{"report_id":"b7c0e24c-408f-4d0b-8497-e46919aef86b","version":0,"status":"done","tags":[],"date":"2026-10-16T14:34:26Z","url":{"schema":"http","addr":"theroomemes.com/","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"172.67.149.100","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"theroomemes.com/","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"title":"Roo ($ROO) | Nobody knows what he is.","dom":{"size":456645,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5479)","md5":"0d1f1c12afb8cd8fe2bf08526892da1d","sha1":"e7757243a472c37cf260e3ce724e4dd9a44b2d17","sha256":"727254124099b1590273283a218cc3a69dacb4866e7c783603ef441aafa64971","sha512":"3953fbfa55b620b333e39082f1562b7ec3a82e455d7c0a1ff9e4cf289f725c375ed00d39408a25938118fd441699d0e644836d1043601f3506afecd7f1e816b3","ssdeep":"12288:7meyCOV3VM9UaYDmpx6PG5q3U07VE81QVCbbRfLQtipRQ6Wew2VBqOxWOSf0g7dK:E2qvd","tlshash":"ffa4641441f5543b5e9ba8939d10c6292f0fe7228b17674036fc0af83fe5e58ac6662f","dom_hash":"domhashbfb9d028314fd2583e08baff86198791","first_seen":"2026-10-16T14:34:38.874995Z","last_seen":"2026-10-16T14:34:38.874995Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"theroomemes.com/","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"172.67.149.100","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-20T14:34:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"zen-agent-oil-comic.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"zen-agent-oil-comic.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-16","alert":"Phishing Block","trigger":"zen-agent-oil-comic.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"theroomemes.com","ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":1307872,"sent_data":6950,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed1.bnbchain.org","ip":{"addr":"52.16.207.201","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":2973508,"first_seen":"2023-08-09T23:52:32Z","last_seen":"2026-10-13T09:57:50.864815Z","alert_count":0,"request_count":2,"received_data":1287,"sent_data":1079,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zen-agent-oil-comic.xyz","ip":{"addr":"172.67.185.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-08","domain_rank":0,"first_seen":"2026-10-16T05:15:58.812251Z","last_seen":"2026-10-16T05:15:58.812251Z","alert_count":6,"request_count":2,"received_data":1353,"sent_data":1118,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"theroomemes.com/","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1153d8912e690adde16d649d6821a7f2","sha1":"f67bf2ebbe4b54122a9cf9c7387daeaaf22c1cca","sha256":"789ddd2272194e8cfef78554b3a9b6a30a30acd412809bbc6fb9fb6c28bf5280","sha512":"d3a45fbd62496e5d823562abc6629fc304cd93cfad39ca8f7641029f5c1ad0c6d9fef985a75968d3ef9e79979982766a7f8dd1ea69230f59b5cd9f8ed057d302","ssdeep":"24576:JECs2wyMhnoAFITh4+FTPuEae+JAjWPaoga64Kwu4RBWzxUljHGDzkBr34tTfqju:9ThQEnNaVfaDUquR/L9tGD","tlshash":"63c5f1d94c3242299b9805b87c5b1bc43ea41bdcd4ccab2b9435e0b67bd62ef50c7867","size":2549626,"data":"","first_seen":"2026-10-16T14:34:38.917956Z","last_seen":"2026-10-16T14:51:52.157521Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"524eea831bbc7bba87d38991d98c2d1b","sha1":"eae9606fc45e110d5eb28e70290937355e0777ba","sha256":"0b3ac9398479fd3c3e64415e47f3f5c8231f276eb9d08c21d30eec65364c13b2","sha512":"6d6247a1bc7ba98e080264e1fbd25c300f25859c1cb40888b2f96449124983097529a782d6dff470e97eea44be38800e3bff4651e8a5de03fd6cc4d6f40c6caf","ssdeep":"24576:nH/jraJspxO5rNWUmcV+l5mwMfEaIPnZ88gpZy1UK4fjMk90Hrmv/BB++67JYkYs:nH/XnqVn9ZSzSIK/++