{"report_id":"bd926747-e765-4eda-b26e-b5d6130298c1","version":0,"status":"done","tags":[],"date":"2026-09-22T10:08:29Z","url":{"schema":"http","addr":"rolewas.com/","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"172.67.219.213","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rolewas.com/","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"title":"FIAR - International Insurance-Reinsurance Forum","dom":{"size":159055,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (63232)","md5":"e3121b3b96c504844bb34ff5825e0dd1","sha1":"c22a185c4f76b9a679fe89090af6b4a6b7b4ed53","sha256":"23f1de7ba85028aab25b2cfc30500393ef7792c23345a26ac1782c75e990678b","sha512":"6a3b0b823108d90451d9a3ef4d103b87bee20b21190bbe647ef235235080e91cc9b62d7fc51baf81156440ed3c0a3b46198fd17f37687e1649bddb3e01f6334f","ssdeep":"3072:R/Z4P1SLb63JjP5dHx3LJYqhNnkIwt6lPoZPtNbpHnCpLHyiT3JmUARFU3YylmoJ:tmP1SLgJPHx3LJYqhNnkIwt6lPoZPtNU","tlshash":"baf3c81295f110fb0663c1b50b1a1f4ab9c58c8be9239595b6ec4fca4fcbedb8c23516","dom_hash":"domhash9266c1e26c06cd18e577024836a2f60a","first_seen":"2026-09-22T10:08:56.480395Z","last_seen":"2026-09-22T10:08:56.480395Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rolewas.com/","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"172.67.219.213","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-27T10:08:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"rolewas.com","ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":560,"request_count":112,"received_data":4560644,"sent_data":58407,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"pdfmake","description":"Client/server side PDF printing in pure JavaScript.","website":"https://bpampuch.github.io/pdfmake","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"JSZip","description":"JSZip is a JavaScript library that enables the creation, reading, and manipulation of zip files in a browser environment.","website":"https://stuk.github.io/jszip/","common_platform_enumeration":"cpe:2.3:a:jszip_project:jszip:*:*:*:*:*:*:*:*","icon":"","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap:4","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":10,"received_data":435831,"sent_data":5442,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":1,"received_data":524623,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.google-analytics.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-07-18","domain_rank":19689,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-09-18T07:25:05.19064Z","alert_count":0,"request_count":1,"received_data":835,"sent_data":964,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":75858,"sent_data":638,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/buttons.html5.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b0c9c0cbcd208b5646f486d8421170e","sha1":"25a8e4283d70e36ec414bf26617709f0558dd71f","sha256":"36b6bcfb23dcdaec0631daf3b7e516bebdc8355f06a79e1dcb313a4797220f31","sha512":"65f4548ddcd5eece9b6a705cf53b8ded7d9b814dbcc7c1a2b3cee273d1cd91feebb0b76a547bd1d6a3de7b18219ff23be6c0adf52adbe7b029ab58f9772884da","ssdeep":"384:mFlgC4cAHJHzTJLyL8IB+xRHxHXmlqXmugUgy0fH8TSRN8TSR2PoZaQug/Avm4pO:GlgrDTtLyL8IB+xRHxH202ugUwAvmEFs","tlshash":"13a2ff7573209050ab1159fce5faf40212aa6dd388f28660fa594c781cdd9db2cfabf1","size":23130,"data":"","first_seen":"2023-03-07T14:53:26Z","last_seen":"2026-09-22T10:08:56.533657Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/jszip.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88731e24340ce38647f6d595f0e464cb","sha1":"14aa4ec348c325cad4a8c886500a0782d14b43df","sha256":"9e170a21bb67ccf7dcab122c726e72637105a45d893350afa9b7a38369a0c1fd","sha512":"6ff9a48ad45127627e59e63a11d533663c608c73147d3a372774132cfc7f3b743268d3fb65cf177cbd56cd7fd105e9dfd948c463d1407fb4b0623df1d3397474","ssdeep":"1536:NTdPKVuVB7Ogyo/n7Z40gn9k9bUYCeyW7zO:Noqb1v+","tlshash":"e473198531a5614593e12cd484af064771b5fa7238044cf8e3b8e9d879b8ddba0bfa7c","size":76985,"data":"","first_seen":"2023-03-07T01:19:00Z","last_seen":"2026-09-22T10:08:56.561929Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/moment.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8999b8b5d07e9c6077ac5ac6bc942968","sha1":"5e8a4cf3c77c1bb13e966e702422e9d25b98ba14","sha256":"0aeb4ecf1091b9c52c9fa0ba4dc118b1abafbd88a51278935e574f6baff0bb49","sha512":"3b663c843f373d0b517fcbdcaf437ecb1c11b44ac855a1c9e0d3a9a23ceadb2bd49a18896d0213f4e018bb6eedfa6564f35e2dfa89e00551b1f981b294809591","ssdeep":"768:TZUhhcH6fhB0KWkh32WUsW3wQ3hglmJbP38l/t0C:NUckhBbWA2fsWthJbPsT","tlshash":"7d33a3cb3a86b112676612b5083f480be33e5995684e4d0df509e8d93d39c7e427bfb8","size":51679,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-09-22T11:13:29.569253Z","times_seen":18316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/bootstrap-datetimepicker.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a36160a466cad1a9e414321f4784baf","sha1":"4ed91e4ed7e1a2a7e5f05654e2f62695c9e6ce40","sha256":"e5899ac40c0c8c8a4cad594af3863ff8d8c2a4a9c561af1b59605b50748119f5","sha512":"1837b2dfb459031164a45789a2b114c0da086e44f0b320bbdfa28d498b9cbb55895852bda9377362e6fc013c64b6be83c247bb9db15a8a8ca9cdb0ce43292846","ssdeep":"768:+85tRKDmhd/onYDM38NvdyMmpu3II1R+qlyTo/KR6MJodCBSEpfh6Aq8Sd4KI+po:z5UrsNvdyoII1llyTjpWnvAMLI+p+7","tlshash":"eb03b604b1b1729795bf7495102e6507e266cc3efc59487168ce10b83dbec89a1bef2b","size":38510,"data":"","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-09-22T10:08:56.552048Z","times_seen":1798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/glightbox.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c8b54832f234f81bb1ecd75549fd014","sha1":"58238d71cb1f3b00e872803d7965024188b8736e","sha256":"267ab4a5ea85c601950cdb29b6e278c024b3e1be38d2ba27d2c39523c2e34741","sha512":"0e667ccf1e95ad28fe36fc2383638d0362e5442b05c93661f7fad91fbe5a96ef8aa124dd8e35525facf66bd90a89497049fe89231cc58e9c36602cab1969389f","ssdeep":"1536:qi1eh4HfFdUKtLmoNZzNhq3+D+dnocJpxuN2Xf3AHPGbX8qNXql+WVEpLE5rf+dz:L13apjFiDa","tlshash":"1f43f9057392387645de617aa03b930772b7260e1801d09cb4bddcdb69b8c9e31a7bf6","size":56222,"data":"","first_seen":"2023-03-07T01:38:25Z","last_seen":"2026-09-22T10:08:56.624541Z","times_seen":1690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/dropzone.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33148c7d5e055ea747149d025cc9c0cf","sha1":"7c8fadac2e33330b6f632075de1c9ff0f15da48b","sha256":"72ce2d8528437e392a146939b362f18f7e6c81246be0c45cc9c7268b458aa823","sha512":"8f2b6aeb51d8dff7823705a2ac1851a1f0f1ba34c230512241e4defa41d1e1e60b3535eb52aee4636a900ca3949ec54028de571812634374ef3642245bf8ad1b","ssdeep":"768:GGvujwKLHQFdTC6JSJKokGuCVFzFnwBzkbf7aLGVSKdq39tATdPUOcEVE5kKMLEQ:CPLHSTC6JSJjTVPnYkbf7aiVSKdCATZx","tlshash":"4b13d7957286b17586c770e5547f010ab279e5a6a8488458f036cac8ffb8ec860f7ff4","size":43003,"data":"","first_seen":"2023-03-07T12:22:19Z","last_seen":"2026-09-22T10:08:56.635301Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/validate.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed8b1bb7bc739ad1d93e6490d95fc511","sha1":"9f08035259ff3724a333fe992a46f738e678d77c","sha256":"e99cdd73d19c092753755057bac9f28542476cc8920fb3937f89384997fcf391","sha512":"7d61d34306aff9a133c8b797dc997db1e7a024d1895e8fe76a6437b751fb0b65c43c66a373745e1039259cfae20143819df6aa22cdc223175e62e5d0da649361","ssdeep":"","tlshash":"1b51eb1f166916738a3367f55cc74a80f238503fd99046a67d4cc50d2f384e59ae8fe8","size":2731,"data":"","first_seen":"2023-03-07T12:21:33Z","last_seen":"2026-09-22T10:08:56.584905Z","times_seen":432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/jquery.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-22T11:40:08.532879Z","times_seen":145590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/jquery.dataTables.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e341e82f7fb3ffff7e3cc2d65395e75","sha1":"b0807be2228bd3d86814fd7e415e5b0a9327f99c","sha256":"0c7f217912093bd1d470f8267be3b3ca6bfd42a5e12e679a8f1a47e301657186","sha512":"75f33fe93cea86a551acdfc5cf20097784ede5739f27b4933c38b3c97a6a04a557d88edce0d9401405aac25359b295edeefd8fcd4cb1f94319fb58ba6f6b024a","ssdeep":"1536:r5DveLSwMBiIpNnPivxAhl6VOd5lxEu3w78tfJyQYNBUec2mjhiJ+ky7ORU0/xzt:lDveuBiIppPEmR9xEug789JQFJl1B","tlshash":"1183e6e93a817959d7ab78e001af090be27e5897f5888c70b064d5d53e70c9920bff6c","size":82410,"data":"","first_seen":"2023-04-05T22:23:48Z","last_seen":"2026-09-22T10:08:56.511439Z","times_seen":938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BMK8WEQ4BT","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"21b5886ce781492b43fc21d5e2e436f8","sha1":"2641cbb8544e5a9195a50ce00a7478e05b1f92c9","sha256":"6ad8b0777db736a77449d7b45b4da15061fe8b0dc4d3afd741fc33b0bc05f454","sha512":"85cc429d5597624e9a93f2ee22248547e665fd473018e6d96aaeea1c4884eb3514006b061ea862bdf8034464d69a52a919148b66d5fcdc630c9b507f1a6b8e3b","ssdeep":"6144:d891MWEFh0olScyZfHEt5pcc+dzbAEXFY3Yv1kXIfnCIXzt5umGq:nDFhXmZMAT0IqITx","tlshash":"f3b408cd73c674229396f178903f01cba57b29a2b45cc89af289dce02e3459a5167f7c","size":524019,"data":"","first_seen":"2026-09-22T09:29:51.258535Z","last_seen":"2026-09-22T10:08:56.508942Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-22T11:47:59.196583Z","times_seen":437549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/swiper-bundle.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e2ac19d6072261e7ef6b9d808e17ec5","sha1":"af10043888f40ed2f58a28520e9b2bb82157487b","sha256":"159c24eb0b9d044c0507e36e693d0ff23bbb990ae90523cc25f3683253ee43d6","sha512":"e59a3be6c162e3b8c444e1873e1871f88521efb049dd6f20c1e21810d64632d7db7b2f2b27433360d469a2779af4d30ceb69b06b3f997bc4c4d53e22cae29285","ssdeep":"3072:RJkYe9swzLjkTbkC75OrynIm1/T5W9D/EL74ami0lLHb:RJte9rzLjkTbkC9OrynImRT5W9D/iP0x","tlshash":"1cd30a997320b5a552e726cb93a8c511a2b50800b40ad5e870bd4c6b6d7ec9c13feffd","size":135617,"data":"","first_seen":"2023-03-07T12:04:12Z","last_seen":"2026-09-22T10:08:56.547646Z","times_seen":2083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/main.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"564ffcf8f6ff8907300050aabd546e6e","sha1":"3b493372036e7d3ea3d4ac49140d31328354c055","sha256":"99ae89193422e93d1056f56a616ad4ab0c558795d6ff348ae773c30d2cb729ea","sha512":"06b470048fcce9a40068ae1cd08bf6edcbebc2a88fccaec8830547060ff480829a64dcdfcdee3b3370ec09b9b69064f3bed5129ae2eee3e36a6ef27ae7f2a18e","ssdeep":"96:3m65qLQqOuwtLKZ0DjOimVdrKC1yZLLv7BtiAQVvYAAETxxqeR:W65qLQqOuwtL16B71yZviAQVQAAUxTR","tlshash":"38e1db56528038b700bba73bed937b04fb3702ab419154627dfd47982f3067591a2fe9","size":6917,"data":"","first_seen":"2026-04-22T10:52:57.401217Z","last_seen":"2026-09-22T10:08:56.56064Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/pdfmake.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71b5d08a3237892f2661c1402dee48d6","sha1":"2991bce0383ec91647499f26d01d6004a584026d","sha256":"2dbcdce6229bcb2dabee7d6893e7ab46ea6ee1c8281dc73b3c79aa822eb90be9","sha512":"79d4c58480a037c145e87ef4b4ac9c6ebd35c5dbbadd4abcdb9f7a7295e819dfa19441467cab182965c059ff43b4a2d1b9697d15045822825fd329d97df6f334","ssdeep":"3072:11Z42oS4nBkU+k2YDw9l6IkirSHjxGAQscEJ67uUhUFLUHXqFs1zB0DQjeDDJGqP:1mS4nv+kVwkbjxG5/TuUhoxGqP","tlshash":"b0942dd5734b736c9391c7e88c5a010ae175ad09680637bdffd8f8d1dca48c8d1aaab4","size":419939,"data":"","first_seen":"2023-03-07T14:53:26Z","last_seen":"2026-09-22T10:08:56.577082Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/dataTables.select.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e06c874532cc59e272dc2f717167766b","sha1":"3cd3ce9acb76d153e3260d89cc6d80d93466ac2e","sha256":"4296c81ff167f50ea68ab76064ee0ed595186adad8c1b999dc3614c66b8f0bdc","sha512":"45ca7d8c859d8ecb9705c7261c0b18aa9870f1c9fe25d90bc842f509c54b5ba7b3225cb79b1ecce53b5b2c9f34751211207b1f84d12f0466f960e9e953e63789","ssdeep":"192:ZEgF5zpdl4JSf85V4ngeg66fWRw8yVs3rit00WQ7AUlHrB2aOqBvLi57:ZEG5zpG5q6rVs3rjQBYV5","tlshash":"ee4284a576707875823f38fb4dbf408ef0368496e204cda4f0a4d1c86a38a5d65a7d2f","size":12244,"data":"","first_seen":"2023-11-04T19:36:28Z","last_seen":"2026-09-22T10:08:56.616659Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/bootstrap.bundle.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-09-22T10:08:56.505582Z","times_seen":19385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/isotope.pkgd.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35445,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-09-22T10:49:57.433201Z","times_seen":26854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/popper.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83fb8c4d9199dce0224da0206423106f","sha1":"d8503645c17f9856868a7def3dc0505e19a95ec7","sha256":"f7cbc01a310318defd4e31e4616543e2cf3baef5a47562c73ece4c0b716f157e","sha512":"95d735b0fbb5159f2c9a0920a7e1f09d8c956f57919f6c0498aac383526a3c46f4dbe122e243730c843453087400954b4058c9a16c06fbbeb8c7bd33cb94efe0","ssdeep":"384:fYn0vf4wzTC9nNbR1PTM4CrBEQxkxpOxvYLmD75zfC5vIfg3rzGp/TidOgHhXjE9:w0vAwzTC/nM4BxpOxv/D7pC5vfzy/TiE","tlshash":"8c92a3dc3294b06647ab91a7a07f960eb1335875610e9410f19df2e97c30ef9613bc79","size":20337,"data":"","first_seen":"2023-03-07T01:10:07Z","last_seen":"2026-09-22T10:08:56.545098Z","times_seen":10253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/perfect-scrollbar.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4707a5fde2e52a52c114cdad148fcb39","sha1":"cd1784e029249ebf5d57de1f677a4a61019706ae","sha256":"8ffaa73818038726b1178c18e4d06259d9a7b49cb88830946dce416b65c92840","sha512":"c9436d834938d08bd140d476d1b278a07e90790fe682cf4bb1ae95fb7ab14e3e7cbb6afe2620183a1396d28fa28ee326a82b42120ecb65103e4f8b7ce3f6b254","ssdeep":"384:qreCEASl1+jBjDe9mR7xWQEVspwr0OR8CvKM8ePhI1uhLIrn+w8zUdlpEm:hCvSijx7xWQEVseKg0LJ","tlshash":"2b925458362134b881ff25aed49f474e33364053f74e44e8b484def86ab4bb53265b2a","size":19461,"data":"","first_seen":"2023-03-07T13:03:09Z","last_seen":"2026-09-22T10:49:57.404753Z","times_seen":911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/dataTables.buttons.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09c1e7d2ccf365795bd1c597bdd31b59","sha1":"24d4940b2bdf1c9cf1838bbf6fa12629161eff64","sha256":"a6c2ba1744cc2e7823526cd5537f60401cef433753546686a52672bbfe096d12","sha512":"5fdb39b252f46ca60b7febf97e3b7849f0bacb9135765e121f9c71b7133a1b949d21ed92a97d3384f743024ee66fbb8860dd7e1fefb3aebe44d658d27cbd3473","ssdeep":"192:AoG5Q7nK/lovRS/F7B1wQDiJYWskL2LdxUyyLi0sB6rRQ0at09kfza06+Z0UGSfj:Ay78i5SZqRsY2LILgB6rRPMBAC7XbSc","tlshash":"2c7274cd71c0773597ab74a4046f011af1369856e844bca8b4e894e9aef994810bff3f","size":16035,"data":"","first_seen":"2023-04-17T16:37:34Z","last_seen":"2026-09-22T10:08:56.506376Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/vfs_fonts.