516e07475b26c2969163ab7918284e95601a1c453b0fbfaf867a51d02e","sha512":"6cb6cce62de2255385bf8260ba19d5abf45808d6a34032ea66923e05d263a2a231d76a3eebea387013481a9a48c9d7e00893e47fb20700f643051eee8634f89b","ssdeep":"768:G8PP5jE9ZLrbellksEdmPN5zWt+2S9raY6EtR:0FrbeljNE+z9Gho","tlshash":"0af218295c0c6f0e33321c6ecb17157e3e9aa9ed734991cf60cf75dec26a450aa20da1","first_seen":"2026-07-05T04:52:57.884902Z","last_seen":"2026-09-15T18:59:57.979997Z","times_seen":8,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/images/cropped-Favicon-32x32.png","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:25.098Z","timestamp":1789498765098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /images/cropped-Favicon-32x32.png HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:25 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\netag: \"6a41de84-261\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1068\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c31B6jZLamtlCZgknEN7LS38kCLq9%2BdyZ58pIueS4nHANgKMV5ruHbmyILrZGPu28MQaO5NpZWe%2BRKtLy2BJksS6SXNRVmk0HiqGjbUeq4R5ZtGKde2dr%2BA5wfxTmSlpPg2mIQ%3D%3D\"}]}\r\ncf-ray: a3b9de51effbd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 609\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609,"size_decoded":1358,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f17b2d52496a7b6283c91478bcb1d51f","sha1":"c497b97a94a45f2de7310d4722a10c6c54abfacc","sha256":"06a0640bb63a5e1ffb8e6204b8bc4b267997a6a5c0834d2e54cdc5cfe5c2d3c2","sha512":"22a93460f5dae42f5005a67ce62f2f46ab640c060b14a07819a84cc3bba6bb8a12a7cffbbe751a4f24fe32e27144739c7f4bd310d5513776d462f3d0637a08eb","ssdeep":"","tlshash":"3df062dd15d0280942e6e6f2db4f0467f887ffa102ca105cc1a07ce9f1868a174fab05","first_seen":"2025-03-03T22:55:46.45545Z","last_seen":"2026-09-15T18:59:57.980467Z","times_seen":3704,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/js/lazy-analytics.js","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.778Z","timestamp":1789498763778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/js/lazy-analytics.js HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-9ac\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qM9ed97jUnJqhpsygU8wxRrKiFLFDTT21ha0DdVeARBIB6bqrnDB6f%2BnLGgifnLFeznVX4ESrNtSaM8v87C0tx36xvahSLHHbjk7%2Bbc5xU0l3hU2gvHuUhi%2FRI%2FFT5vd7zB1jw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9de49ad12d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2476,"size_decoded":1773,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"d27f3444071fb33d54a108a52e956af9","sha1":"f301401e1203543f7f85f2685389f52f2ea2beb3","sha256":"a4bccfde5a153a7ec568ab723a792a97d9bf2dff76429a7a0cc2cf3509025f9c","sha512":"f919fb7cccc4a9f34929d03da8ccc9a302a17d822b79da3352e18fe82f7742bbb08f79a4448893a0a136e2551d63b87c3ad7cf9587b00775fa3293c61ab2e0af","ssdeep":"","tlshash":"3b51bc096cbb643301b7e13dabafb109f5311607190598603d4d8309af68baf95aebcc","first_seen":"2026-07-05T04:52:57.876973Z","last_seen":"2026-09-15T18:59:57.980986Z","times_seen":10,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/global.css","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.781Z","timestamp":1789498763781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /global.css HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-1e2c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEuRd1Ts1t62X88cGMF192BJAtfTdas3Pud0kBjHjGawD2EcWXf%2BM76UH4wfqHn9%2BFPjUN26g5TUjinyRX%2FV8eUNEy3H2zFkDJm9uQPZQ48fN7aYXLOw86qIG5fyejHQ19iDQA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3b9de49bd1bd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7724,"size_decoded":2354,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a88608ef6b9e05ca571a550a530865e3","sha1":"9b727dc38374927eff9b0e68a75777327c0d7541","sha256":"506bca4be8d8a74f887eda650782272818bbd5f59f2315f7937f4b6f086a7ba7","sha512":"a7c33d11dc5b7e8c38ed69a98e4876375eb4c937018e33abfa6ade570d4a8bb91ff9d8e573eae50444f58720bfca4264a87a591784c0e11b4b6c43f4e9ba81ff","ssdeep":"96:onj/yGIyNf4WJ42XMPPDIyWqW8SO+qo0M6Cnzqdtdt9s5WVFQd9OnCARgF:onLgShXGPDIynPR5XM6CnzOr9uWVs","tlshash":"16f1ef53fdd20585b052835926ab3bfcfe7d88224b09ae397b5933745f8b3e38960548","first_seen":"2026-07-05T04:52:57.827843Z","last_seen":"2026-09-15T18:59:57.981453Z","times_seen":10,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/images/background-4.webp","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.792Z","timestamp":1789498763792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /images/background-4.webp HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\netag: \"6a41de84-16746\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1071\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OznU3VylxSMm9uJZ2KuGE9pPH%2FadTI9d%2Ff6RKyJfAjGAeRqKfYwJov0MNX4o3AsP6oH24QWql8FbHxL%2BPY4%2FtPXgsg2QgyLPxj9WtRq701AukqSQYCNGQcW4Nzsw8VfZV8Fz2g%3D%3D\"}]}\r\ncf-ray: a3b9de49cd21d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 91974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91974,"size_decoded":92727,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x830, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2bec0269326b7161c9ac1631856ab2cb","sha1":"b736c25cac58c51ea7306fa896bb52379a9269e1","sha256":"e7c58f49c178ce2a879e0d9a0bf8fa0fa9247a779c7bdb27520274f996abc767","sha512":"3c1cd777a3219f8224d93a9245c3e1926452c721cb9c8c9bbbb691966dfe9fb13e0c776b00d26961373affaa91fd6a8265d0080a7bccdbed628b9ceb0afccdb3","ssdeep":"1536:db7B6JbB+lYUO58qyYa9n1wiGNYaT1e3u4QI4frYcDt72nLstqc3s7mhVkLnwnEQ:R7BAMzO5gTw15Tc3VQlEcF2Ls3HVkEnz","tlshash":"0893021fab9e75fbe1c3aae238c1e484667b865370d05d340943e461b4e639df5438b1","first_seen":"2026-07-05T04:52:57.810207Z","last_seen":"2026-09-15T18:59:57.981999Z","times_seen":8,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/da.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.799Z","timestamp":1789498763799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/da.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kd4FLjROgfwyLcDUQLA2h0uctzr4NdwFz1WuNQDIqpFuruLu5zvN5Z0wXHtEp1qgAhnv8Y3zgVNtlq38U5Hk5FdkVmeItm48jN1llZzzvmfETUxRsHp56lt8Zr%2BV31VBL9EFng%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\npriority: u=5,i\r\nage: 1071\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a41de84-16a\"\r\ncf-ray: a3b9de49cd2bd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362,"size_decoded":991,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4d7abcf4c21c729ea9aab45faa1912a","sha1":"6ecbf40cb392204b8c7af284352108b500111969","sha256":"33815e73a3d07b3ae77cec1fdc77a285646e4e730136632f0ff5de6f8697c98c","sha512":"6d928963ac9562306e34f006030ddb4430cf81f3e37d8a5d805f90d5cc89659457e9f98257a2ec971205cf044387b7c3e87847c85bf7760ecfa2b667bdab3230","ssdeep":"","tlshash":"f6e0c09260ae8a0d4e1543205a3c70e2526770cf218e04fcf0c13e28fd667ab3800f5c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-09-15T18:59:57.982531Z","times_seen":5500,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/sk.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.807Z","timestamp":1789498763807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/sk.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-665\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnzJK26j8gRhq1sMKfKm24W%2BxwsvvDBBlVgYBQfv17R7qcfYemEOdtyK%2F8%2BSwmhM%2BtQx3ea33bEC1tZlBLeDL%2FC7tJS2lCDWaexCcAQhdjcPPWFVK%2FyHnvGk0tj9BG3NSzYTVw%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b9de49dd33d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1637,"size_decoded":1539,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed3cf547a2f8579e45330fde3095537","sha1":"dfc6023844bb5a110c3d9219c82dd326940ae055","sha256":"c1b338efd99956c2ae0c62fcf559b2d956fa11f71751985d62c9942b061dad6a","sha512":"4ed0e6912bfa55a7bee5b4f6318c3878bff3bf23d5a220225b5e19d207d7f55bd816f06dfb8daf8a5eb4c2e266d0fcce8f40d0f797c81d97a2517e5eba2a3be4","ssdeep":"","tlshash":"193176c55178aa4849c7a76fde7cb8959015a0fd21f940fd7a4a470c956caceaf00cb4","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-09-15T18:59:57.983197Z","times_seen