fkSWoY","tlshash":"d9950142b39b256d81df6624cc77fc0da572b9e1064d10e99ff3a74e0f197c1a29aa30","size":1995733,"data":"","first_seen":"2026-10-16T14:34:38.921601Z","last_seen":"2026-10-16T14:51:52.168117Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50923a64cde40de8acd39c8baa875e7e","sha1":"58e5aa35342049c32f13fdcc7e60ae1af1c1f7c2","sha256":"552bbb056c8a3a4801fc7d88fdd3f5eb56a4bf7929715aabd0a74ae8b45f87ee","sha512":"6dc73de484c1c32358a2ffddc655ceb245d9b1084d2d208a66c157ecbd0565271b183f416c51d413fc52de040dfab39015c81964ef75055d5a3c46b99d4893ea","ssdeep":"","tlshash":"955164aab85f11315e97356f2f6f67a0a1b380070046c8703dcca4c84fe5668ad9ebd9","size":3105,"data":"","first_seen":"2026-10-16T14:34:38.923405Z","last_seen":"2026-10-16T14:34:38.923405Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/fb680dbd62.js","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2d7e13f7b27c51ac3c0cda4f931c1bf","sha1":"f4feddfab050954fce3f2a22b57714ba67019065","sha256":"19e036f82ec5b9064fbb49cd6ff91893c793cff089dd7be5bc8d9ddcd529444c","sha512":"7516b817aa99b8188cb937f0c194e2a7b1e485768ab96c5bcc17bb6a576de5ed8b9ef3b4b40c01850508fcd915ea17ef592e3ca01a241f784d992bbabe009f02","ssdeep":"96:Qe/aRCczsJB1spv10h8nqCxpWUJ8q2LemkhAVAmA+gfB+a510bTjN:Ls5zc+v10h8qCxwUD2imkhAVC+gZ+JTJ","tlshash":"dbb14f983ed4611c53e353aa1b1e20d1f6765a566ac40c8ff301ecc17a98e27cb92a71","size":5516,"data":"","first_seen":"2026-10-16T14:34:38.882095Z","last_seen":"2026-10-16T14:34:38.882095Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"994d93181ca3a9235e9b116b1fd9a627","sha1":"8341dd048155699596e08ab0f37a08c707bc5174","sha256":"23642ec03172b683b1de90128f559c59d52a1d44264bf532b1a52be848322db9","sha512":"c6464a5c3346e86f4182f5597147e5012015cdff9cbbbd85461298a8dbb3cb7fc63a88dd1fb905c9090ab22fe63e41103e7e0454946b912d79e1dbd512601e67","ssdeep":"192:P6AO2ITzfF+9ilP3TcCFlJ6OJswxilOjiSC:8Fy6P3TcCvJ6OCwxilOWSC","tlshash":"bc0249133096b14f12c5037e3a691be6d4a6d91ada8ac447f308eee874ecc937a0c5f5","size":8614,"data":"","first_seen":"2026-10-16T14:34:38.925117Z","last_seen":"2026-10-16T14:34:38.925117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"theroomemes.com/local-news.jpg","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.391Z","timestamp":1792161232391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /local-news.jpg HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDBTmBOdoqcTusCApdVYCdSVCzFvxtX4FZvHOeGdfub64VHbQFL9%2Bqo%2BanXTVEVx2O2Ao0EtHTrtABzy9lZIBskSrXpFzWaYgZ%2BASoQ2TSwF2yCyrY7acq6xbnUbRDbRc%2FI%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6ac17bd0-2b0a1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b7c7f66ce8712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176289,"size_decoded":176551,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 858x1280, components 3","md5":"112275f862886a6a871cfeec30221e48","sha1":"67fd419ce62c78df5e0f54140d493ac9c7ecfb7b","sha256":"85bb530eb30b4fe7e2f4ba76181e9e3531a2e32c303c6e43630cd933c3b7ae6c","sha512":"8aa6a61d9ebac50c51c7c5820a30edbe5dbd80e4fcdfd3968f7b828715955a7c4e81ae610a8f64baec58e97d2c1b2c66aaa7472e1af5ccc898b9e94210a2dad4","ssdeep":"3072:seBqtCUOIh6jFz+UezL5RBPHzN63tTZZnrR6IsKGzFLzdVcTbR1B8I9CJC6TP908:TKCUO3zrM5/zI9TZZnrR1s1pdVcTbTBE","tlshash":"0b04221901e0d5c1da3a54fb7468b19ecf46e44a48d4f2ab78e14eee1c8c4f2da189bd","first_seen":"2026-10-16T14:34:38.877184Z","last_seen":"2026-10-16T14:34:38.877184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/public-pool.jpg","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.393Z","timestamp":1792161232393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /public-pool.jpg HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YQQvXkgfjWxr0zPrVhCKrWzmbCYI2qzX0P2cDPi1ETqHQ9YYzJVwa8mHU3RU8cYRp6bTytLyADxG%2FhInRMm%2BGYqDE0j1VZcvji%2BtV7L%2FBNkwRK%2Bos%2FV14%2BZthDmExy5eQ7A%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6ac17bd0-28e8d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b7c7f66ce9712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167565,"size_decoded":168038,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 858x1280, components 3","md5":"e1f311e5c8b5acde9ab85d7e082b10a7","sha1":"41876b850da1cebdeb0c4d5d945ab1944a8f5125","sha256":"39bba5a20e420861dd2f83576e5a67e28799be7ae529ae9742ae194c69329568","sha512":"80721fc740d76e643e4792e0181b0a1c14322ff64fd6373b9b6859cbe6f4eca978da6fd895bf49f514b66014894a1bbcb8f9dfe1d7330538255bbc406b293f3f","ssdeep":"3072:JWbdokHrDP5CnrIiIlzNhJD1HnP6tdvRrxGXTqaeT+xd5VWdIfTDo:IXUghtPgdvR5zGBWdIfTDo","tlshash":"54f3220bfb8358bef4bdd316c14fbaa8f1f928056475c2eb525ad670b24144e2e68582","first_seen":"2026-10-16T14:34:38.878558Z","last_seen":"2026-10-16T14:34:38.878558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/index_1.html","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.426Z","timestamp":1792161232426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OM3Ue7yQtLycwwmFxU%2BMQG9YdSWCliWQsEqBk9UiswMCmDw5DnRP5%2FSCnKCeSeIpsvyazLIEBjnd41JOLjlDTbywdguTlDGnoKYd3OxCPigwWqNR%2F%2FP6YKsjwnx0yZomTV0%3D\"}]}\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a4b7c7f6acf3712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":765,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"1b89189e4dfeef4668d8e26260d69b15","sha1":"3a6f954572d65788041fdb2aface23a071b2915b","sha256":"e11f9db354e4478cfccefecf9655738aebb33c82c58bc3cbcaca2721985c9523","sha512":"2fd60196c45b0afc1cdae1a7da805d958e526134959f0ceb087622b600b99fedde755e69f9d25c89b771601c66ec0352ea5aab302bb8c0818716b45b820aac3c","ssdeep":"","tlshash":"13c02b22dc04484f3d005fd1cb8bf0c5c002dd3cec315c00b856b544e9ac231c012549","first_seen":"2024-12-19T00:00:05.397279Z","last_seen":"2026-10-16T14:34:38.879945Z","times_seen":113,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/m=el_main_css.css","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.252Z","timestamp":1792161232252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /m=el_main_css.css HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ejbfsuey6Yno3BaHlv0EP2354nV0oSIEGWEztjXhvl8yNw1j%2FtkkKubDhO4CdBOt7GN8LZq9c3VWOoteZSeJoAjqwCaCDIkvn7Hrc2UpL47aBzaOMMlxAdIxtqmBvwLgSG0%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a4b7c7f58cb2712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":725,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"de9ccc1b1f777cea663c98b8829d4bde","sha1":"c46f97d911cb932d64fdb3c86bfe373642375a4f","sha256":"3248b01d461ed11b7d34871bee9879ba2536c0ae5c47f16638e9aaae0ec5a481","sha512":"7c12a3a7bfc0aa766bd789b1c95ca06172ff279f46cf94726879956506f533624f155ac402b9e9d687b43b90803e2a9f158627e0926a237971b0c6157e7c6803","ssdeep":"","tlshash":"69c02b2d35137c8cc963327422c37180c0c6833774ba51114440800331cf29dcac33eb","first_seen":"2026-09-28T10:11:29.522654Z","last_seen":"2026-10-17T14:08:07.790459Z","times_seen":17,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/fb680dbd62.js","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.255Z","timestamp":1792161232255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /fb680dbd62.js HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 06 Oct 2026 