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3770e5dd1c10449f7c17b600e3ec84c","sha1":"8f39aceb13a7cb882f13e9610c2bf4a23a499135","sha256":"40b18b95276892171570743455572ce40fd5ea34c14816636e6fa8c5a7b657b3","sha512":"f328eaac8ff685f947027346f9acecfbdbd3fa322c515314260b3801fd95ddbb234bd09f472f30c74243d8b88655182060214d4f3abfcc625892507f71f13766","ssdeep":"12288:J4UHAvaNDxVY+fyZVF6yUd0sUIhuhZe+rR54iFFqFWna:Z9DU+fwF65iIsNrR592FWa","tlshash":"a5c49df30907fcd26b783a40099c3f915c6c2a97e319e508f9454aabb0df520eead95d","size":567638,"data":"","first_seen":"2023-03-07T01:19:00Z","last_seen":"2026-09-22T11:45:12.269839Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/select2.full.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd78b47f8f1999fb4d258515099231d0","sha1":"7e3e2b4cba7cfc0a549a2dbe53a76880dec4e535","sha256":"15c54892706255193928b41e2016fd55076d15132ac1f7d7c99f83f2ad2042ba","sha512":"a2c41396e6f49aca5b17c726ab9c72949e640898b8db1825aa5b70c76a4c234fc8efc639e5d2a9af74ed2c1ee70936246b5031a45d5d38079215b801c83bd2d1","ssdeep":"768:V2oLNdg5pTFxxoiQduQLCyXwGBokOl/N6QTeeUBo47RTeqX5KnZprIf/ny0RfS9/:jr2xOiQduE2kOZ2kqJOHrAvf2KHHe","tlshash":"0b73c848be537235427f20e6656f000a3137ab7eb00956a8b458cde86ebdd14726bf3d","size":74922,"data":"","first_seen":"2023-03-07T13:50:14Z","last_seen":"2026-09-22T10:08:56.528814Z","times_seen":1095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/bootstrap.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb5fac582a82f296aeb74900b01a2fa3","sha1":"fffea98e12e63b66693d567315a2f32392b780b0","sha256":"c5a17d46976d471cf060c5a0e25749a323d6ab20cf0910f40afed81047ba21ef","sha512":"60ad4ccfd52266685b1735e031b9776cee3dc19efc5e3de1f13b5304b147100123501c6c11975777c225e5159b84f3b207ae776c64033551869f2da639166ae0","ssdeep":"768:u2Ybgh0G45THVmcmjWSLlynS/zZ/AcyUr4Y8yiKKkHPPm26RoLQH/nIr6:u2jh03Lo+SbZ/AfYqkm2KIr6","tlshash":"3433b90a725478a201df9466513f450bb73b389eaa0b816cf95d98ed1e7cd89312bf3c","size":50731,"data":"","first_seen":"2023-03-07T01:14:49Z","last_seen":"2026-09-22T10:08:56.485099Z","times_seen":3611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/ckeditor.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80807e48fb27cf883199279de8fd4500","sha1":"961cc1dc84792dc840f4fd4fbb388c387be43845","sha256":"3ba9ac5abe5c866de3329ce12f795e523d02d9df65531f776fa09017d2977220","sha512":"fa09b321de2f830ebc2902708cdf0ef98d423bce83de7b258a918c6e2aa95fb28403046c4a2e02042c859d7120cba5aeaf5710640733c4fcab8ef6cd0e782b21","ssdeep":"6144:BH1VSDgS7Av5+fZilOknTaAjxYM9P6KsRYi0ib84QgUWbPkQSk+:BH1kdwaKsyib84qk+","tlshash":"fdc40865318175b30bdba1ba40b50642f33a5848b40691acf6acdccf686fc4b2577fb9","size":587379,"data":"","first_seen":"2024-08-19T15:42:06.188829Z","last_seen":"2026-09-22T10:08:56.485919Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/purecounter.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88f426ffdc9195a9d2c9ed57e4d455ac","sha1":"fd238664085eb447d8b43f1d7ae6559514f12ff3","sha256":"675a4f9ed42b4f59403f2d02e37354bb5bd25628315aa1fbb752f238f7fffc72","sha512":"aa16d16246ad57da2e1e4450201bed8d4fd6ad16225bb41b59438298d3c6dc55c9815f3d7dbf75d19f08533b608b58ba76d19bbe1defee565284fc0022be850c","ssdeep":"96:DRHNzrGvgjMuxcx2E8nT4s2iI2TZfSotBgorfsWAPy0GUCSv:DRBogjMIy2E8nT4xYZfSotBgor0O0GUL","tlshash":"e1a19598b382f8b38297612b145f2302b23161947075c858f779e5c17f7689be993f3a","size":4958,"data":"","first_seen":"2023-03-07T12:09:11Z","last_seen":"2026-09-22T10:08:56.51975Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/aos.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","size":14690,"data":"","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-09-22T10:08:56.623167Z","times_seen":10730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/dataTables.bootstrap4.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b63fdeeb4941fd4cab8aac87639ac603","sha1":"9f8fb290aeceab7ac813b3e387c985ec9d1d5085","sha256":"849e38ca68419913c928868a45fdc3497e6e885119f7107fab1f1c35b26f20c5","sha512":"2cd694e1d2aa77fc1701dcaf660fa11f462a30894454935ed6a16821da8baf54bfa27b425491a7edf33b614a2cf68a8745f9938289350d3b541e9bf1ccd46b12","ssdeep":"","tlshash":"15416411383471a5062ae9fd604a05526062f07bf08528eb27c4db6d6e39f4e3153eaa","size":2085,"data":"","first_seen":"2023-03-07T12:06:48Z","last_seen":"2026-09-22T10:08:56.561253Z","times_seen":859,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/buttons.flash.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b64381f1255c1ce28829b3cd179a3e2f","sha1":"9e94cdcd70e04cf82d67ca2a0f7df5688e29f55e","sha256":"ef9b5df3dd85bb2249c08712cccac3670e5ba2a8f9436365b5399af824b9a9e3","sha512":"620f518b5b9f57d0dcf742aeecbec18629c6a6f770dc109b4373fa01862a90535ae4fcd9330c4b9c28285c87ceef2d6ce46b080bdbdda98c606756807fe20c09","ssdeep":"768:7uRZ5bGLyL8IB+xRHxH202ugUyLohAZeH:SRZMLyL8IB+rH5202ugUyapH","tlshash":"59b2537573205015a71198fcd5baf00222af5cc384e28aa4f9695db91cd8dce2cfabf5","size":25187,"data":"","first_seen":"2023-03-07T14:53:26Z","last_seen":"2026-09-22T10:08:56.520699Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/buttons.print.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ec98cddb8f4391fc3c195dde8a70d54","sha1":"e63cede8a29faf7962df2e44e8177da4d27ff5b1","sha256":"fc6885de80d5d8147ad81bcf51c19403cd853b4fa9f646fd21e31203c3b3f0e5","sha512":"8e93c98461acc899bd5b6c1234fd341f1ca9ba0ce5db6a180ac897aeb0b2ab03dc71d7d423d84970639c667a73e5b2a9648f73457e5a071bff0bca318f6c976f","ssdeep":"","tlshash":"a23173d57040712c073364a8706fa88478f3a9523051f475964cc9e0def291ca53bf6a","size":1832,"data":"","first_seen":"2023-03-07T14:53:26Z","last_seen":"2026-09-22T10:08:56.610572Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/buttons.colVis.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f777e6ed023a0f06dda8019c3daaf9e8","sha1":"30791559a6201f7a4d7a9185a84277ef4cb8af5f","sha256":"251d5f92dd0fca753373eb943419e91306f2d57b3f73fc64f17dcc1bbb29ffd7","sha512":"ba8816dff05f1fc079cdf0195d6983c59bbb80785ed920636af488e64a6d66d4b24745757ae9a940692a2bd8af5e075fff9aebe4e6bee421db95429ee6e882b7","ssdeep":"","tlshash":"4f51aeeb3c4079354223b8b530df2419652afc7ab0442dedb458c7c5af6092b5d36d4e","size":2578,"data":"","first_seen":"2023-03-07T14:53:26Z","last_seen":"2026-09-22T10:08:56.626846Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/main_1.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3226e9bef984f8e192fcc885b46b5627","sha1":"3fd46627994849ec45c4680f0375157f27f0faea","sha256":"3cc211ae9e54d85a5401b1e7da79dec0d28de1c2dfbf91b1f85cdd395bfe56a1","sha512":"1be58e8e30992e2529f9cddba6c874354099274538554b8170ea7051a8ff63edd8dcc128964c83a7ecdd6e10078965b6dc08afc1947dc27057c24e5dc3b6d4be","ssdeep":"","tlshash":"5b41de6974e06133023f25ee487f144e691e5007490aaf65bc8d82e81f6951cb9eff6d","size":2436,"data":"","first_seen":"2026-04-22T10:52:57.31802Z","last_seen":"2026-09-22T10:08:56.636022Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/the-x-177x192.png","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.333Z","timestamp":1790071674333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/the-x-177x192.png HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nCookie: _ga_BMK8WEQ4BT=GS2.1.s1790071674$o1$g0$t1790071674$j60$l0$h0; _ga=GA1.1.1034600199.1790071674\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:54 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8WEC%2F6zPAxfOjHHNm3pbebR0JZ5Cln0ITmIJo3tf5kgfgDmYAbLCsFm58uDQpqByvZjUPgeRiJ3Ph3hN3GdKR7wJTEFQq%2Fbos300ryijDRmOnWGnLtAbyhixL%2B9IbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3f0815c9987120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0e3b6ec93a1e03637e8740fe226ac16c","sha1":"3c9ed096679dd498357fdf5faf74f088308eb133","sha256":"810afd989f6650a1fc0174d1f23f213619284d80d6bfe9a443b26be9b9cf0c4b","sha512":"8d42d80f030b25167c243483f4391eaad51254a252e4d2b32b8dc9cfe87fb3bfcf63851459536e8b2cd135d5705993e399dd387bf140c6f4b0e68790e54c4506","ssdeep":"192:Vj9jhjOjK/OaaUl8PzHz4081B89P7vlCeNA:f//FXtAP7vlCeG","tlshash":"3ee1a963f5f925be10978272316e7b193de48053eaa608a576edc1720f8ef85ee07244","first_seen":"2026-09-22T10:08:56.483691Z","last_seen":"2026-09-22T10:08:56.483691Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/bootstrap.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.635Z","timestamp":1790071673635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/bootstrap.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0TmJlx3WJmqcYTrYYBPyLI3TsT8MocuI8m05jtOCiqsZ39zpPC%2B7F7v0KFfB3vwoLWudh647CEuSpw4kBG0eewDalMFOWDWiFWMnl96T1IPi1%2B7uepUfYuYqGcipQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-c62b\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081584802120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50731,"size_decoded":14838,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50450)","md5":"eb5fac582a82f296aeb74900b01a2fa3","sha1":"fffea98e12e63b66693d567315a2f32392b780b0","sha256":"c5a17d46976d471cf060c5a0e25749a323d6ab20cf0910f40afed81047ba21ef","sha512":"60ad4ccfd52266685b1735e031b9776cee3dc19efc5e3de1f13b5304b147100123501c6c11975777c225e5159b84f3b207ae776c64033551869f2da639166ae0","ssdeep":"768:u2Ybgh0G45THVmcmjWSLlynS/zZ/AcyUr4Y8yiKKkHPPm26RoLQH/nIr6:u2jh03Lo+SbZ/AfYqkm2KIr6","tlshash":"3433b90a725478a201df9466513f450bb73b389eaa0b816cf95d98ed1e7cd89312bf3c","first_seen":"2023-03-07T01:14:49Z","last_seen":"2026-09-22T10:08:56.485099Z","times_seen":3611,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/ckeditor.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.656Z","timestamp":1790071673656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/ckeditor.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvWi2ZHoBu7rH4Ja315uVVawmzoTK0S6ecDbaUpDyp4ONXd5cKJdc8IasazUaILvFt%2FFWD66mUxG7WQR7%2FJ%2BnUtWooEwLL%2B47xnpE%2F7Nn10MV2LmAB7IF2zKsYzs2A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-8f673\"\r\nexpires: Thu, 01 Oct 2026 01:45:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 116525\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081585817120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":587379,"size_decoded":151336,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65406)","md5":"80807e48fb27cf883199279de8fd4500","sha1":"961cc1dc84792dc840f4fd4fbb388c387be43845","sha256":"3ba9ac5abe5c866de3329ce12f795e523d02d9df65531f776fa09017d2977220","sha512":"fa09b321de2f830ebc2902708cdf0ef98d423bce83de7b258a918c6e2aa95fb28403046c4a2e02042c859d7120cba5aeaf5710640733c4fcab8ef6cd0e782b21","ssdeep":"6144:BH1VSDgS7Av5+fZilOknTaAjxYM9P6KsRYi0ib84QgUWbPkQSk+:BH1kdwaKsyib84qk+","tlshash":"fdc40865318175b30bdba1ba40b50642f33a5848b40691acf6acdccf686fc4b2577fb9","first_seen":"2024-08-19T15:42:06.188829Z","last_seen":"2026-09-22T10:08:56.485919Z","times_seen":22,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/629469e5a59e9_viorel-vasile2022%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.692Z","timestamp":1790071673692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/629469e5a59e9_viorel-vasile2022%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=agT04I2wiOPB3Qk8Zl56Bb7peh1VRtxRAch%2FJWmoTOA9hmWtFEvlEXtqxzq07I4VWjQt9XBSf2x1YUbQkzb%2BIdnrhalvx7FvcDZThTVt9pxiQFILI8StIcDBIKdSwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158a841120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7bb2e17d18428ea17e34c7733f68e5e6","sha1":"ada449ffa606ebb8ee3547493ca0d267a58606f1","sha256":"8b97f2226db7130cc9e019ac1dcbca1c328c75ea747400e4f27239ad59ceffdf","sha512":"6e84d0156ecfbf3a6828dcdc5517974fa2aaaae7aaa0f113c43894063ea8839bf855d5068cab8a6f4cade48b44c8db5d4e9a4c9ab0899cdf3e9b7314df596da4","ssdeep":"192:Vj9jhjOjK/OaaUl8Pz/zj081B89P7vlCeNA:f//FktAP7vlCeG","tlshash":"89e1a963f5f925be10978272316e7b193de48053eaa708a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.486652Z","last_seen":"2026-09-22T10:08:56.486652Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/629481b375894_marius-laslo%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.719Z","timestamp":1790071673719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/629481b375894_marius-laslo%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAx0%2BpDY2M5PplzdoEuMs7E00Mra44wSKyLURWE7X%2FC1JKgLQbXvFA23SKIQDzVPnFE%2F6iOhQInZagPkIOtBI2s8q8JUu2oCDruuowNQgYcdR0NKczAhVqI3OZ%2FW%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158c861120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"95c67fd15d3e4723b3140db160230767","sha1":"11d526b4131cb532b30b59a9409c562dd3215ed6","sha256":"a975efa095661a0df81ab43090e83e43f39644e2a45b3197e24ebf4bede2cd9f","sha512":"af970d407b75e64b3a68baa38b45ccbae573fe469fc7c1fc96d00c2309412629c60e704e412916034665469b895590deec69a1bb0a0d1b7b36c3b4a50cf54611","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzfzj081B89v7vlCeNA:f//FEtAv7vlCeG","tlshash":"05e1a963f5f925be1097827231ae7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.488062Z","last_seen":"2026-09-22T10:08:56.488062Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6650b800c39ca_georgenedelea.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.735Z","timestamp":1790071673735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6650b800c39ca_georgenedelea.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YQhfokObiw7l6JOGyZTnPB0HY41KB59WJmvahwnFUHjVlT7n2kcRxYWiIGuzc2XIEfg30yivNBHsWMRzaz0J7uRiJqAIJhhWAaxg325Nwac767DlpbhEtLdMNU6KQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158d872120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7916,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d8471e370c57c38c6001e3bade90e77b","sha1":"e3df8ec01a779e6bdcc7ed5e8b22f5955a69ad6e","sha256":"7ada8f05647d5965a7f5853ee81a0ce967ea4a8c55b4fae63677485b0445bed4","sha512":"8c4ac965c5b2e6524f3e444bdb09646ddd3e00cacc2f580d4bea722e2cb43b342aa9df83487f9f20a7ec2f62ad45202317b5d03e97c9163e72e58a4d693891ec","ssdeep":"192:Vj9jhjOjK/OaaUl8Pz+zj081B89e7vlCeNA:f//F3tAe7vlCeG","tlshash":"4fe1a963f5f925be10978272316e7b193de48053daa708a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.489378Z","last_seen":"2026-09-22T10:08:56.489378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/664adff6b9c0e_Barbara-Bendandi.