":5280,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T18:59:18.321Z","timestamp":1789498758321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8; path=/\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vDtzyaoS8GBlElzMOFqWND%2BazO5DJC7dqYjBNH935rejrvv04Ypls1NhJxJvnh6sjvgi%2Br1SBEOaNoFg%2FPNoMWQMAVGMUvyYC3ui3b95%2FLHQoAXhKZ9QcDbgKdiEstDb7DFJ%2BA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3b9de27d9ccd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"eop0mipubht1j1kjir1tpb00s8","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=eop0mipubht1j1kjir1tpb00s8; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-16T05:51:42.1472Z","times_seen":18489033,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/script-top.js?v=1782701700","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.764Z","timestamp":1789498763764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /script-top.js?v=1782701700 HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-1748\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90awilZX6oIjcBakdbObXyHcFDevRyDYeEnDyPBIVNWFRGTV94JzRGZRWYvFvYEMbZK7hr4whu6QOeyLWraY7HjBCh0gRuhC4MTPxqCGq4wA3%2F4duvvknAAVWzbpiqFXnGUdxA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3b9de499d02d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5960,"size_decoded":2515,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ff9de0a537f4370a36e90bcd10c38883","sha1":"dfc082f41110018c4f519b70cc753e4e457b5ec0","sha256":"51d2ac650d126800a65ca5671d2551e51fdcdb6e2e7759b65b7c59171d4dd1e9","sha512":"6a35bea85cd99232674c4efc94cb9e0030cb7420ced82f7b5a626279530f653db447374e3a8d4fe1455bafe14335c34f309b9b307ebe7ea929c9be7c69c3c48e","ssdeep":"96:ikRO4HzxYresL7YI6wNvBo1v8HCGiGxHLG+84CSkfkVuvaatTaP1Ro/0KbF3wrIY:BzClL7H6eH9jnESk8VuCatTe0bF31A62","tlshash":"02c1fd0925b370728653209d5edb528cb631a0173249eb4a7e1ccb805fe657b86e3f8a","first_seen":"2026-07-05T04:52:57.857195Z","last_seen":"2026-09-15T18:59:57.984725Z","times_seen":9,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/css/custom-en5.css?v=1782701700","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.771Z","timestamp":1789498763771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /css/custom-en5.css?v=1782701700 HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-c83\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A53q8s62aDgkNKNAPQem2TcM%2Fh%2BphBl6L%2F7C7KjAVufsD1EqsTuFhPnG275ge9zUD38nn52SQfC4eFcYEMWwPvJ17P%2BmfZQfpaJB4cOv6wr8Fc93kAemHgoQwmuAXtAdKUCCZA%3D%3D\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a3b9de499d0cd8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3203,"size_decoded":1756,"mime_type":"text/css","magic":"ASCII text","md5":"41d1afac5fa631d57f6ea119ebd68b27","sha1":"6dad5c66f435f9db4cab35dac283684c1e3084af","sha256":"99cf145b0c121f46b468814fd3e08c59adb07b83d554fb3301f92c8236d8c4c7","sha512":"3ae6d522d86fe8eb6191217abfb5466b1588662fe420bf286451bfe728f8de351cd0cf73bc0ccc2ae36133bda26ca10b360c3f83ac075ac0243720f941f3ea1e","ssdeep":"","tlshash":"f661fe8226633404b40b54bc37daa629213dc043922ece5c7a6d72ac9f5d9f16b73bcd","first_seen":"2026-07-05T04:52:57.909734Z","last_seen":"2026-09-15T18:59:57.985281Z","times_seen":8,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/vendor/css/flag-icon.min.css?v=1782701700","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.772Z","timestamp":1789498763772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/vendor/css/flag-icon.min.css?v=1782701700 HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-7e34\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SR8SLAl2QR0VQWV539xjBIRNlbCC145%2FA97450rc0G3%2Few5yp1lLDCUBYleRa7erOf7GElGj3uB5%2B4Zy6yCviX13J6Qv7GbpT4YgJaXNNj3QDi8bBBqdi6%2BQJl7VJyPgd65iTQ%3D%3D\"}]}\r\npriority: u=0,i=?0\r\ncf-ray: a3b9de49ad0ed8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32308,"size_decoded":4005,"mime_type":"text/css","magic":"ASCII text, with very long lines (32308), with no line