13:06:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWEa4uaKMhnNCuDdGLvC2tp5wiWD60ReQO1nD46yIWIzkLji%2BrDlXWeciH2fiz0C1s0IVXul%2FEMP%2FeGukZZMJJSZdbcDdDVVGp%2BPxlcE%2BaRqI8RwjnugyS89z8b3L0jZs4s%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"6ac4f25c-158c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b7c7f59cb4712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5516,"size_decoded":3189,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5516), with no line terminators","md5":"e2d7e13f7b27c51ac3c0cda4f931c1bf","sha1":"f4feddfab050954fce3f2a22b57714ba67019065","sha256":"19e036f82ec5b9064fbb49cd6ff91893c793cff089dd7be5bc8d9ddcd529444c","sha512":"7516b817aa99b8188cb937f0c194e2a7b1e485768ab96c5bcc17bb6a576de5ed8b9ef3b4b40c01850508fcd915ea17ef592e3ca01a241f784d992bbabe009f02","ssdeep":"96:Qe/aRCczsJB1spv10h8nqCxpWUJ8q2LemkhAVAmA+gfB+a510bTjN:Ls5zc+v10h8qCxwUD2imkhAVC+gZ+JTJ","tlshash":"dbb14f983ed4611c53e353aa1b1e20d1f6765a566ac40c8ff301ecc17a98e27cb92a71","first_seen":"2026-10-16T14:34:38.882095Z","last_seen":"2026-10-16T14:34:38.882095Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/23834141bba9777213bc1396944327c4852df05a.svg","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.361Z","timestamp":1792161232361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /23834141bba9777213bc1396944327c4852df05a.svg HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9gNBalRFTjkbgA2jh46yF6Wh%2FnQKtCy%2BOjeC1ll4WTyotrclnQZSxNBSTJxBCcdM4UGM39ovmM6GPRhRWY5g0RZhK697t72vRtX0ONg32Zx%2FP063lsVvAdhIzR5ps8yHTkc%3D\"}]}\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac17bd0-ec\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a4b7c7f63cda712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236,"size_decoded":854,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25df0d2f747404994f044bf783f3a4eb","sha1":"23834141bba9777213bc1396944327c4852df05a","sha256":"716fe0a8b075f5b2846a4984cf36e20ebb3f2d18dd243c2c9ccf64386dbae7ea","sha512":"ba68b01aac5813932f878d29c07221318cfe56ee0508044b1b2949c74ea6602a50f012befd4c104853f6bf082ef6db781d69d20569fe24aaca3c185ddf61ebd1","ssdeep":"","tlshash":"e4d0a775c1fb581ee20d0323f6ecc91c641ad104136d05c554f967a2d5770a06c122fe","first_seen":"2026-10-16T14:34:38.883329Z","last_seen":"2026-10-16T14:34:38.883329Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed1.bnbchain.org/","fqdn":"bsc-dataseed1.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.16.207.201","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.722Z","timestamp":1792161232722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 10 Sep 2026 00:00:00 GMT","end":"Fri, 26 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:85:67:66:4A:8D:DF:FE:36:B0:5B:3A:03:EB:87:D2:2B:24:8A:BE","sha256":"9A:E8:86:0C:00:4D:16:23:9D:C5:55:32:6C:46:50:5D:1F:CD:28:89:E7:25:A3:8E:88:2A:63:D3:FC:3B:11:67"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed1.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://theroomemes.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://theroomemes.