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.716Z","timestamp":1790071673716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/664adff6b9c0e_Barbara-Bendandi.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJZcVueZAX3cPFIgKTl4oR1CtuTOwju7I03Lvgf4%2FYgnI%2BNYYAA7V%2Fki4L4ZmvxwjD9Z1xCQLiWt7h60j00xzP3VfdL%2BFxFx%2BFmD28oJM2JhRAnuuGaN7J6DMZ5UuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158b85e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ef7f68c50a78694efd4751ebdf38df09","sha1":"d2c35620724d749009334e3e941a82d1ef69f3f9","sha256":"589b64290071b3c151d03ac398ec3be16ffdf73ec68dde74b0ddb58938148328","sha512":"7e36a9fe96b453970f1e5f475d56a2b8dba0c7b0cb92fd30b11dfb6e44760281eb5e96a064123c61c428237d70fa375460c52d40d4690361bbdbb67a5b6bc71d","ssdeep":"192:Vj9jhjOjK/OaaUl8PzVzj081B89h7vlCeNA:f//FCtAh7vlCeG","tlshash":"b7e1a862f9f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.490584Z","last_seen":"2026-09-22T10:08:56.490584Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/66068471ab724_alexandra.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.723Z","timestamp":1790071673723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/66068471ab724_alexandra.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ijGO8GVOIx5Lrg9ydG2NkXWdZUKKJXkIXq0RyPfnZ4fvX%2By8lxQyT6v3aUGNfxOiUWkNo7OVCBAr7eTb9YfWjMrBU0s%2Fd969jpfyJhYkx1jTRBI8Jj%2BNu0AnwFO2%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158c865120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e8aa968834dd4cf3c045636b698d0ffe","sha1":"9e75b2016b76a3a20beb5132f2c4f7b80b25204b","sha256":"101e49ed73bb2a71ec5e126b025ae96d8fe2e0d142795d99afd78caf47f84d12","sha512":"6e3adf2d6128419284e1e3ea8e37f5584008c33c2506c3eed05fca20e4af72eee4da715b3e058db9bfdab7b7c147c50c83defb4c72b4a6f3cf02b41f8149df0c","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzjzj081B89T7vlCeNA:f//FotAT7vlCeG","tlshash":"0de1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.491828Z","last_seen":"2026-09-22T10:08:56.491828Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.126Z","timestamp":1790071674126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:35 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 65719\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49076,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-22T11:58:04.833075Z","times_seen":66408,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/65cf1b9d8dfeb_fiar.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.672Z","timestamp":1790071673672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/65cf1b9d8dfeb_fiar.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-12eee\"\r\nexpires: Thu, 01 Oct 2026 01:45:56 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 116516\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0Q8nOWK8TxzFzlGsYF2Xzbne3512%2FpDcxEJALkTO%2F6uIZQNc7IuaVWTTHCnRow8RdekOOQ5vHN8jIpE2J3AAyCswn1PpMsXo35vSuq1jGGgMN5nos%2B1%2F4GFnTEWpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081587826120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 77550\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77550,"size_decoded":78326,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 970x250, components 3","md5":"10f4af4437c0bdca8105405cb45e2672","sha1":"0726707953b031e3ad0a175479583833f5aa362a","sha256":"5c8b6bec607b8aa7c83212b40129467cca933b568527b71da27df87d7d3b08b0","sha512":"0e2f8ee184b778f77059ea99814132709542b06314301dae1aac1d15fd4efa0da6f5634abe2a1ef173af88f4b27baaeec0a7909490f7a0957b116bffd3199b2a","ssdeep":"1536:bpG7QzHYlHKrK4j+XPeXL/Rn3wX4jmK5tl+KiVBXRlzUa1f99WB:bMkrK4cP4TRnAX4aK0KiVBXZ11EB","tlshash":"e673022a9bf56bb6d83d4bb80f63c2b40b756f514b0d711250ea32bedc4818e9f1e404","first_seen":"2026-04-22T10:52:57.385335Z","last_seen":"2026-09-22T10:08:56.494073Z","times_seen":16,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/660fb4b7c188d_Bojan-Srbinoski--150x220.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.696Z","timestamp":1790071673696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/660fb4b7c188d_Bojan-Srbinoski--150x220.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-966e3\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t50qDOjRhd9RTPG79wBCrqOALYbWKKY1OMC705lRlEkQR1W8PLr%2BCWDcu7ynTenFVMvcb6rXTw4wF0udBvbGNFCH2AjvOuGDHuq6GqDyjmYmzG6rSZO0wEPqGFvNWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a847120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 616163\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616163,"size_decoded":616933,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.4 (Windows), datetime=2024:04:02 22:11:58], baseline, precision 8, 150x220, components 4","md5":"0bb27220f98a800d0633ebc9fed52d3d","sha1":"79e905565d528785e1a4e420ce7d8748ec822115","sha256":"d6f97e694ad680bfd64f467fd536dbafbeea29adb398d4ab8154df6751cd5138","sha512":"ba835c2bcde02d05e9be4c103cbf80cbfa41777e9ab938c4415402237862b4c12b80e4cfb08f8fad8b149aa1258f177e71d85ce55ca66d1e987167a24871f710","ssdeep":"6144:sequwWvJEIV13Z1RIw47cteF4o6dfXHB11LT0BoTyNzTQF1CUye/iaPKaMap/oyI:TE0p1RE70zxntT/ylTyaaSMn2fSmRxj","tlshash":"d8d4020e61d38cd6db81d73218e2df3e85e4dd11aca2aa5172fe7c5c73f6a409a43125","first_seen":"2026-04-22T10:52:57.363829Z","last_seen":"2026-09-22T10:08:56.495113Z","times_seen":12,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6345c6e2f2364_vicentiu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.703Z","timestamp":1790071673703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6345c6e2f2364_vicentiu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BXknOweDf08lm%2BN02et7jfiUAZJ%2BO4eruuCZ%2FWKoyshVRNJLKGlZdv4yJcBjxqvuISBmDJAkk%2FPHGEiDa%2BfPmFOLFB5eA6X5kRpU3AqSmCL0sL2s16gibDiPZsH1Vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158a84f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9dce05f39b7aac193c77135ef192aaaa","sha1":"ee0bf87fbf799f650d1e2790cf1446f53aa82d70","sha256":"3f091897cdc34417e65363a833070805184d12b0a142502f5c12b664d73f073f","sha512":"dc917f8cab36b6034c70cdd3bdb6648eb487731092b6d0417628fa7f048c1e0cedd9a5af70239225875de12f25adc6e6dff20141d5b8fc2cf8d457a672915535","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzgzj081B8907vlCeNA:f//FhtA07vlCeG","tlshash":"5be1a963f5f925be10978272316e7b193de48053eaa608a576edc1720f8df85ee07284","first_seen":"2026-09-22T10:08:56.49588Z","last_seen":"2026-09-22T10:08:56.49588Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6650b794c4413_marianpopescu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.711Z","timestamp":1790071673711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6650b794c4413_marianpopescu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sq5NEQLIgC%2BnOelIOKs8L29Dpsiw0wfQSlnOJhccl%2BvoEXLmEf0kVIB8e1913hFd3EJszkUnU4uivBSuP9UDzPt08jz605iuVK4L6IoXMeJrey3mKKi%2BAQhlKJBArw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158b85a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"79787666e00fee3e80346a1ae135d941","sha1":"78a0b725b7d200ed0c4fd8997fe0576f82b81646","sha256":"d6c8169578f4caaa571ba058982ff7ca55a64611e1d23f079f4b7cee5e48ba9f","sha512":"b8a3bd2f110ccc72907d474953f413fa49aacf546dabe761e0fa9632afd644d099a5f2af1450d0927170f81b171b36bf588eab0f64e00611b4410af48a33a90d","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzpzj081B8997vlCeNA:f//FOtA97vlCeG","tlshash":"ece1a963f9f925be10978272316e7b193de48053dea608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.497909Z","last_seen":"2026-09-22T10:08:56.497909Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6543a5c5d0b6d_ionutsabadac.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.725Z","timestamp":1790071673725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6543a5c5d0b6d_ionutsabadac.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FsW1CZEnTaOinfjPKPFS2WScmVj3sZwzGToMfDjGfhv944MgC7Zdshyi95ijD%2Fb8qsynGmWm7VXf0gLqL%2FNnED6RfIfKdFVtyypmJUyDb2lzp%2FfgNU0B95w8J2xUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158c867120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ff0f71956d90ce12f22fba738d0414c3","sha1":"1a3f39fa88240ce4135f6b5d601479c5c46211aa","sha256":"61291e4835653473dda85bd6bc3987c4e83d8d76517ac4b49f4aaebf2a22e78a","sha512":"9b50be3341f2e6a3bbc32d3b70c0bb18563ce6da067bb8c605792bd80e88dc5f85457ac9390f123b6f472608c37f0e2ffc2d6f366abace3da6945049e1519a50","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzhzj081B89R7vlCeNA:f//FytAR7vlCeG","tlshash":"98e1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07284","first_seen":"2026-09-22T10:08:56.500407Z","last_seen":"2026-09-22T10:08:56.500407Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/fonts/boxicons.woff2","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.121Z","timestamp":1790071674121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/fonts/boxicons.woff2 HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/lander/raketna-nebespeka/css/boxicons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:54 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mD2WSo1Orbyp1m41NtYrrLbXSlJTe4SNTUBmIBT%2FeeGbQ%2F1mOeJQVfrmXEOc0rij2uczpAx19s1ImBV83SWnsVtTcAhvgCeTlsPoxNkAgR0gPJhUru28WFxYObnYRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f0815b4933120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d393258c4cee8a2b0aff4ec19a1b3910","sha1":"8c8e0c8cc37f2dfae94ed26af526142c670b1c10","sha256":"2d7deafa4ba32afb9ecbaaeacb937edb3d82a85f3648b7a00896c4d17bd3fbfe","sha512":"d64636968ecff4076e5fe4cce1e85fa1c05cf5543e4611bc1981395cf2162d605995c34d1fb1bcd053ee12ed05f88cde32070bd4b4257c85e026a3a06399cdb0","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzcz4081B89M7vlCeNA:f//F6tAM7vlCeG","tlshash":"96e1aa63f9f915be10978272316e7b193de48053daa604a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.501786Z","last_seen":"2026-09-22T10:08:56.501786Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/640b23ce84b5e_grawe.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.750Z","timestamp":1790071673750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/640b23ce84b5e_grawe.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JNgRxbAsUEo5NQhuKjB3BYlyylwPEddEVfkZ3Io6ecr6v7oSYT96VJQLd%2Bpfcyg8749HODwDfZ%2BK9UCTDfrgN%2BsIky9AIL4e2cxIfFHQiwM%2FX859krWzDhdaIc72jg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158f886120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"c2a0be44036b9e3d39919dd3819a9403","sha1":"c54463f33dc1842e912a775b0536507fd4376a59","sha256":"0691ed35c7779c7b8f0f8cd8881459f7ddb848fae10d2a25298ef793efa59c29","sha512":"b5e0ab496f9a0474d9103b1b2edf447eb79ae10b9f37fcca34f00be060279ea273c888e848b3a777a07955af29156afe43322d519ae4776b73916ad012cbb59a","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzpzj081B8957vlCeNA:f//FatA57vlCeG","tlshash":"56e1b967f5f925be10978272316e7b193de48013daa608a576edc1720f8df84ee03244","first_seen":"2026-09-22T10:08:56.503015Z","last_seen":"2026-09-22T10:08:56.503015Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/628b29ff7d492_Benjamin-TURQUIN%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.691Z","timestamp":1790071673691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/628b29ff7d492_Benjamin-TURQUIN%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-5b30\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LvAW6X1YmaUh%2FDEWVKQhLFqxtHHeJCyhGl%2BStCsnaGKypsWUKZi1x4FG1KiPGvkLpENeqx8Ieyeg0TVb2VH5aVZ7wUpJfu6SvFCUryDL2MDv4%2FgyFtJwHV3DNCvBCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a845120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23344,"size_decoded":24116,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x220, components 3","md5":"76020b86105506210ce1d6a3826c45cb","sha1":"d7dd269e0d871cb70137209051cd2a894ed410a8","sha256":"e3a49767511101674a668406ec88643087e6b2b8518aa1de3f47c24ee8e3637e","sha512":"ea35909b657f5c153ef2bab0906fdcc021857fff7b3b6cf845f661254f29cee972a9e28c82114723b5e7e6bf232d67aa670bebc084ef7c5699c9bee23b359098","ssdeep":"384:2FleWYxx93fhPhfWDTxWBoC+GsTsgw4H65Ae7IDk8bXpxrlR5vvu8uHvn:SYWGhhMTxWBoHGsTsgL65AYIDk4pxr5q","tlshash":"dfa2d09cb0791de819665db10e53d3629ee135218f3709a1994c8d3beedc9b07a9333c","first_seen":"2026-04-22T10:52:57.303608Z","last_seen":"2026-09-22T10:08:56.504674Z","times_seen":16,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/bootstrap.bundle.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.623Z","timestamp":1790071673623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cuKuQyUzl8JkDnHNF53dc9oiZRxdTsT4E6Zus9VIRpwImsMLJfiEX2xuBLgKXvnSCyZwgaWxXIDLpIWKDPABDsGN%2F6ZGEqX3UiiCCSrf7aqAXvdn2h41WsRIrfVDOA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-13131\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081582fea120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78129,"size_decoded":23839,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-09-22T10:08:56.505582Z","times_seen":19385,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/dataTables.buttons.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.644Z","timestamp":1790071673644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/dataTables.buttons.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3L%2BgFnKlv4hlLJv0KKQ5Xewtc0J%2FLU3X%2BA9R%2B%2Ff0fZH9guSTT5lF29aQVdlcN%2FubtQbtr2XVb7Zyo7Ppu%2BOtk%2B7bGB3zuud%2BaIc%2BHlLJro8BGzRoH5K%2B6ASIxFfbvA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-3ea4\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158480c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16036,"size_decoded":6070,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (563)","md5":"09c1e7d2ccf365795bd1c597bdd31b59","sha1":"24d4940b2bdf1c9cf1838bbf6fa12629161eff64","sha256":"a6c2ba1744cc2e7823526cd5537f60401cef433753546686a52672bbfe096d12","sha512":"5fdb39b252f46ca60b7febf97e3b7849f0bacb9135765e121f9c71b7133a1b949d21ed92a97d3384f743024ee66fbb8860dd7e1fefb3aebe44d658d27cbd3473","ssdeep":"192:AoG5Q7nK/lovRS/F7B1wQDiJYWskL2LdxUyyLi0sB6rRQ0at09kfza06+Z0UGSfj:Ay78i5SZqRsY2LILgB6rRPMBAC7XbSc","tlshash":"2c7274cd71c0773597ab74a4046f011af1369856e844bca8b4e894e9aef994810bff3f","first_seen":"2023-04-17T16:37:34Z","last_seen":"2026-09-22T10:08:56.506376Z","times_seen":48,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/664d9d20ea3de_trup.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.708Z","timestamp":1790071673708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/664d9d20ea3de_trup.