terminators","md5":"c2d430726aa37ee31208421f7f842b9a","sha1":"4fea60dd95385b9eeca5803a59ba0e503fc15024","sha256":"4b16ac67cea474949eeae632d6762640fca93e106a18a04f5a3c1f8b996eb7be","sha512":"fe9e3b9dff151aee1c8aef29b58832c67d69b292c902ddf6257a09043f2d1d3ccbbe95157dd00244a67b9042756e1badda8157d56965ef87c1a30549221d8a37","ssdeep":"192:s1m67y/Ffi/UWOsWwK0Un6+PTl10N9bgU8Qm6Qe4jSLW5b1Di:smJi/UWOsWwK0U6+PgN9EU8sQe4EWZZi","tlshash":"89e2ea12da83e21f36074a737a36252da70f2495fb855f3b24af56f161b82483436fb1","first_seen":"2025-08-05T12:36:31.298367Z","last_seen":"2026-09-15T18:59:57.985913Z","times_seen":13,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/vendor/js/png.js?v=1782701700","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.776Z","timestamp":1789498763776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/vendor/js/png.js?v=1782701700 HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJa6qazWLLpRfNemOaeg2iUopoRmG7OhRLioni1%2BuaulyCnAZbeg%2B8Jilwu1PhryF%2FHDw%2FGslDCMOHTzbbFIArkCXdB8RNibYoiT4CdYFueZNlilIYkA6f2F4mcnHW4tHIhbtQ%3D%3D\"}]}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\npriority: u=3,i=?0\r\nage: 1071\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a41de84-166\"\r\ncf-ray: a3b9de49ad10d8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":894,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"54ab5c4cfcfe16c2e795964de121a0d8","sha1":"19556801cc6b68f0e11081a07c6781924bc0bc65","sha256":"30625e824b8626a4aeac6ebcd2ea16de8353a851054e7d522edd590e7a531835","sha512":"4e6700c168994ca42148b7b76c05a612a025db7baab9b6700e02232a839ddf97f5c164b4834f83280e90aa7f257e891e30296db0f57f7f45863af34529909453","ssdeep":"","tlshash":"24e04f610085801f5ed00cb931ba1ba4c792620e8060c2ad38ea8e69fea0ce0303aca0","first_seen":"2023-03-10T00:04:39Z","last_seen":"2026-09-15T18:59:57.986603Z","times_seen":918,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rovencrest-ai.com/shared/images/flags/ar.svg","fqdn":"rovencrest-ai.com","domain":"rovencrest-ai.com","tld":"com"},"ip":{"addr":"104.21.94.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rovencrest-ai.com/","date":"2026-09-15T18:59:23.798Z","timestamp":1789498763798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rovencrest-ai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:59:39 GMT","end":"Thu, 22 Oct 2026 12:57:14 GMT"},"fingerprint":{"sha1":"C8:B9:46:69:05:0B:26:E6:8D:29:ED:58:57:C6:98:78:A8:6F:D5:78","sha256":"20:98:02:90:8A:05:E1:CC:D2:78:30:6C:B6:2D:12:B0:15:AC:59:26:60:75:4F:74:55:A4:6D:E9:A6:61:5A:1F"}}},"request":{"raw":"GET /shared/images/flags/ar.svg HTTP/1.1\r\nHost: rovencrest-ai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rovencrest-ai.com/\r\nCookie: PHPSESSID=eop0mipubht1j1kjir1tpb00s8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:59:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 29 Jun 2026 02:55:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a41de84-50bf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xo3sWZ7ZNEu0jszIy6s4snKjWYCodxUuwaTGDMBni8tY2F4JNuheWbC3ZF5gIUzj830r4dH184ptDMIjx9gEXlv5tH5Qtkzkg6N%2F%2Fx4t4HVp21oUbbDOLhOGXRTkNhoQ7MljHQ%3D%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3b9de49cd2ad8d5-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20671,"size_decoded":9188,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"943cf6263106fc466d3288777a0625f2","sha1":"47dd4e94013129b22457fc5e9b5517c9c595c0c0","sha256":"e07786f2d467b66cae6e9bc096ebd887fa35daa4bc5a8dced89f0f6d7a2efaf3","sha512":"44a153af3abfb235a16844680ebcb00e9eb983c41e67f74e1d6123b5515cefef0673e09fa2e7e186b931f6b892b54464ee9180f11e449c5c6b6a7b209a5e8913","ssdeep":"384:pvVc3AEs8OEB3KeGVNeHu8DM5xsbiB2UmRQvvKJwPHXcz/CIWgO9v1Xg:pvVcQEtOEBIgtDS34iH711Xg","tlshash":"519297eb2770e1ec99c74b9dff3298996b4d90ff7ab185d0867eae6454835c4d206c00","first_seen":"2023-05-12T00:28:41Z","last_seen":"2026-09-15T18:59:57.987156Z","times_seen":76,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"rovencrest-ai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"rovencrest-ai.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}