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: b6549d135a8376f549183367e7fcf92e\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":690,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"853923992bca79b2fa051faf2944ee65","sha1":"c37c9dbd89945ad8f8d34d8a8add5a90cd3d8587","sha256":"4389167e8c72e6df78169ad8a209e9deb2e234226e187b10907f655c9a92574f","sha512":"3f167d9031ae0d25a4e915ad838b91272f25b4b99825258d1a245426aaf026e0a76d99dae70fe2d145f00adea9a9a54f905ffb30a0175e977771d7a5b9494604","ssdeep":"","tlshash":"2ed09291031b8ba0fabc0d486084ba0123327a8e89c02e86488c88c52195282473a2b0","first_seen":"2026-10-16T14:34:38.885031Z","last_seen":"2026-10-17T11:34:32.630781Z","times_seen":5,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/front-porch.jpg","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.261Z","timestamp":1792161232261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /front-porch.jpg HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8iCDGw21%2BM3a1zZaSpgc9KnLcp%2BQuz8QJRal0bwkrmdSnMm3zAh5c5Cza3lh5DqEfcoc0APvyMjnk%2FHAjMhrVpP1QL1fDeuKGTUEoIWf0EavgFxZg%2BxsYtD6SHreRZYiHQ%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6ac17bd0-17e0c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b7c7f59cba712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97804,"size_decoded":98319,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x543, components 3","md5":"3cf44ed575a525de752cefbdc7f71317","sha1":"423769cad55e55bd90a0bd68b34ccb87bd8764a2","sha256":"4cbdd6e0dc78c0d7891c63b2ce9a3aca18d897e829673e5577a702db487b301b","sha512":"05be7789d1c7b96b3490992366e29776c8fb14d31621f34a604ecbdf550e45ce765d5726dcab75ae13f665bc7647ad944c7343387f4ecce061369ef5df52c28b","ssdeep":"1536:1EqRrnfiCE71nOT2cn+OT6SnKUQTEO2FNUIoqvFizPx4xUCH7tlwJmsZMRXQMYPN:DRrfiCEJOTeQKbmNUIfiNCbt8mwOXfKN","tlshash":"82a31265d64d7c614e0b61da01b78efd893778648af48d69bd84cc3fa000fce3c8626a","first_seen":"2026-10-16T14:34:38.886347Z","last_seen":"2026-10-16T14:34:38.886347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/24px.svg","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.263Z","timestamp":1792161232263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /24px.svg HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6pgx%2BfnUrdonV6QhdYZd9wq57qEGdksf%2BeLDVZX8rAjsMdQtu8kqmwkz%2F79UqN6kR%2BkzZovycBTBDusxijcUYfmXq4gUTqaA5%2FU9VA3gOaKLXKShcTaUjo9pEzf7GNoQqk%3D\"}]}\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac17bd0-1851\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a4b7c7f5acbb712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6225,"size_decoded":4086,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-10-17T17:55:14.834507Z","times_seen":100433,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen-agent-oil-comic.xyz/x7k/gf","fqdn":"zen-agent-oil-comic.xyz","domain":"zen-agent-oil-comic.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:53.951Z","timestamp":1792161233951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen-agent-oil-comic.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 07:16:22 GMT","end":"Wed, 06 Jan 2027 07:16:21 GMT"},"fingerprint":{"sha1":"C5:04:53:14:B3:F6:A3:D9:C3:C8:53:70:7E:96:50:A5:02:94:79:5F","sha256":"7A:BF:1D:7A:26:A5:34:52:85:36:90:78:25:59:8E:4C:39:BC:D7:CB:3F:5A:54:CF:81:F6:40:7D:21:6A:92:84"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zen-agent-oil-comic.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://theroomemes.com/\r\nOrigin: https://theroomemes.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:54 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5XuS0SLOcZNOxWYW7FNjVd7wIj1slTyX1qcDtIOneOxY7ADPrzXDcex7%2BTzuMAJUYhgsR8UBg5fR48iQtQncAVrt3roX%2BzLUw%2F68kRdJ6e5C%2BQ9hVGdzhwF6OzF2lnc8geYokhYnk0eWA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b7c8002e79dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":688,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"zen-agent-oil-comic.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"zen-agent-oil-comic.