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zpzat72YiBG3GZPNk%2FQsF4FjgJOHeCeg6NoMQXth0w144Esx%2BZ7T9ApcIT1lxLG8%2BodWakcBpPRZWuG8ZAJfDe6K0amP9whMD0U60DYrDI8QKBYAV0EMhXtLOZM7wQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158b857120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"740836ff621d49a5fcf9d74cfb158b6f","sha1":"e79b8977c68010de24adabb604c5e21f2f2a18b9","sha256":"b79ee91d0c9dfd4c8eaa9e18d9261b752fcacc0e7c17a25106a579d9c67e6713","sha512":"b651dd3f50da845cedf65c9caac504cf04246e82b96bb9523d842136a3e02d4617aecdc495321f8035c96a0c7b2996a3032281734d229a62479263cc5c15b48f","ssdeep":"192:Vj9jhjOjK/OaaUl8Pz3zj081B89z7vlCeNA:f//FItAz7vlCeG","tlshash":"e9e1a963f9f925be10978272316e7b193de48053dea608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.507138Z","last_seen":"2026-09-22T10:08:56.507138Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyCMIT5lu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.118Z","timestamp":1790071674118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyCMIT5lu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31480\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:40 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:06:43 GMT\r\ncontent-type: font/woff2\r\nage: 65174\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31480,"size_decoded":32292,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31480, version 1.0","md5":"77d813a049815f56220b026858f59496","sha1":"a22390c38b45eb7c94cbf77ff0579e5756e6e4be","sha256":"2d603982caea60f15b741581c9e7bd88d1a7680fc52978137f9bc67c2dec61e0","sha512":"00f947049d68006508d4fc6c93f00fb62b687cc1d3b669789d7bf460468d7d17610affac6f0c1ed145f78c32fb542011a13eb17e0e83c2e4014c4597e893f0d1","ssdeep":"768:W196kZX60zfj/S0a6BpG0Ux6ACZeS20Mav1zpULD/HHq:WSkZX687Za6BpG0Ux6AGv1knq","tlshash":"5ee2f1f874fa13141a2ecbafea4173eb7a84ce5a45d3b5505c40d6f06641cbd2932fa4","first_seen":"2025-05-30T04:30:59.090985Z","last_seen":"2026-09-22T10:08:56.508295Z","times_seen":3778,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":52,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.124Z","timestamp":1790071674124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:35 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 65719\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49076,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-22T11:58:04.833075Z","times_seen":66408,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BMK8WEQ4BT","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.580Z","timestamp":1790071673580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-BMK8WEQ4BT HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nexpires: Tue, 22 Sep 2026 10:07:53 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 175469\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524019,"size_decoded":176073,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"21b5886ce781492b43fc21d5e2e436f8","sha1":"2641cbb8544e5a9195a50ce00a7478e05b1f92c9","sha256":"6ad8b0777db736a77449d7b45b4da15061fe8b0dc4d3afd741fc33b0bc05f454","sha512":"85cc429d5597624e9a93f2ee22248547e665fd473018e6d96aaeea1c4884eb3514006b061ea862bdf8034464d69a52a919148b66d5fcdc630c9b507f1a6b8e3b","ssdeep":"6144:d891MWEFh0olScyZfHEt5pcc+dzbAEXFY3Yv1kXIfnCIXzt5umGq:nDFhXmZMAT0IqITx","tlshash":"f3b408cd73c674229396f178903f01cba57b29a2b45cc89af289dce02e3459a5167f7c","first_seen":"2026-09-22T09:29:51.258535Z","last_seen":"2026-09-22T10:08:56.508942Z","times_seen":4,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":62,"receive":78,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/isotope.pkgd.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.626Z","timestamp":1790071673626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/isotope.pkgd.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GF5sT3IKkQ%2FE%2FcBF3v3m3A%2FZrD4%2FUwxCxziHG%2BFXlMdofZeUDPzfTmHK6GVfWIYGwK2eciZZs98my%2BAI3cxJIbAfCTG3JawHiq3ayRmFkwPzBTK819tR%2BAiDy6U9Ew%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-8a75\"\r\nexpires: Thu, 01 Oct 2026 01:45:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 116528\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081582fec120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35445,"size_decoded":10646,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-09-22T10:49:57.433201Z","times_seen":26854,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6646fa963e28a_jurtuc.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.693Z","timestamp":1790071673693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6646fa963e28a_jurtuc.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-12e8\"\r\nexpires: Thu, 01 Oct 2026 01:45:57 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 116516\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ThgmNCLGCAVapJa1dc9D2AJ5enwqNAfKC1hM8PIVwsp6r9SrsF7tQhi4sQFHOKJyJFXbCZuXskxNZb6PZutvi%2Fnaic9KUNAMVfucxh2jLOMyvp7mkpcvIufpOfA1Hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a844120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4840,"size_decoded":5608,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, baseline, precision 8, 150x220, components 3","md5":"41043213a1e70dc236aa69f1683212d0","sha1":"25da7d4ae5c7bf7635bfc3e76116ff20b0762cbe","sha256":"22b3693348cc500f9df9fd0ec44c6ec1d83aae99d73066f439d9b98d7c1d6653","sha512":"701a38bc511091efa1276065231d5abcbac50494929e3a55d7a0d3f2a1b7b17b5c03026e8b43d25300c47dfab8c47b5865bc5a2f7c5c9528eff0c53d56a09519","ssdeep":"96:yul8LsLfcZ1FER5kD2tfU/Z4UYozveDlpy2NAZ0ZWaAnlaTTptUejo5R0e:yu3cZPER5ka9URFaa+aaAlCptU6oYe","tlshash":"17a17d2e733883c4dc8bedb964a90d92e2379bf680a192bf33f5411138215b12923516","first_seen":"2026-04-22T10:52:57.404723Z","last_seen":"2026-09-22T10:08:56.510166Z","times_seen":16,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/css/glightbox.min.css","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.594Z","timestamp":1790071673594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/css/glightbox.min.css HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BfoGZJ21N3z8VEPkSO%2BM5DGj6z4fcyP4Oy9PQlhPucDy5AudjPAMBdiG7qA%2B6nRLn%2B5aRSg%2FiQRyUAj6zsuw%2FNZWnktwTE%2FjyrlWXIj83%2Ftl3d4CNRdSBpmbp%2FFS7g%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ed3261-35d9\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08157ffd2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13785,"size_decoded":3346,"mime_type":"text/css","magic":"ASCII text, with very long lines (13785), with no line terminators","md5":"d5e0b3e55dd94af81580abcfb4585fb1","sha1":"5db50f4b0a19a304d4f58e39cbbb22e7df17e25d","sha256":"9c300b6fbfe6d373e1f53b2f0d33cf9df86d9310cc60531ad231cee97aca2bf0","sha512":"86a7cf9055f6bce1491be31dc8ac378b16bae82debc44da22b02b29e5f835d025ceb18f9238db53a0a5866fa00f562111c3d07783778e8890efa045fbf62940b","ssdeep":"96:pYUCW2PjwbEeuDUPoYXDWYCdBCg0WKyPi3AFkWdLpjxMchAk3:pRCD6qr6qYCdBCg0WKbIdKchn","tlshash":"4a520317975032149097ca1a1ad8d6a8077dc133ea326fee77c1fa91c7c3b8b14b2697","first_seen":"2023-04-06T00:09:12Z","last_seen":"2026-09-22T10:08:56.510797Z","times_seen":1818,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/jquery.dataTables.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.641Z","timestamp":1790071673641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/jquery.dataTables.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efGlCom1SMWU%2FPo0Tq%2F%2FbZlfF0lzElfhid6Q6OnIyGh2gak6q%2BvcJMyqk5oa0y64VzOyPU%2BbkayFeSj720dlkKOg1e3%2FfyqLkfXSuYKWvxUcOFv5kWR%2FezaA7STdlQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-141eb\"\r\nexpires: Thu, 01 Oct 2026 01:45:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 116527\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081584809120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82411,"size_decoded":28885,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (585)","md5":"7e341e82f7fb3ffff7e3cc2d65395e75","sha1":"b0807be2228bd3d86814fd7e415e5b0a9327f99c","sha256":"0c7f217912093bd1d470f8267be3b3ca6bfd42a5e12e679a8f1a47e301657186","sha512":"75f33fe93cea86a551acdfc5cf20097784ede5739f27b4933c38b3c97a6a04a557d88edce0d9401405aac25359b295edeefd8fcd4cb1f94319fb58ba6f6b024a","ssdeep":"1536:r5DveLSwMBiIpNnPivxAhl6VOd5lxEu3w78tfJyQYNBUec2mjhiJ+ky7ORU0/xzt:lDveuBiIppPEmR9xEug789JQFJl1B","tlshash":"1183e6e93a817959d7ab78e001af090be27e5897f5888c70b064d5d53e70c9920bff6c","first_seen":"2023-04-05T22:23:48Z","last_seen":"2026-09-22T10:08:56.511439Z","times_seen":938,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/66470ba60a625_grad.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.706Z","timestamp":1790071673706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/66470ba60a625_grad.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQPm4IdmLUV468juDZaf3i%2BAKvs4%2FaVC81TLebYEhtPAcrM2eA61u%2BrZl2a9At1sj86s7ouSghjYTwFSb%2BEFYDdv9XFRIAq9yT5kufQnFSovuwNn6Y0q079zupczFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158b854120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5cebb96ad5446e618ed11df0f8a86837","sha1":"141ebe53b65e5c898ba761eff4e7253b731545f2","sha256":"fa9928034ca4283f8f90f27b8cf2bb42263b608c25632fe1334a022235e1b24a","sha512":"e8c1d8625d1090829c6ee18ecf5129bb15e476933da55c495b583663baf6fbf3e388b26fa70bd14e421e6fa71855054f2ece6fd6dc11bf581c12e2351511a3db","ssdeep":"192:Vj9jhjOjK/OaaUl8PzEzj081B89E7vlCeNA:f//FxtAE7vlCeG","tlshash":"aae1b963f9f925be10938272316e7b197de48013dea608a576edc1720f8df85ee03244","first_seen":"2026-09-22T10:08:56.512085Z","last_seen":"2026-09-22T10:08:56.512085Z","times_seen":1,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6644492b8af90_Wojciech-RABIEJ.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.732Z","timestamp":1790071673732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6644492b8af90_Wojciech-RABIEJ.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2V6ZenRX%2FNcvmNxrjqP9Qwzw4v%2Bfo%2BHMvqYQDi%2FvUx89Rl6kHulvmkK%2Fk8V%2FDpWqvkASFus42aUYEGg6s6DXMY8G1o1NQVcGoUbRjq6U%2BrjSKnUsrHWOIQwDI9y53Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158d86f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"e78431c5c4b1b295812e3303a0860352","sha1":"7a390ea86b0fbac8c5cb5ed6c08d0edf518e628b","sha256":"6a0d215fccf4f56918fa4eda33bbf641ab0e248448997eeda8fb89698609324c","sha512":"33b83306f7b7d3f67b9434775d2fc1e543550cb85375454e6a314dbda869de2dd595808832575ff5d20908bc5703d7605df9c853dc87dee2a11e2aa4ccd23f99","ssdeep":"192:Vj9jhjOjK/OaaUl8PzFzj081B8917vlCeNA:f//FGtA17vlCeG","tlshash":"2fe1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07284","first_seen":"2026-09-22T10:08:56.513218Z","last_seen":"2026-09-22T10:08:56.513218Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.109Z","timestamp":1790071674109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 65734\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-22T11:46:09.600575Z","times_seen":344750,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":2,"connect":34,"send":0,"wait":20,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.119Z","timestamp":1790071674119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 65734\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-22T11:46:09.600575Z","times_seen":344750,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":27,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/css/bootstrap-icons.css","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.591Z","timestamp":1790071673591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/css/bootstrap-icons.css HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HUZkjpzdnl%2F%2FBruraXraxvJgosBAJX5lYAn71Zhd%2FJjk1gn%2BAiIhXwOGY%2Fs1z3VtzbEMOrDLpEOqmlGv5rb2D24ijkpw0RtoUqv5%2F2n8YL6DjUVlqtbKav6Qtnlh2g%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ed3261-11df7\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08157ffce120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73207,"size_decoded":11137,"mime_type":"text/css","magic":"ASCII text","md5":"fa4b5aaa84bba1677522d110e4d1de84","sha1":"0068804b46c29e58f9cbc14aa801391250660ef7","sha256":"7bb2abfe2c1c8e92df9e38f6a3ea607603cea690f9a18f243d14275352050176","sha512":"409464872bf7df76c6d01fb32c035ba0f83cfe4a4304e0ffa36446e4f4097a0fe3d741b83cd0ccf5cec4194561a2c3263e6edf688936ffd250e1fce0c1e6cfaa","ssdeep":"768:Yqnm8OAL1Mzocm4KyH2CuwZwmij34k4RDlq:tOocm4FuwZ5ijINRDlq","tlshash":"9a63efbad18f15f99341e4d92743674293aab97ce1813c7ad342399ee3c06188ad73dc","first_seen":"2025-03-20T05:17:38.603749Z","last_seen":"2026-09-22T10:08:56.515024Z","times_seen":25,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/css/aos.css","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.587Z","timestamp":1790071673587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/css/aos.css HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LM6a6g0%2F98vyfFRdTE%2FA9UwL9C8EuS%2FhyvCS05mjEAvlzaCslpzVCGf9gAYLIgEeRBRtzihwiZIs4IvRiI8cDUqQVR%2FIAqVbDbs827ZXfc16%2FIMs%2FZf3CN9jAoyj2g%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ed3261-65c5\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08157efcc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26053,"size_decoded":3019,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-09-22T11:57:12.497785Z","times_seen":46473,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6645c9bf0bd17_Kuldeep-Kaushik%2C-NN.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.690Z","timestamp":1790071673690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6645c9bf0bd17_Kuldeep-Kaushik%2C-NN.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-83b1\"\r\nexpires: Thu, 01 Oct 2026 01:45:57 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 116516\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNazgKykVuY1X6P7TtfV7ChHNXJqCW4Jzq1JwBoL4ipAL%2FSm1b%2BDcEM%2BmKKXBQdUf%2BZO6qncBcX%2BP0MGcaS31ASWI3iDu%2BW2qU2bRjQJ5ckSMMPD3viLYhkLT%2F8vIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a842120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33713\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33713,"size_decoded":34494,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS R5, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 12.2 (Windows), datetime=2023:02:20 14:56:26], baseline, precision 8, 150x220, components 3","md5":"e12f090e38563100927db14820ee44b3","sha1":"4c210abf9dc9df7ee2842ad475b28e4de0000ca4","sha256":"d0619f9c00c39fab9145690772e30a07960d284d65c0b467096a514c4d33fea6","sha512":"47ca172b6a708de5a5722f4ade5b9493d5baa17cf6ed5b919024a439e972db6f42786aafd252e64bacbed82d97f0ddc52cec8bc632f3e56326d32650b932340b","ssdeep":"768:STf7s66k3/s6tK9tywRiOBgjV0geuoy9m+EOrBORQb:STf7s6HZtXV0ruJo+ZrUo","tlshash":"b6e24a38fd700dd1d4ad6d3fa8da52c56bb65782d9438c0bb8ec0544af52bc14d8b6b1","first_seen":"2026-04-22T10:52:57.267983Z","last_seen":"2026-09-22T10:08:56.516295Z","times_seen":16,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/62ff732fe0bcb_Menekse2021.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.730Z","timestamp":1790071673730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/62ff732fe0bcb_Menekse2021.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ardd%2BeqHngrTnXPkBgsDL%2B6HCjWln5NOwljll9f6C3G%2BCfpcEOFrKYsM7UrKqPF7LVplp4gd%2FNG2Wc6aXviFzibIDE8mk81XvWfJb4m%2BZWGNyNsoL1ORdOge2t96wg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158d86d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6c7c3ca21be66bbb6767b73c7e39f41f","sha1":"f47f3aac36f4afcb8dc77d5d23ef1d3243315bd9","sha256":"15053b2679bdfb9d624212c3be5dacee2c13d0dc3e80e6d3ec228873dfb1bbac","sha512":"fa1e49118c80201e00f4a9429328bca1befa9bcc4f76fc0cc65c491e7087d9dd9b74c3a9c3d9b914ae9d7af6227b64ddbaf883199463b23a1c3ee41fa2466e51","ssdeep":"192:Vj9jhjOjK/OaaUl8Pz3zj081B8937vlCeNA:f//FstA37vlCeG","tlshash":"68e1b963f5f925be10978272316e7b193de48053daa708a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.516945Z","last_seen":"2026-09-22T10:08:56.516945Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.google-analytics.com/g/collect?v=2\u0026tid=G-BMK8WEQ4BT\u0026gtm=45je69i2v9117937641za200zd9117937641xf1\u0026_p=1790071673278\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1034600199.1790071674\u0026frm=0\u0026ngs=1\u0026pscdl=noapi\u0026rcb=19\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=115938465~115938468~118897920~118897930~120213116~120385423~120469145~120469153~120591196\u0026sid=1790071674\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Frolewas.com%2F\u0026dt=FIAR%20-%20International%20Insurance-Reinsurance%20Forum\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1404","fqdn":"region1.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.313Z","timestamp":1790071674313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"82:1C:33:18:03:EB:A2:89:36:B9:B7:0B:89:36:C6:F8:57:69:F4:1C","sha256":"29:1A:84:B5:D8:A3:49:02:4C:D7:48:7A:47:10:FF:83:DB:BC:B7:C9:20:8F:70:5B:F6:F8:93:22:AA:34:24:55"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-BMK8WEQ4BT\u0026gtm=45je69i2v9117937641za200zd9117937641xf1\u0026_p=1790071673278\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1034600199.1790071674\u0026frm=0\u0026ngs=1\u0026pscdl=noapi\u0026rcb=19\u0026sr=1280x1024\u0026ul=en-us\u0026_s=1\u0026tag_exp=115938465~115938468~118897920~118897930~120213116~120385423~120469145~120469153~120591196\u0026sid=1790071674\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Frolewas.com%2F\u0026dt=FIAR%20-%20International%20Insurance-Reinsurance%20Forum\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=1404 HTTP/1.1\r\nHost: region1.google-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rolewas.com/\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-origin: https://rolewas.com\r\ndate: Tue, 22 Sep 2026 10:07:54 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:139:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:139:0\r\nreport-to: {\"group\":\"ascnsrsggc:139:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:139:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":835,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-22T11:48:35.125238Z","times_seen":18601175,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":8,"connect":11,"send":0,"wait":21,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/css/style.css","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.601Z","timestamp":1790071673601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/css/style.css HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxOI3lnMuIYitDb4StIbdvwbObLfYS2GhiVNXEbWrb2aLAdhWfnrtBkK0Nq6MsOkKeg3e8%2FFkITAoyToxnuzO1Lnu0cCIUs8YIsfPiLad7JoGntCh7UFpQHKt3p1jA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ed3261-98d8\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081580fd9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39128,"size_decoded":7392,"mime_type":"text/css","magic":"ASCII text","md5":"5aff55579196f559ae76de4c6621f6ae","sha1":"797d112823d27cc1b8fd68bd59d9affcc8173848","sha256":"753e034e057c87fec8ca5c60cbcee192d7031d7a6681b2dd7d58574cf53825e8","sha512":"5e1db8a08e5ee2bcdc30609e73efed4779cd95b9f8c3e63cce28de85ea7062723fffa2b25ce2d55e068dabb4f74d66c0c2fcf5e3b97daa188e0764b3ce654308","ssdeep":"768:DZH8IluVSXRAAF/Sw0Z/vg3+mF1FOFvzm3XcZeRclSFpFlnF3hxFC+hXWc:D18IluV4AA5pYvjmzYZC3sZeRcl2pHn1","tlshash":"900363da6fba1900301fd978bd626b55fb1c8002814fddbdaba8105cedc95e8926f74c","first_seen":"2026-04-22T10:52:57.320445Z","last_seen":"2026-09-22T10:08:56.518902Z","times_seen":16,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/purecounter.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.618Z","timestamp":1790071673618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/purecounter.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U98gxh1jEUJyqnNqpKD0JoOwPEaMVj5c30ejukBi1r%2F5ZSMjiqXlzkgiOLRMx0vGIU5xfE4XdhXiYh6gKvHqLuwv5%2BGWGdCKloS3zchsMaX4ih2S3AGC3LChC4PsHw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-135e\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081582fe6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4958,"size_decoded":2764,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4710), with CRLF line terminators","md5":"88f426ffdc9195a9d2c9ed57e4d455ac","sha1":"fd238664085eb447d8b43f1d7ae6559514f12ff3","sha256":"675a4f9ed42b4f59403f2d02e37354bb5bd25628315aa1fbb752f238f7fffc72","sha512":"aa16d16246ad57da2e1e4450201bed8d4fd6ad16225bb41b59438298d3c6dc55c9815f3d7dbf75d19f08533b608b58ba76d19bbe1defee565284fc0022be850c","ssdeep":"96:DRHNzrGvgjMuxcx2E8nT4s2iI2TZfSotBgorfsWAPy0GUCSv:DRBogjMIy2E8nT4xYZfSotBgor0O0GUL","tlshash":"e1a19598b382f8b38297612b145f2302b23161947075c858f779e5c17f7689be993f3a","first_seen":"2023-03-07T12:09:11Z","last_seen":"2026-09-22T10:08:56.51975Z","times_seen":260,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/buttons.flash.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.645Z","timestamp":1790071673645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/buttons.flash.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSffWvER37boNendNTDf6hFEM9byea8Y1mbHhltAbrALUIYOk0cfhq4k9SrFNa7quZ8UXbza2gr%2BbANJAKmIKbyczbNoeXp0K%2FNGTC6LODs84dy8jRkKvoefpWQNjQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-6263\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158480d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25187,"size_decoded":7276,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9583)","md5":"b64381f1255c1ce28829b3cd179a3e2f","sha1":"9e94cdcd70e04cf82d67ca2a0f7df5688e29f55e","sha256":"ef9b5df3dd85bb2249c08712cccac3670e5ba2a8f9436365b5399af824b9a9e3","sha512":"620f518b5b9f57d0dcf742aeecbec18629c6a6f770dc109b4373fa01862a90535ae4fcd9330c4b9c28285c87ceef2d6ce46b080bdbdda98c606756807fe20c09","ssdeep":"768:7uRZ5bGLyL8IB+xRHxH202ugUyLohAZeH:SRZMLyL8IB+rH5202ugUyapH","tlshash":"59b2537573205015a71198fcd5baf00222af5cc384e28aa4f9695db91cd8dce2cfabf5","first_seen":"2023-03-07T14:53:26Z","last_seen":"2026-09-22T10:08:56.520699Z","times_seen":19,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/vfs_fonts.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.652Z","timestamp":1790071673652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/vfs_fonts.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZXRzCO6CPTJuJweB5Oq3Xt8f4UmUkNfsSW8cI2ionHZpMg7CgRfCIZJiDMJCuP36jRL3WzwTamKzYBjrNX%2BQ1ziXONnuGnjdsxlnAY4E%2Bf3biEsYi7K2inbvGvoSg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-8a956\"\r\nexpires: Thu, 01 Oct 2026 01:45:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 116526\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081585814120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":567638,"size_decoded":293495,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f3770e5dd1c10449f7c17b600e3ec84c","sha1":"8f39aceb13a7cb882f13e9610c2bf4a23a499135","sha256":"40b18b95276892171570743455572ce40fd5ea34c14816636e6fa8c5a7b657b3","sha512":"f328eaac8ff685f947027346f9acecfbdbd3fa322c515314260b3801fd95ddbb234bd09f472f30c74243d8b88655182060214d4f3abfcc625892507f71f13766","ssdeep":"12288:J4UHAvaNDxVY+fyZVF6yUd0sUIhuhZe+rR54iFFqFWna:Z9DU+fwF65iIsNrR592FWa","tlshash":"a5c49df30907fcd26b783a40099c3f915c6c2a97e319e508f9454aabb0df520eead95d","first_seen":"2023-03-07T01:19:00Z","last_seen":"2026-09-22T11:45:12.269839Z","times_seen":284,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/63dcf8956bd13_en30.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.673Z","timestamp":1790071673673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/63dcf8956bd13_en30.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-2c4\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7aWsZzdMWSve3Qd8gjDXB1VRk51FrzCI4lZXKFL3NMujb0jYhj6W1PGWE%2BIjPOrBPLqdjX6lBBVB72eoExaQt9WLY5RnEAxIfMCCj0fsHr6Kw7eEZXm9aVmUFS55gA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081587827120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":708,"size_decoded":1473,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 30x16, components 3","md5":"28af6ecd72ee517f11ba36f667e104d5","sha1":"21a8105b85c58a0c19bee351f408885d9d49fec6","sha256":"770e2abe9b9a650da291d97307ca2749295f3ff7edc8424704a0e7432ef8f6b8","sha512":"506dcd3b92df6e614cfae4826e13bc27c2ea11b6fcf8259c3298157d08ae1a21d8f1a9788737b0ab652c4654b2584d30852d477f9b28151df0ba41dd079deb6f","ssdeep":"","tlshash":"5101082749edd265fed40d3b424f02c56cbc9645d73b085d0b570f9c81371d6da24d10","first_seen":"2026-04-22T10:52:57.302457Z","last_seen":"2026-09-22T10:08:56.522125Z","times_seen":16,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/jquery.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.634Z","timestamp":1790071673634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/jquery.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBOODzOiclNzBMTy6RVzTtPamrJO4PT2dBUJL2zN2p0ZLm8bAOLij%2BgjELY6Mluh5rm%2BVBgMo1F8RdSuqNyNReiKVciLLRj5wupHJtCum52Eqn9KVPdx2n0%2FXrduBw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-1538f\"\r\nexpires: Thu, 01 Oct 2026 01:45:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 116528\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081584803120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86927,"size_decoded":31144,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-09-22T11:40:08.532879Z","times_seen":145590,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6294851498aaf_alinabarbulescu2%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.700Z","timestamp":1790071673700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6294851498aaf_alinabarbulescu2%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-5c38\"\r\nexpires: Thu, 01 Oct 2026 01:45:57 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 116516\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8H%2FKDrN9gbawo%2FSEcV2xvTcwGaQZBldxjo91sMHZCrj0SlZDwbdgZrkExnZAi7WAdQjzMb2lgXg4tiOBe8K9yjdwIaW8OX%2BQaBVaU3uFVi1eno89t%2BwcPJHf%2BdEmHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a84a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23608,"size_decoded":24385,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x220, components 3","md5":"e447be68f995c3bfda457d46e81841d0","sha1":"a7253306eb5ee031137916dd842679e26ca5b6bd","sha256":"4e81d86407be39d1dea1bc8e0f89708c21d5d51ff5af009d3d82f622e55a3d52","sha512":"0ca8936dda7d362f513d62c22a8fea448e578994a1731831a496c534a135d60a1e72e20dd22a6eefb6680ce6724c8af554ddd5ebc24c40c363d7c52d72a27194","ssdeep":"384:2qCvOZBR8PJMXC0SVHhgvlpXE3yUQmPbI0h9AWS63GeiRonW1AOlbnlGt2w7nMpR:7kOZPfSGlpXWQmk0XAWNpa1AOlbnYtHm","tlshash":"a5b2e1299521a8293d014ae1e48c9127437fb96ca8f59f7f8b79e81ccb00d1fd18163a","first_seen":"2026-04-22T10:52:57.330105Z","last_seen":"2026-09-22T10:08:56.523679Z","times_seen":12,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/62838ef754dbd_claudiusofron%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.729Z","timestamp":1790071673729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/62838ef754dbd_claudiusofron%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iruZjdxjFaaIFk%2B%2FuH%2FRLAtxPBbxz8miWsaOU7c4rgZvj1GkK0OKcNLYHY4xVE1ZT5mYDBhTu9Bo93KrY44%2B0ZgLfB4JVX%2F3tCKTgKF9liFy6yNGwhHU%2F6Kkit8ndA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158d86b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9258912f08cadfd28cf992b6a0dd148b","sha1":"b8c6413bc28c84c62ba2981f181e760241c6d3c5","sha256":"6c447b35533a8104702948f484d409cdd1c62c03e2117f37137bbcb027b44e3e","sha512":"457508cfd5a6c6598d50cfe8c9debafa23d7508855bc8a1d6b88b217f7515af8b82910a48c3c9d8566622763d9052cb08c9a71975917b0f68660566484f125c9","ssdeep":"192:Vj9jhjOjK/OaaUl8PzZzj081B8957vlCeNA:f//F6tA57vlCeG","tlshash":"0ce1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.524414Z","last_seen":"2026-09-22T10:08:56.524414Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/62836879212b5_alexandru-ciuncan%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.678Z","timestamp":1790071673678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/62836879212b5_alexandru-ciuncan%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-158b\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HQFlO1g%2FQdUAhB7RWTXDl54HgY4tWEioHwy86rz2cExAMnKRHmp0f3F%2BHQJEsDjBWpCUgXvBhMkKyN%2FWOPeMhJe%2FZuIADh5R6c7oXrn%2FVI0ZgV8vUTyLkzV%2FPAyP7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081588838120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5515\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5515,"size_decoded":6292,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x220, components 