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-16","alert":"Phishing Block","trigger":"zen-agent-oil-comic.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/css2.css","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.251Z","timestamp":1792161232251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8L17xbpzyrlaVPLYEGcqvKK4gAm6asHPkK11r5efwzYBkaQTajYprfe6sKedBHnHZ8wNkz6u5o%2FCJFpnXHNExEVPBt2q6dc3gV56IAHf7yxLQn2hw8%2BaQcy5WDvLBJoixg%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6ac17bd0-806\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b7c7f58cb1712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2054,"size_decoded":1173,"mime_type":"text/css","magic":"ASCII text","md5":"98d2737aeb81dfc48a3b70264638dfb4","sha1":"517dcc40302598100160def34f8c7bf64beaaace","sha256":"948fb669c7f276b82b849b69c0a708f266a8bf392443e4495226f8ea58fbc404","sha512":"6cdea863b9d2f2f6f69142e77035f8fdfdfa58448c334175f0dff924e08a6fbf2a9604aa2d2b8576eeb06041489141d7fe274b5f6586fcbedf871bf9200ea7a6","ssdeep":"","tlshash":"f7419c50086b9500d7931cd133cfbf36ae5da1506406d9796ffe10a8ec9bc6983e2b5d","first_seen":"2026-10-16T14:34:38.892773Z","last_seen":"2026-10-16T14:34:38.892773Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed1.bnbchain.org/","fqdn":"bsc-dataseed1.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.16.207.201","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.728Z","timestamp":1792161232728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 10 Sep 2026 00:00:00 GMT","end":"Fri, 26 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"7A:85:67:66:4A:8D:DF:FE:36:B0:5B:3A:03:EB:87:D2:2B:24:8A:BE","sha256":"9A:E8:86:0C:00:4D:16:23:9D:C5:55:32:6C:46:50:5D:1F:CD:28:89:E7:25:A3:8E:88:2A:63:D3:FC:3B:11:67"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed1.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://theroomemes.com/\r\nOrigin: https://theroomemes.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":458,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":38,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/mascot.png","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.821Z","timestamp":1792161232821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /mascot.png HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3L0gF4HqPLHFMwVpHYrThgRs2a4JHWTHd0YeO7VfjJ4t9Xx0xmZilvTgGBDkGZrFwEpCwo7dCXUDMnThq6vsWaYB2mCtFkAJw4ng4Vvf5BwvlCV1vP%2BYmlATc5AM8SZTtD0%3D\"}]}\r\npriority: u=6,i=?0\r\netag: W/\"6ac17bd0-2e6f8\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b7c7f91d6e712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190200,"size_decoded":190251,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x1280, components 3","md5":"6b242efb45e8dc7f8ebacb40e92d2248","sha1":"ec6487b9ea2760f01ee2e39b9537bf8eba783ca7","sha256":"4cd4ec933963ca0863ee86e0fd53da36544f44a0b0d890f89533d8fde49f75b7","sha512":"0288a8a2acaa3483350aaed9086799cd864ee10abed041584650e983d7b12e7650367f6877c5e94d509a24ec3df91f92379498d6cf40439c2b22ff2063c5be6d","ssdeep":"3072:z/iYiT1hUqny9OJqzZc8s50QPCsA4HkRyLv5TQRN8ahxnwTiG5y4domavXap2KKw:zitnozev50RsAWLv03znwOOy4J2a4lwz","tlshash":"6e04234bbf048dbfddfcde70b5a051280a659deacdc48121a2ba3ec7996c8b7445079c","first_seen":"2026-10-16T14:34:38.89781Z","last_seen":"2026-10-16T14:34:38.89781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zen-agent-oil-comic.xyz/x7k/gc","fqdn":"zen-agent-oil-comic.xyz","domain":"zen-agent-oil-comic.xyz","tld":"xyz"},"ip":{"addr":"172.67.185.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:53.519Z","timestamp":1792161233519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zen-agent-oil-comic.