3","md5":"cb778623ff51bbffdac33b4de602a12a","sha1":"96332167d397dfea04dd50a3f2d9f4adc4e6c8eb","sha256":"9d9e014aee9210e4bdf58bb727776ed7b4ae46f389780bed10f5090d1191464f","sha512":"59826d163a1d82f3615f4918e74b0906b50d5d96b17d5791eb5d434e87730d011724f6022db84923a3612214a375f9101e873f571e5e208559180e385d04b634","ssdeep":"96:C/LOfWJV4qGYScmQC//i9RqOwRXZAeN+o/zbigch3HYCStB8Wf1WVjs0xz9ZTRkI:CTwqdmQCXoqOeXuerLbDqyt6p+0l1krE","tlshash":"80b19e48b4d71182e1bcf0761d878a80e2756051fe59280f3bef863528a01e9f33d0bb","first_seen":"2026-04-22T10:52:57.383025Z","last_seen":"2026-09-22T10:08:56.525722Z","times_seen":15,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6283a4b4ba600_Roxana-BALUTA%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.726Z","timestamp":1790071673726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6283a4b4ba600_Roxana-BALUTA%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B2BSRjDnykXFx%2Fh82605Vn5TlWT3zPvSeBPU4EkbxtbIROhvqx9HsZ2E5ofRtjL9eZ8lgyZZuvCVst%2BmRnQL%2FvK0FR7vWFUPNXKhPiLW4OS38fsSVb5pvgGf9M71Kw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158d869120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3c0295fb2c77311d2778593ed859b1eb","sha1":"94da521d3c1fdfa3b6e0adf39436587e2a805f8f","sha256":"d4324cd66898d1cedb38860c7aad689ff8f0cc5657dca333e899ea1d06764900","sha512":"8d2654d7b8faa54ede00c220f5330e7d868699d79e8b44709d16a0578aec4a0d63514a2b4a8fb547bbb963cb8e66e25e5ce9400d56479ef1a773dee772df1eda","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzqzj081B89m7vlCeNA:f//F/tAm7vlCeG","tlshash":"94e1a963f5f925be10978272316e7b193de48053daa708a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.526454Z","last_seen":"2026-09-22T10:08:56.526454Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/fonts/boxicons.woff","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.303Z","timestamp":1790071674303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/fonts/boxicons.woff HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/lander/raketna-nebespeka/css/boxicons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:54 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9cwk2o1%2BAweZCw5vpOaCbR%2FFTv5l6SFD3%2FGc%2F9Gm4qfZtCtBBoLXsEg7r7nsTOJ98p3Crne5yjuNKfaCGDU72R4tN2qSH57%2BFgpI4ISKMmknLYl6%2F%2Fu3lqZ4Dmbi4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f0815c7975120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7932,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ffc02dd7b2bfb0885a68d688c7cbb2ff","sha1":"c4aeb97fe3257aa17491050cb16acf2ac7df31ad","sha256":"1b78cd4c060ab622cc1701d68203a236f1b4559c4b5bbeaa958f7871ff5cd7b4","sha512":"976f8d51ca48ea07187024665341f1104081c0c900308fc86bc357f885bf902c4f532011ae596cbf3ce096eab618ca5b998fbc729676357a2b1ef62b0bcdb210","ssdeep":"192:Vj9jhjOjK/OaaUl8PzOz4081B8927vlCeNA:f//F8tA27vlCeG","tlshash":"59e1a963f5f925be10978272316ebb193de48053eaa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.527536Z","last_seen":"2026-09-22T10:08:56.527536Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/select2.full.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.660Z","timestamp":1790071673660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/select2.full.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2tqg0mHTiwoSOY8ZnxRah5h%2BKGGXGkCrDOU7qdJflt8k%2FS3fVrhzGQCtsc0pTbgLfcA%2BlpxEuZrvkWkRg8k%2FIlb0ayCdQOOruuCAiyGPda6opA7WhVeNDbT9%2Fpnuw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-124aa\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158681c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74922,"size_decoded":21961,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64217), with no line terminators","md5":"cd78b47f8f1999fb4d258515099231d0","sha1":"7e3e2b4cba7cfc0a549a2dbe53a76880dec4e535","sha256":"15c54892706255193928b41e2016fd55076d15132ac1f7d7c99f83f2ad2042ba","sha512":"a2c41396e6f49aca5b17c726ab9c72949e640898b8db1825aa5b70c76a4c234fc8efc639e5d2a9af74ed2c1ee70936246b5031a45d5d38079215b801c83bd2d1","ssdeep":"768:V2oLNdg5pTFxxoiQduQLCyXwGBokOl/N6QTeeUBo47RTeqX5KnZprIf/ny0RfS9/:jr2xOiQduE2kOZ2kqJOHrAvf2KHHe","tlshash":"0b73c848be537235427f20e6656f000a3137ab7eb00956a8b458cde86ebdd14726bf3d","first_seen":"2023-03-07T13:50:14Z","last_seen":"2026-09-22T10:08:56.528814Z","times_seen":1095,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6642f8e74b04f_mititielu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.677Z","timestamp":1790071673677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6642f8e74b04f_mititielu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-2193\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W0tb5PxWw1C0YUJpOM2biQCC6qpsC2yWXzgohcLuDPEmjbMWehLdLx7bVIxL032701mlKCMSIg5rfiCufDRgnHMlO9Zh4cVoLywJpf07FX%2FwGXjFMwbNCU229%2FKRug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081588836120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8595\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8595,"size_decoded":9364,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, manufacturer=Canon, model=Canon EOS 5D Mark IV], baseline, precision 8, 150x220, components 3","md5":"b55722e49cc191a13542fed4624382e2","sha1":"a6ca1093b9bd6cea129105b3f3b828bd4c341d10","sha256":"5f74eca5c71fc19681e940673112630c2ccf2a8b84a902e9ae684e41873b4b94","sha512":"526a924912ca194f5102f919bc32f6eea7a2e222424d70b2b43c1952d75fdb18cd34194e48320bf27ab80bc74fb9ffd026221601e92bb3c7c278972a885873cd","ssdeep":"192:kDun2M2jPMi/J9iwRJruiNd6ADII+5Y6rfZD6fqj66e9im0H:kDun2Fjx7PRJruiNdh9TiZD6iW6U90H","tlshash":"07029e1e763de480d209ed7049d61b187b1ee60d30a0593ff46daf9d6b2b0f1194a3e2","first_seen":"2026-04-22T10:52:57.273646Z","last_seen":"2026-09-22T10:08:56.530407Z","times_seen":16,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/62947b983cfdb_stefan-prigoreanu2022%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.685Z","timestamp":1790071673685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/62947b983cfdb_stefan-prigoreanu2022%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-5fdd\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0xNIWhk7ea6f513Ngtkv5bEJ4AXg2YeBZ20TBv2t2%2B5lbfcyZiueqXzH8pOCxgMsyzuge8V1Pd29OflE5bHKHdM9jlTgVUlvoXcZ6gTWTFdTAdsAAmtmi9Y9eM3fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158883a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24541,"size_decoded":25309,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x220, components 3","md5":"1cca9ff2711c4676a50f05a6ae6cf0ce","sha1":"ee7d4a52e30194380c2a32bbb7a4daec964ba175","sha256":"98ff66894d135182f4a882c9ec440a7e98e8a3658ebd2acc6285977aeedf2cc5","sha512":"344839452ed3fb9b2b9f60c21129a4206f4ceb3f42dbba0334eeee2b428105943489abe605b89a5bda9559184c68b42626aa4177202858219bea4bac6e209f2c","ssdeep":"384:htV7EoJY79qk408tN9ZzeCqgOgGlR/cJj0zqGlbDLV62jhtCa7V8eKKy9+40:3V7zJgV3i9Z6k2W0eGlX5nCiV8eKKy85","tlshash":"a5b2e1b5dda35954f80ca67e6c0dc36fe991e4b2884b376d10611acbf961b9f6930302","first_seen":"2026-04-22T10:52:57.264365Z","last_seen":"2026-09-22T10:08:56.531288Z","times_seen":16,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6489916d919c6_soncuteanu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.686Z","timestamp":1790071673686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6489916d919c6_soncuteanu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-15a4\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twJtEXqag7JRYgNAWASccmWaodpFQZkXQg4LexCP4cRKjO3%2FhO7dHbZmtrOHgGIJ3ACv8d0Bv66OqMzt2hVeA%2B0m9mTt3nPlN4DZIZ1cYd8Sk%2FZPHEbXgkfhEJNV0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158983d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5540\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5540,"size_decoded":6311,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x220, components 3","md5":"db8ed620ef44f31ab302138e754c28ba","sha1":"2d728de8e035728af5bc059ad26232e13c2f3979","sha256":"3f585dadb01b0158467c84b74f858b252d59acdbd2c735fabd00c6c3595e80ca","sha512":"a97c687bb603d91af618dd1340bce39d9487ccbd4b94449fbd21e67f252228cea1a1f38eff2125a8c2fa18932a742736da624865c604322a92960bb9b71b4d58","ssdeep":"96:CAYOiinlmdAQanQnLUPQnEGvYcvQvJyJgKJVb2CSKRwb1IZNqLqtWrT:CiIdjanCAPQnE2QvAeKJcCSpxIZyqM","tlshash":"dbb18d8935705e07d9b8d0f40e291ab8ef67e0b4a095113ecbaaed1951bb94252272f2","first_seen":"2026-04-22T10:52:57.266898Z","last_seen":"2026-09-22T10:08:56.531939Z","times_seen":16,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/64de1fbdc52d0_TbiBankBlack123.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.753Z","timestamp":1790071673753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/64de1fbdc52d0_TbiBankBlack123.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kNv4IwW9qiuA0ZeeIZTFMoJjAaJ4MC97BtptMoiu%2FfqvWL2U7hFkGK4XMEBi%2FaFw%2FzLNtFLwiBKQqG8NSJuMQw6emmZkppvvRvfMhuz4khObIcbEg1N7mLSMxvUYYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158f888120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"2eee517e3f5875e4d2e7123a5cddecfd","sha1":"083e1affc91a1871ab3b366a016c6698a54d9207","sha256":"c8452bbb1652268932a001c22ea0de7283b8ed05dadb1b2b7765da7e2dff0988","sha512":"3eacb81bf681556a46c13feb03dfa8315ad9ca21a342513a6484fbbb9bdfa1513b3cd108e2536e876572e82e2e5bf048ab3a274206753c183051fcba04a50b30","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzfzj081B89P7vlCeNA:f//FktAP7vlCeG","tlshash":"e5e1b963f5f925be10938272316e7b193de48013daa608a576edc1720f8ef84ee03244","first_seen":"2026-09-22T10:08:56.53253Z","last_seen":"2026-09-22T10:08:56.53253Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/buttons.html5.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.647Z","timestamp":1790071673647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/buttons.html5.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WlG%2F09kXRz9dyqtGSWzOg87I5t2eLedGv4yJ%2BMCDpJeu8AQIKV5ZG%2BhGsGlS89dvMpA3Q5ytYTYBgT3YNcAfsIl242pH703brj2B0Q7xF%2BRRot4Egrsymbqh97k1DQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-5a5a\"\r\nexpires: Thu, 01 Oct 2026 01:45:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 116527\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158480e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23130,"size_decoded":6891,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9839)","md5":"9b0c9c0cbcd208b5646f486d8421170e","sha1":"25a8e4283d70e36ec414bf26617709f0558dd71f","sha256":"36b6bcfb23dcdaec0631daf3b7e516bebdc8355f06a79e1dcb313a4797220f31","sha512":"65f4548ddcd5eece9b6a705cf53b8ded7d9b814dbcc7c1a2b3cee273d1cd91feebb0b76a547bd1d6a3de7b18219ff23be6c0adf52adbe7b029ab58f9772884da","ssdeep":"384:mFlgC4cAHJHzTJLyL8IB+xRHxHXmlqXmugUgy0fH8TSRN8TSR2PoZaQug/Avm4pO:GlgrDTtLyL8IB+xRHxH202ugUwAvmEFs","tlshash":"13a2ff7573209050ab1159fce5faf40212aa6dd388f28660fa594c781cdd9db2cfabf1","first_seen":"2023-03-07T14:53:26Z","last_seen":"2026-09-22T10:08:56.533657Z","times_seen":47,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6650c53604ce8_angelavoicu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.702Z","timestamp":1790071673702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6650c53604ce8_angelavoicu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-1951\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0nf3txrQ7p8uRSFVaHHs04nHeNQiVSFJm%2F2HIrVhSZ%2B5jehrUTcixOb7VkPhUPU%2FBNsIgHmOs%2Fd5WzXuqRkOsQK%2BN7S5rC%2F34ot4DnZciDvOPng%2Fm3CsvIQhnJjczQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a851120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6481\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6481,"size_decoded":7260,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x220, components 3","md5":"c41986e96bf3706d30f528307fbce55a","sha1":"f9a05521b0c602f9c7ea4dab1d6aa1746f79b791","sha256":"f4c5ccd9df9c811d99226a627fd6739fa5faa534cac8ffeff2fa130cf5960cbc","sha512":"58435596d5e7f2351ba4981a12cf14605145c995669f274370d0a252030b82e8678d25304586fe8705cf2be9814d68767fd0f6d1627ece1454020957500ec0ce","ssdeep":"192:y6kNOc6hs0Ok32BrXuFWShVNsMnULhDcEU:yxNhk0XDkNskUlHU","tlshash":"e7d19f8a3a9128c6ef55f7bc3998439132d695e08fef154d142bf564ca353f9302e1c4","first_seen":"2026-04-22T10:52:57.359477Z","last_seen":"2026-09-22T10:08:56.534299Z","times_seen":13,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6650c84c1b6ef_andreitrofin.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.710Z","timestamp":1790071673710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6650c84c1b6ef_andreitrofin.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8M6M5npnaTFNVLq96luLzgbER9155DXNPHwB6TQfQt6pg69HIND7GYt1vsIE2vCiz6Jh3xSxUUzbiaUd%2F6KDeehmcGUvACwoWsTMH8BbB6eWKu%2F3M%2B1OLw%2BC0uNuig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158b85c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"35200b55eea7ac95ea94de69dca3888a","sha1":"605e1b51dc3f271b8e9a9af37f63dc47caf1ebdd","sha256":"944e9efaff61701a87f9d35c407e67093579c5fa0fdd076689b11829ce0bbe95","sha512":"9977eb96afb340896b68f8d19100b5fa78684303a0765849453beaf315b2c12db2ff8964d30a721ff26892abf5d1add72ddab2fdc5a4c0f380df5ee8f870c505","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzrzj081B89/7vlCeNA:f//FUtA/7vlCeG","tlshash":"dce1a862f9f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.53498Z","last_seen":"2026-09-22T10:08:56.53498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/664f6224eb865_lucian150.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.717Z","timestamp":1790071673717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/664f6224eb865_lucian150.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zL5XM4LgSjH5KeaVj8F34Qpc0aMVq5Sslgza%2B%2BHxNJZXohSSbCDR%2Fb7Us1H7gAr2BZI7VxfKrpdDAyUAt27387s3xCFgG4sHdGluFIwREvXOoDu1i%2Fl6%2F8G1jrC%2BOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158c860120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"54d61d40fb0b9d4801f6534bf96be867","sha1":"9658f5c4113b299b140eaa1886151adc61d03958","sha256":"b1f299368307896431b3aee72242f18d11c41e40f33dce66838812f71b082fa6","sha512":"9bde2558eb36764d7b04b23c152d5e0041b33fd3fd96d3fb5631e1e38fa58779329d598249a397434fb5d81dbeaaac07183ff5db1cda34b5e1871c7ce288220b","ssdeep":"192:Vj9jhjOjK/OaaUl8PzGzj081B89i7vlCeNA:f//FbtAi7vlCeG","tlshash":"b6e1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.536134Z","last_seen":"2026-09-22T10:08:56.536134Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6296084dc6dc0_unsicar.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.740Z","timestamp":1790071673740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6296084dc6dc0_unsicar.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Sz9vfR1dXm%2B6B%2FtSxcCGcI2nhCdltUv1RN%2FC%2Fwonpl5E0WWLBpMUxvTI4S8ys2LBkd4fTGY97l2YXmqJagoo%2B8M%2BVgSKTw%2FAr%2B%2FREMqsu7OFpdlTGlb1%2F9J0KBOow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158e877120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7936,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3db09c6bf461c0f59ffdbaedb501fde0","sha1":"13e9eda27f9d3d49fb3436d3c0a847bb63f3affa","sha256":"5eeb6d8099fe2cb8f1ebe5556935823c63861d4a86a41a16a39ef6c43bc0b0b8","sha512":"4df4aa9a18c704007088f3efae996536ee52408cfda457284b778498146af4eb4055d62f4252523c5a2a070bc0b1dd754f46473b1a9a47e62ca71924abaf5729","ssdeep":"192:Vj9jhjOjK/OaaUl8Pz8zj081B89g7vlCeNA:f//FdtAg7vlCeG","tlshash":"7ee1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.537311Z","last_seen":"2026-09-22T10:08:56.537311Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6629064bcc8d9_REIMPACT-RE-LOGO180.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.752Z","timestamp":1790071673752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6629064bcc8d9_REIMPACT-RE-LOGO180.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUFC%2F2uRRzgdjeBhmvMf1j5fzJFDu5wdNNfLmAO%2BJTKyvDWnp3CkBZbxWHndZLhXGEQkwsBC%2FpQ52FbiTupGNifpXpQnTIVJRq681OEpm%2F8DX%2FC6iQ3Ku9FLu2ZzBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158f889120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"85d4f1c348bc64e2a7011633cbcfe41a","sha1":"02a7d628a2a71aa60a0427dc5f517cc238f45f7a","sha256":"3745ca34dc6c2326497042e3827d07beb9a1d9c2f00ed736ca3631b6e7b02f2c","sha512":"86fd5bac4aa9d45e31d57905dbb7fd551e2ebfef0ecb8792b2939589f80f369257ea763d829588e797062577b6f959fe71d185b5bcb5070e31f17c20fc3bbded","ssdeep":"192:Vj9jhjOjK/OaaUl8PzGzj081B89C7vlCeNA:f//F7tAC7vlCeG","tlshash":"9fe1b963f5f925be10938272316e7b193de48013daa608a576edc1720f8df84ee03244","first_seen":"2026-09-22T10:08:56.538674Z","last_seen":"2026-09-22T10:08:56.538674Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.114Z","timestamp":1790071674114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:20 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 65734\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-22T11:46:09.600575Z","times_seen":344750,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6645d14194ba5_rosu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.688Z","timestamp":1790071673688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6645d14194ba5_rosu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-195d\"\r\nexpires: Thu, 01 Oct 2026 01:45:57 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 116516\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9WcnolkJT3qRrgyJL3PqSta6lRevM%2BiO3DlUKOzGW%2FYf6HBe6loJC5yiS3oD1hGOeCcBIsftRHUJfk%2Fn43CJyfGNZuV9%2BBuc%2BKOUp7BRiD%2F7MD8zALFYNI7P%2FYFHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a843120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6493\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6493,"size_decoded":7273,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, baseline, precision 8, 150x220, components 3","md5":"059ecabda819798925ba1386a5b338bd","sha1":"4101d92523e2096646bd3b3c82d307376be9fe8e","sha256":"db4cfced435b121d2c9228a4739ed40d48499599247b7704195acda4d69330bb","sha512":"307ce80181734850d1213810636829d4e9d3740eff0a51c459e5d42c656d944f3095b1774c05e6ac42a61342bf71bdb8ebbe4ad674bd35cc2ea0b37d500f3af3","ssdeep":"192:yP7naBeugX5WUcRH+5IHVk9j2xnqqd0B2CEz7j:yjnCgpdy4n8T+BJUj","tlshash":"44d1ae42fb389262cc01f1350c8637af78e1125028b9b27cab74e39c4724a583d65f7b","first_seen":"2026-04-22T10:52:57.306511Z","last_seen":"2026-09-22T10:08:56.540131Z","times_seen":15,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/664d8135bda6b_Photo-Dmitry-Kayutenko.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.694Z","timestamp":1790071673694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/664d8135bda6b_Photo-Dmitry-Kayutenko.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-1567\"\r\nexpires: Thu, 01 Oct 2026 01:45:57 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 116516\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3eeaWDh%2B7Qykg%2BI%2FUpNWdHBCwoDck6iYZuYHzIHc7Iw0LnZKgQ68k0fWF1GFoN4B4YUHivL76UipeChf4EP1NpJ5Zb7BX9jIABieevAMhwCo0JZv%2FUvh0FH2xumIxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a846120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5479\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5479,"size_decoded":6253,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x220, components 3","md5":"6a14ea24021d6eb077607bf50b82d17d","sha1":"c9b50d229b6eb7f84798bf731a33b3529855a8dc","sha256":"edf19e1e7058afb0578657a74170ab1722396ac241b8382089bd742def7c0335","sha512":"b50664ee7f3687069002121404d9f7858079a227070a9858d83b55526de3ca72c54dc40f268646d2e74c3387ef1e58a365bae59c2ce112a8a580f92fa728f7b1","ssdeep":"96:CoLuFEDgKSsqV1joj3AAYOhWcqi+z6cCxHvLhsUX4WXGw2SyKCkZ:CfVRV1iAwEq+z9CxpX4eGInCM","tlshash":"1bb17d99730e92517d3efa70387545060a36c7bbee595e0c91018a4bed4dca2939b723","first_seen":"2026-04-22T10:52:57.297597Z","last_seen":"2026-09-22T10:08:56.540742Z","times_seen":12,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/664ae282e3d18_cosmin_angheluta1%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.718Z","timestamp":1790071673718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/664ae282e3d18_cosmin_angheluta1%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKR1%2BJKyUHTYEOZABzBG4ZvEgRo%2BsI9oiaTV3dWUrR3zYmCjXRg5HsUpC9Ca1bR3HKgiB6QGmvKCUNgLQNnLiXuiePLgbWorQtk2a2iOMwbnNeDJ4QpPTpNblAAbeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158c862120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"7f56a8cc16d29d0c3c230a23e08b4771","sha1":"3b22b232f91411e21ebd6ed4aa378be26b09e68e","sha256":"3f83a0f865d4556dd0162c5ff8a8c7804221ffafa5e57bd80afdc562e3885612","sha512":"80e43c084bca8e365ef54528688e3be812db87bc7d0d6bb01438c6e75c729aa253f5ab99e2fd1ce94e2b5455c52c23744bb373f709be01bfc87d1d7d008b9272","ssdeep":"192:Vj9jhjOjK/OaaUl8PzMzj081B89Q7vlCeNA:f//FttAQ7vlCeG","tlshash":"42e1b963f5f925be10938272316e7b193de48013daa608a576edc1720f8df85ee03244","first_seen":"2026-09-22T10:08:56.541368Z","last_seen":"2026-09-22T10:08:56.541368Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/63c144121250b_niclaeganea.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.724Z","timestamp":1790071673724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/63c144121250b_niclaeganea.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VfVGLwqSr0cs1Gf7QxdFF%2Bk2uTrM%2Fm5cTjc97b2G9usZLn%2BF8QEP8Tlld2tXVkYR2xoIC6rwAhvZ%2FtA3GNIisU8hLKtJSwCqj5%2F%2FzgK2licZLsx2wiAX4FPFnT3iUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158c866120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"746430c428524e142f8cda3ba1c73226","sha1":"43bf4ce9eb201223ace4af6928b9170f56cb8c07","sha256":"b3e0828a7ae6daca56be5626e3236c2c6ae2eaab769a2b40f4ef800c42087c88","sha512":"f67f76e389914564ae76a173265046494f7415d4fa52bfa7000fd4bf1c6a5fd850133ace470fb30031aeae01afb55f24575547e2394c3b41e712f607e05431d4","ssdeep":"192:Vj9jhjOjK/OaaUl8PzQzj081B89k7vlCeNA:f//FRtAk7vlCeG","tlshash":"20e1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07284","first_seen":"2026-09-22T10:08:56.542636Z","last_seen":"2026-09-22T10:08:56.542636Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/664b4e57bbc91_neacsu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.755Z","timestamp":1790071673755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/664b4e57bbc91_neacsu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Y0qwvvZ9VJ4y9LxlGINuknCGt5osdWF9Yu8CSXM%2BUodVMt0nVMpzMrjBxUDIior4hLH4swl2GUHBiBWAS%2BRWJO4PVZGn%2Fw68j6V4jplkEqF3HiqsT7hcOEc3RTbcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158f88c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"5e7f7311ab96b4bae1071c376e57be1e","sha1":"66697e3a9b47b8d0e6aa3209b216692600e8f3c3","sha256":"48613a0131a11168e27892c217861cc467f4509b1a48cb029e72eaf8a782ca00","sha512":"6c6da1ef3c600c3c1f4593a7ef4638a45d82d2bb96f4ab1e9cfa97f0c74c8c6bb4cfca051976ce3f0a8882111f20fee0932c8a261682c6bf90d374ab0a5e18b1","ssdeep":"192:Vj9jhjOjK/OaaUl8PzEzj081B89I7vlCeNA:f//FltAI7vlCeG","tlshash":"bae1b963f5f925be10938272316e7b193de48013daa608a576edc1720f8df84ee03244","first_seen":"2026-09-22T10:08:56.543792Z","last_seen":"2026-09-22T10:08:56.543792Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/popper.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.637Z","timestamp":1790071673637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/popper.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWpAx6F5lpReQjjUa21L%2BjSx0LiMau4gsEE7yQQlKNGl%2Fo1cMztlZIQ%2FoKHVcmQwZSloOk%2BwPUfbV5io6lPsBKdsQQw1x7ocWiqagBEvNtH%2FqMk8IZLpeRRe58N8yg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-4f71\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081584804120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20337,"size_decoded":8034,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20164)","md5":"83fb8c4d9199dce0224da0206423106f","sha1":"d8503645c17f9856868a7def3dc0505e19a95ec7","sha256":"f7cbc01a310318defd4e31e4616543e2cf3baef5a47562c73ece4c0b716f157e","sha512":"95d735b0fbb5159f2c9a0920a7e1f09d8c956f57919f6c0498aac383526a3c46f4dbe122e243730c843453087400954b4058c9a16c06fbbeb8c7bd33cb94efe0","ssdeep":"384:fYn0vf4wzTC9nNbR1PTM4CrBEQxkxpOxvYLmD75zfC5vIfg3rzGp/TidOgHhXjE9:w0vAwzTC/nM4BxpOxv/D7pC5vfzy/TiE","tlshash":"8c92a3dc3294b06647ab91a7a07f960eb1335875610e9410f19df2e97c30ef9613bc79","first_seen":"2023-03-07T01:10:07Z","last_seen":"2026-09-22T10:08:56.545098Z","times_seen":10253,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/627e0784a2c58_Daniela-Ghetu%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.676Z","timestamp":1790071673676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/627e0784a2c58_Daniela-Ghetu%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-7b2f\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sp1ggGbkV6aqJeEauBKb%2B1Lm4bRQC%2B7vCYUDPBzybo9wHYsaB1V1jVGw3l06FlEeGYRVFA4zrrPWhNOyydOkVDhrTD0taAY78hTFrMoPADOHxK1hXBAS%2BXScTG7Wkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158782d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31535\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31535,"size_decoded":32307,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 150x220, components 3","md5":"6403421923f549b1406fe406d273671c","sha1":"52f372208226ae89be6864e8c9cdb577e4951c83","sha256":"19f696955462625e63a9edaa5a28782053320edb1debedb36ec248c58ad8fa7b","sha512":"fb34832b11c8d04ae82710c56c6e5cbfe9f927267b3206199d4dd85533c5a804ea70f012269facb0a70ce41500ae6859486554ade0b99c32d80797624fa49ff3","ssdeep":"768:o9P3zqkbMjjEycqktTw85wcNSogOBK7R6M7OVFk84SLcR:o97q8MPFczJHwcJfyx78k844w","tlshash":"fae2f2b644cb384e667683718789e215384aef6ea02344220175091ded93b1cd7e6eff","first_seen":"2026-04-22T10:52:57.358137Z","last_seen":"2026-09-22T10:08:56.546412Z","times_seen":15,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/swiper-bundle.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.628Z","timestamp":1790071673628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/swiper-bundle.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fV1BJa1149Kl8p3KQkmOIi0Asd6S0q%2FAa2ee1oiI1LgCZmC6%2Bn7DXfA13OuBXtIQJzHxQBhz8ld34M6q%2BQ3%2BS88oLWGSvTH%2Fs7xrLWO6a9ckbWFLL9QrR7HskCBdRQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-211c1\"\r\nexpires: Thu, 01 Oct 2026 01:45:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 116528\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081584800120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135617,"size_decoded":38590,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"0e2ac19d6072261e7ef6b9d808e17ec5","sha1":"af10043888f40ed2f58a28520e9b2bb82157487b","sha256":"159c24eb0b9d044c0507e36e693d0ff23bbb990ae90523cc25f3683253ee43d6","sha512":"e59a3be6c162e3b8c444e1873e1871f88521efb049dd6f20c1e21810d64632d7db7b2f2b27433360d469a2779af4d30ceb69b06b3f997bc4c4d53e22cae29285","ssdeep":"3072:RJkYe9swzLjkTbkC75OrynIm1/T5W9D/EL74ami0lLHb:RJte9rzLjkTbkC9OrynImRT5W9D/iP0x","tlshash":"1cd30a997320b5a552e726cb93a8c511a2b50800b40ad5e870bd4c6b6d7ec9c13feffd","first_seen":"2023-03-07T12:04:12Z","last_seen":"2026-09-22T10:08:56.547646Z","times_seen":2083,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/62fb984851676_iuliusfirtac.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.728Z","timestamp":1790071673728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/62fb984851676_iuliusfirtac.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fiz1OniuZ1xEUo%2FQwOW0UenqlmNJuBDIdPVt28cpF84kE83siw4Oll1AAkfgGDJnJ3H36zcs3o7Shw52OHx12gRFHigx5KVj5haBZq8EnFLn4APstXmJE%2FCjcigo7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158d86c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"a44bc2ae302e5496380ab4d03dfe0147","sha1":"4d558273bc25eaf86819809ccfa7069dd9274a38","sha256":"1fce14428225746bf6571db5473abc8d73247f0f9d0287a2c2f3be9a56a167d7","sha512":"e2f6007759b71837ca2ab47e997649ebfcade1455c061cd47d7956e7b5d76a238a6e279198e632d9dcc83339a9d449412a1d557fed77f008f4bb91b95be5416e","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzozj081B89s7vlCeNA:f//FZtAs7vlCeG","tlshash":"94e1a963f5f925be10978272317e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.549306Z","last_seen":"2026-09-22T10:08:56.549306Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/bootstrap-datetimepicker.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.659Z","timestamp":1790071673659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/bootstrap-datetimepicker.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9l84JSwZ4hi6xtwHdCiBCzoCR6RTtKUlL3Eq%2B4K8USFe8QvUF0TqtLrFy0KW60kK9ABnRTHjTgkMGoEAKsWv4%2FpiCjzoyKkmRHpcQp%2F5a5w29IEzzCsQxg6V87hVA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-966e\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158681b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38510,"size_decoded":10282,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32039)","md5":"8a36160a466cad1a9e414321f4784baf","sha1":"4ed91e4ed7e1a2a7e5f05654e2f62695c9e6ce40","sha256":"e5899ac40c0c8c8a4cad594af3863ff8d8c2a4a9c561af1b59605b50748119f5","sha512":"1837b2dfb459031164a45789a2b114c0da086e44f0b320bbdfa28d498b9cbb55895852bda9377362e6fc013c64b6be83c247bb9db15a8a8ca9cdb0ce43292846","ssdeep":"768:+85tRKDmhd/onYDM38NvdyMmpu3II1R+qlyTo/KR6MJodCBSEpfh6Aq8Sd4KI+po:z5UrsNvdyoII1llyTjpWnvAMLI+p+7","tlshash":"eb03b604b1b1729795bf7495102e6507e266cc3efc59487168ce10b83dbec89a1bef2b","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-09-22T10:08:56.552048Z","times_seen":1798,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6650c77bc804a_emildumitru.