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 08 Oct 2026 07:16:22 GMT","end":"Wed, 06 Jan 2027 07:16:21 GMT"},"fingerprint":{"sha1":"C5:04:53:14:B3:F6:A3:D9:C3:C8:53:70:7E:96:50:A5:02:94:79:5F","sha256":"7A:BF:1D:7A:26:A5:34:52:85:36:90:78:25:59:8E:4C:39:BC:D7:CB:3F:5A:54:CF:81:F6:40:7D:21:6A:92:84"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zen-agent-oil-comic.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://theroomemes.com/\r\nOrigin: https://theroomemes.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 16 Oct 2026 14:33:53 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8BRFUCKJtTk5Rqkc61djSNVGLtUxVoyMWfR8Qj0Ff7nS5pkff%2BRo%2BnNXfXfSzUP3zZIGD9R8UlBqVeUb7s4gQZdKSz%2F8LvEPkRc%2FeH4iybw0rzxm3yCbUtFOBI8%2FxwNLFV71IBiInTQNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b7c7fdda5eb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":665,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":40,"connect":1,"send":0,"wait":119,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"zen-agent-oil-comic.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"zen-agent-oil-comic.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-16","alert":"Phishing Block","trigger":"zen-agent-oil-comic.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-16T14:33:51.961Z","timestamp":1792161231961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 06 Oct 2026 13:16:33 GMT\r\nvary: accept-encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=giDTCt%2FTiuJ%2B8Citfj%2BY15TI9NQ2d8C7hM7NDJs0TQfYoG9aA67YHnoQAC8Yz6Z1D%2BW4FJD4l%2BgBX3pdVeiB8R8B5WZIMfejfmkJeZLFBUhXlEQASKdHycou34lXxd8xoos%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a4b7c7f3fc58712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":456497,"size_decoded":51935,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5479)","md5":"7d69c224ced1c48b6b77f5e3a9e81ff8","sha1":"47611be382382e8135793e218cc84deff0a3bcef","sha256":"759652269856e8d4a52c2fb9cf3681b5be50a6df8c81b43f348df3e93fbab1c3","sha512":"65984ee69b53380990acefac6d5bc0606e29d8bc3e798f341b2b2acc32fa198b13f09c4b7615641a16487ccdc948e893e05ff5c62bb40587bef832cc23554eda","ssdeep":"12288:Q6eyCOV3VM9UaYDmpx6PG5q3U07VE81QVCbbRfLQtipRQ6Wew2VBqOxWOSf0g7dt:t2qvM","tlshash":"d5a4641441f5543b5e9ba8939d10c6292f0fe7228b13674036fc0af83fe5e58ac6662f","first_seen":"2026-10-16T14:34:38.901446Z","last_seen":"2026-10-16T14:34:38.901446Z","times_seen":1,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":7,"connect":23,"send":0,"wait":93,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/css.css","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.254Z","timestamp":1792161232254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /css.css HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=taZZp5cVYXyapIDNabZPbAChSlDU%2FJoX%2F320B2%2Bb1NLHJujS3HEk2Vlsu1ILryeQfu7GMWHrRI0lMjQlQ9fZwi2Wo%2FiRqiTk2FoXHZdGgRBTRZSeo3ORhtwgZFIhbZ2B7DA%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6ac17bd0-1406\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b7c7f59cb3712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5126,"size_decoded":2277,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"e5c84ee3af1d134c8822d2a414f4505f","sha1":"b12d191fb4e2de39c9d2d3a2e8ed59a3834ead03","sha256":"68315969b23f8e5b50c5d9f12cb6c4beba60c0254516aced2fa4fd15be0de185","sha512":"ba9068c493f5d3a7a9bb20665c48e27957bb35aff4a469369c7fc5d6b90e8bd5eac2c1d9dca4b99a31b01d6bb00998576658edb60852ad9239a76861666e7fae","ssdeep":"96:ZOEba/JOEbafFZ8OEbaDOEbatYOEbasOEbany+aZjzBrWOEbadubqGIFuV4UOEb9:a/KLUtX7nqJ4bqGIwV4jFaYc","tlshash":"c0b1da50002b1040e7875ce623ce7f35ee1ea250b044e4796bfd871beecaca5a2b535d","first_seen":"2025-10-13T04:47:37.773522Z","last_seen":"2026-10-16T14:34:38.905433Z","times_seen":4,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/mascot.png","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.260Z","timestamp":1792161232260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /mascot.png HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QZs0VFFGOSKvdKMy2o8ry5qtZxKNlxbUbpH5wk0GLNi1mNlFTgav5%2F2fwB5jx1%2BHb2ukuk7Ou3xNA3KH80Vtm%2BhxYfEZh%2F19TjxOmQZefNcOqSPZuzg5pr93yBn%2FzV%2Bhbow%3D\"}]}\r\npriority: u=5,i\r\netag: W/\"6ac17bd0-2e6f8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b7c7f59cb9712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190200,"size_decoded":190251,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x1280, components 3","md5":"6b242efb45e8dc7f8ebacb40e92d2248","sha1":"ec6487b9ea2760f01ee2e39b9537bf8eba783ca7","sha256":"4cd4ec933963ca0863ee86e0fd53da36544f44a0b0d890f89533d8fde49f75b7","sha512":"0288a8a2acaa3483350aaed9086799cd864ee10abed041584650e983d7b12e7650367f6877c5e94d509a24ec3df91f92379498d6cf40439c2b22ff2063c5be6d","ssdeep":"3072:z/iYiT1hUqny9OJqzZc8s50QPCsA4HkRyLv5TQRN8ahxnwTiG5y4domavXap2KKw:zitnozev50RsAWLv03znwOOy4J2a4lwz","tlshash":"6e04234bbf048dbfddfcde70b5a051280a659deacdc48121a2ba3ec7996c8b7445079c","first_seen":"2026-10-16T14:34:38.89781Z","last_seen":"2026-10-16T14:34:38.89781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"theroomemes.com/efebaad4c331198915e312ddd807606d29ddde9c.svg","fqdn":"theroomemes.com","domain":"theroomemes.com","tld":"com"},"ip":{"addr":"104.21.29.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://theroomemes.com/","date":"2026-10-16T14:33:52.358Z","timestamp":1792161232358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"theroomemes.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 21:05:38 GMT","end":"Fri, 01 Jan 2027 21:05:37 GMT"},"fingerprint":{"sha1":"9B:0E:73:E0:F4:5A:D9:FD:6F:25:F7:F6:A0:DB:08:86:56:1B:4F:81","sha256":"E6:EF:4F:F3:E2:ED:75:54:20:58:5B:FA:53:D7:B5:74:FF:E7:D1:88:23:B3:C0:30:30:58:45:9A:D1:73:E3:B0"}}},"request":{"raw":"GET /efebaad4c331198915e312ddd807606d29ddde9c.svg HTTP/1.1\r\nHost: theroomemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://theroomemes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 14:33:52 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxlGkQndS%2BPTh21Ze6huXe1VzMM4pTuT6bUhToz1Fi210d0Wbm6VPxKBvdI3dcwMkrMohwjvs7Jl45PXw8QaMW7f3UO3dn9I7PUT5hAiJVzWovPfS3S%2F15e%2F2aijg9NxKeA%3D\"}]}\r\nlast-modified: Sat, 03 Oct 2026 22:04:00 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6ac17bd0-138\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a4b7c7f63cd7712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":897,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfac984cf4fd7d00168ecccf7aab7848","sha1":"efebaad4c331198915e312ddd807606d29ddde9c","sha256":"34fd5dc96d57b879bd7a881cde4d899423e38b56ff463c12020fef8afc354147","sha512":"70c7aefefb4353d2415c7c20b344a6414302e5002a073dbc912955e491ecf8be12541eba548cae8142e161158280eeeb7d1636593e7b3d2b8d0531a808a33717","ssdeep":"","tlshash":"f0e07db195e9541ec20d0552e5ec891c6b1fe030331948c54c6ca772d457050dc032fd","first_seen":"2026-10-16T14:34:38.907972Z","last_seen":"2026-10-16T14:34:38.907972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"theroomemes.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}