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.699Z","timestamp":1790071673699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6650c77bc804a_emildumitru.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-1499\"\r\nexpires: Thu, 01 Oct 2026 01:45:57 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 116516\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pg0VPAZv9xUYt7%2Bi07SwsA%2BW43qJGAYq3tvatB0ZcOhBdoVvLi6YndviUdGDeOd2PRg1L9SP8urj6ugFkMWwfMWDYGHA6LPPgnSCiUisGrpmDrz016%2FtbdzWnPXjhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a84c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5273\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5273,"size_decoded":6045,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x220, components 3","md5":"0633b79796914d0f2c5356d21ce1ed25","sha1":"d55c21b61f5cfdc0fc6b9e9b66f6f5799f33f487","sha256":"d523e3e3f2d3189acbd9a924644a60c9d31d23bcfbfb3e5ac5274ec994a0e3e3","sha512":"173db23d77e573930d945f9faf78dc568f3d17217b67753a61b5544a2cce5d44f63c45edd526bbdf48888de43b1e67d0860d6daba2474c0ce8912a56fa260926","ssdeep":"96:y8kUctUiyw35CyZbowPxCBiOoHqrSEEhZbsjirIHcxlV8dVtIqVhI:y8kTSvw351ZbboBiDLEEheF8jV8r+SI","tlshash":"3fb17b7ffe3e4440cda3e03596bd4225e9042e8f8cae153ef593c41e9a151ba482b98d","first_seen":"2026-04-22T10:52:57.275825Z","last_seen":"2026-09-22T10:08:56.552913Z","times_seen":12,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6650c91dcd4fd_ceraselatudor.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.713Z","timestamp":1790071673713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6650c91dcd4fd_ceraselatudor.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ESpkRN%2FF0TBh7J1Kze6rY%2BI3wbLMFW8syoPHCHKn62MkAok%2BTpIjUgNIcdVSIpTl9zXMBo%2Bu%2FNy7nsrw1O52uzYmV9c%2BC%2BrmZpmMpFFlHmsmT3Fp0K5zaa4%2BtNd0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158b85b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7932,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"71ebbcf252dbdcf23094f03ac0d761eb","sha1":"74fb9a5bb54edc28b6257d774de145fac49aea4b","sha256":"6b43f98e042ae3d6030b71e6b6c708d86763743a9e17e6802350d0dd9a334a8e","sha512":"e514eb659a077d52f808a50fe8cd812a4ffc6e3a3361ac805e55e6aa90dac747be903c22e3d1d91a1df46b005dff871894cabdfd7fbce716718371c810482866","ssdeep":"192:Vj9jhjOjK/OaaUl8PzSzj081B89y7vlCeNA:f//FrtAy7vlCeG","tlshash":"98e1a862f9f925be10978272316e7b193de48053daa708a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.55363Z","last_seen":"2026-09-22T10:08:56.55363Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/628399302fa56_IonMOISE%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.736Z","timestamp":1790071673736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/628399302fa56_IonMOISE%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LU57wEBAKSXh4%2BdRtF1Go%2BtwtF90MmZXqTtI9r96ZMMK1ys56leOfyrN%2F8cn5yiSLAoCszhGsGzU7s5WnClIt9uFfimy2C9Oh2KdgOZ09WHI%2BfucvM934D%2FRm8BVCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158d873120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"6bdcdefee5a67e0015309c5ffbf31bee","sha1":"849377f8221483e9b2868cca425c9fc20af5cbbd","sha256":"6d6fae11b08b7d9592f9d397e9f8b46755c6deb0c2784e68bdc7625b59460d9c","sha512":"855a0893115370c34f8e6be57e1d219a405a01b5f0380500762492416417a2a751cb7187ccf7ac83ed9646e68d5b4a17b13ccaa3f73b8ae46c2379855fea1e03","ssdeep":"192:Vj9jhjOjK/OaaUl8Pz3zj081B89b7vlCeNA:f//FQtAb7vlCeG","tlshash":"12e1b963f5f925be10938272316e7b193de48013daa708a576edc1720f8df84ee03245","first_seen":"2026-09-22T10:08:56.554882Z","last_seen":"2026-09-22T10:08:56.554882Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/66448275e0d0a_unsar30.png","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.738Z","timestamp":1790071673738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/66448275e0d0a_unsar30.png HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2Bfu%2FAB8vtTT%2B2g401LKOANO0uvMYvz74Nox7noP88R0B30XMX%2BXJbnc1mWpFSuXmp%2BFpVWmDISYpz3OPeUtJiQ6Y7XoA2QAYh1ac81%2B7ByCUZCPiUIPH4PezSzIxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158e876120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"721a469534ffa21288e99b18622e6d3d","sha1":"3bb1ac7ef406f9dbaaab7463138c95f27efcc282","sha256":"09e7436af791d70296752309f11f3fc15665828528b97fcfb8fb35c967ecccb1","sha512":"5962a0fda9fa6fe82f21336a549c4397d17b78e14f58035a63988dfb0eda8d695d78c54522cc48e0cb839f9384dd7204da1acafeaf1105c7e15ee6a6a8fba735","ssdeep":"192:Vj9jhjOjK/OaaUl8Pz9zj081B8997vlCeNA:f//FutA97vlCeG","tlshash":"efe1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.556845Z","last_seen":"2026-09-22T10:08:56.556845Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6646f05f4c0a2_Society_Romania_RGB180.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.743Z","timestamp":1790071673743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6646f05f4c0a2_Society_Romania_RGB180.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2B3Z7QpXwiO0VL1%2BeQ8aPgP4DNb9%2FQQoGjC0yZ76yJzwopVrmflz9Pj7Jy164eGAxoIgibivlS%2BRL6Ye%2B8Obh2ikSs6jM3kdRqViZoX5h1uXdRp1gn5tOVstTW46Uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158e87c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"931233f52452f07ae46e9a95cb6fec5d","sha1":"dee652997dd5eb38017b3398922a894880a34d06","sha256":"882652cb8d7da1a989c54c973a21d3c9e51b24400558bedaa59ee866d39981fc","sha512":"efc59b634d4ba172d1e0cca9decb388c48c533ddfdf150c20effb86ecdc6caf66c699f2ddb775edaae23562e2a6feb0afafd241f71d6cdd93ce71b9a633d537d","ssdeep":"192:Vj9jhjOjK/OaaUl8PzQzj081B89E7vlCeNA:f//FRtAE7vlCeG","tlshash":"efe1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.558253Z","last_seen":"2026-09-22T10:08:56.558253Z","times_seen":1,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/63dcc95149c1c_asisoft_150_2014.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.756Z","timestamp":1790071673756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/63dcc95149c1c_asisoft_150_2014.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjZJ6HrHrQ97cvpgu3JN2CRFIYw3hpLd3EbANCf1KdZGZy9z7iiWh0ousWJQj05GTKg2HT5COFi1dU3wpVoKtlr1hl0JEUC9vPYTzJ%2FyKZ5evqdr2wk%2BQxYVaflhUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08159088e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"799f5f948377e3b59283d1d6c2704609","sha1":"87cd5f219bf69572795a7d87a747c535d23ee111","sha256":"c50d8706948431ac6fcdb26467bab138501b99e4e6fd50017983214eb70d1d89","sha512":"d7ce1de972ac8bcb1c03cc21eb862d207e7137189d323af95d74909b81a85cab1ed1872a3500b38c651d86e3cd3345b5df8dd5c2827fe92893745ba9d438fbcc","ssdeep":"192:Vj9jhjOjK/OaaUl8PzVzj081B89B7vlCeNA:f//FCtAB7vlCeG","tlshash":"32e1b963f5f925be1093c272316e7b193de48013daa608a576edc1720f8df84ee03244","first_seen":"2026-09-22T10:08:56.559244Z","last_seen":"2026-09-22T10:08:56.559244Z","times_seen":1,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/main.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.633Z","timestamp":1790071673633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/main.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaKqSKlz2CX0zfH0xGqZQoMMAPtWj3e6pYZNGFgrP%2Bs6MhZPPca4pevNejOhD%2BmA6P817d%2FR34jZnzwzij6Am27lluiheMnZTH%2FZrDP3HJyjzb3UMZjKhdkrvngIvQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-1b05\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081584fff120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6917,"size_decoded":2605,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"564ffcf8f6ff8907300050aabd546e6e","sha1":"3b493372036e7d3ea3d4ac49140d31328354c055","sha256":"99ae89193422e93d1056f56a616ad4ab0c558795d6ff348ae773c30d2cb729ea","sha512":"06b470048fcce9a40068ae1cd08bf6edcbebc2a88fccaec8830547060ff480829a64dcdfcdee3b3370ec09b9b69064f3bed5129ae2eee3e36a6ef27ae7f2a18e","ssdeep":"96:3m65qLQqOuwtLKZ0DjOimVdrKC1yZLLv7BtiAQVvYAAETxxqeR:W65qLQqOuwtL16B71yZviAQVQAAUxTR","tlshash":"38e1db56528038b700bba73bed937b04fb3702ab419154627dfd47982f3067591a2fe9","first_seen":"2026-04-22T10:52:57.401217Z","last_seen":"2026-09-22T10:08:56.56064Z","times_seen":16,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/dataTables.bootstrap4.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.643Z","timestamp":1790071673643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/dataTables.bootstrap4.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YQpkMDbQgQ5dMg1bfkiLGynP7ucaHCS%2F5Bmsmcj5q3qLM6rIiCaO75fn07knuDljPk8dehc4pG3jWJ7rFxydF61ns5e2dJdRvPZ4w5k%2BVxEiXwFm65lXTdMyyJS3tg%3D%3D\"}]}\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ed3261-825\"\r\nage: 24975\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08158480a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2085,"size_decoded":1912,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (510)","md5":"b63fdeeb4941fd4cab8aac87639ac603","sha1":"9f8fb290aeceab7ac813b3e387c985ec9d1d5085","sha256":"849e38ca68419913c928868a45fdc3497e6e885119f7107fab1f1c35b26f20c5","sha512":"2cd694e1d2aa77fc1701dcaf660fa11f462a30894454935ed6a16821da8baf54bfa27b425491a7edf33b614a2cf68a8745f9938289350d3b541e9bf1ccd46b12","ssdeep":"","tlshash":"15416411383471a5062ae9fd604a05526062f07bf08528eb27c4db6d6e39f4e3153eaa","first_seen":"2023-03-07T12:06:48Z","last_seen":"2026-09-22T10:08:56.561253Z","times_seen":859,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/jszip.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.653Z","timestamp":1790071673653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/jszip.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HfqVwYguV0kYCEwr7Jig4i7uVpownkTyR5uGVuccAEZXxMCUL4kVTMLWccMjoe2j6bWhXmqZCS3NDBao%2Bg3UVb0VzZMPjhfCJYW0MGsRqhslCjCI7RtMAIb25orMUg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-12cb9\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081585815120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76985,"size_decoded":24674,"mime_type":"application/javascript","magic":"data","md5":"88731e24340ce38647f6d595f0e464cb","sha1":"14aa4ec348c325cad4a8c886500a0782d14b43df","sha256":"9e170a21bb67ccf7dcab122c726e72637105a45d893350afa9b7a38369a0c1fd","sha512":"6ff9a48ad45127627e59e63a11d533663c608c73147d3a372774132cfc7f3b743268d3fb65cf177cbd56cd7fd105e9dfd948c463d1407fb4b0623df1d3397474","ssdeep":"1536:NTdPKVuVB7Ogyo/n7Z40gn9k9bUYCeyW7zO:Noqb1v+","tlshash":"e473198531a5614593e12cd484af064771b5fa7238044cf8e3b8e9d879b8ddba0bfa7c","first_seen":"2023-03-07T01:19:00Z","last_seen":"2026-09-22T10:08:56.561929Z","times_seen":295,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6645d3a721f48_tecau.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.687Z","timestamp":1790071673687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6645d3a721f48_tecau.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-394d\"\r\nexpires: Thu, 01 Oct 2026 01:45:57 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 116516\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5oAlTxZO7O%2FQkUV51J%2FmK0zaF2Vz6bvwKbDJBLRbvFzer8Y28pIPcQZXkoNcWbs7lacaKZzCT3gCFbBpGYAt3vY6cPDc9ztNQ%2BJKqvKViW%2BfkX%2FKbiWG%2B1Nm5aXZTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a83f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14669\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14669,"size_decoded":15448,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=11, orientation=upper-left, software=Adobe Photoshop 24.7 (Macintosh), datetime=2023:10:16 22:15:46], baseline, precision 8, 150x220, components 3","md5":"99aebcc7159d27db00e3f66c10e8e219","sha1":"895b05ac2a5d0a6e72485b9389ad93ec23fd8d08","sha256":"34c25643dfb5f0a94f67f479825615445293d6e4999772e49e81be747bb1ea00","sha512":"8a5fd89700aa97e5f2e1d3d7602b9e74bae8e0e509948cad7116ce2439849bd04e9c0db73e0f8247370d2f3fd2ec97cc2d33646cb4c65b2c345846c65a6fe791","ssdeep":"192:Hw0wkKskDOqVpiXQUdSyE/9xO0vYy7ta6ckSQgugbRZbn:Hw0rsKqVMXQUdSyE/bOYFg/ug7r","tlshash":"57629e267d6b69c1e99cfd7244bdaa4761379082a6d21fdf30cecc834f12da62f19604","first_seen":"2026-04-22T10:52:57.274833Z","last_seen":"2026-09-22T10:08:56.565563Z","times_seen":14,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/664ae37bbbfcd_antonio.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.720Z","timestamp":1790071673720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/664ae37bbbfcd_antonio.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UlZqArgAJKNHP%2Fr2%2BFVRd3e8iJP42d2x07RIST%2FkK9FLN72VRx4BsHu90IC25xfV1KtAdNiyygG9wLIVm3NUtK46Mfop%2FkZzzLJUEv3U9gaTjgAf5zwFLC%2FeMOap8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158c863120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"1350906f0d4031de168e8f2a8e72bc0b","sha1":"89f3af20f59452f95b336d49494d50d0b55ab402","sha256":"0d4bcb411df63afbe731cbe0a3ea0c7032ded08eaaf6012e77ae081967519716","sha512":"f178c1613f580a1185a616534e8358518941ca5a905f18f4cee8539fdb8b6ac8d6006e97c0d2a9f4750ba73a4d7645451f8f188b570573a2b7fc90326dc665a4","ssdeep":"192:Vj9jhjOjK/OaaUl8PzNzj081B89t7vlCeNA:f//F+tAt7vlCeG","tlshash":"92e1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.567149Z","last_seen":"2026-09-22T10:08:56.567149Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6644b0f944096_6295f1f9b9631_prbar%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.742Z","timestamp":1790071673742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6644b0f944096_6295f1f9b9631_prbar%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z27CzVtkpo8eR067lyD1cdkmBfiW3s65huNT9vUTpgb4cCvzSi6km3U1hP1jqwd9QHXOG%2F70A8WiWl%2Fxysg0j29X1h4Rua0KADUAvwvndfrtnbrvWoYhQYqVE6TAaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158e87b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"ef161746f37756bf5343445083acfdcd","sha1":"3ddf0bf87bcdad38580036659ac183d72848d787","sha256":"92ee5e42cb94d98c8e00d68d33fc1b31ad64767519ae5861e1d81b03c74b5d86","sha512":"2662207a665481636098d64d2825cc03036acb1d89bceb79d546f1cd81c9d46cf8e12da80dcf9a6040617854a8dabb47123d05e2716b74aade4307d09a8f1d8f","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzhzj081B89x7vlCeNA:f//FytAx7vlCeG","tlshash":"a8e1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.5689Z","last_seen":"2026-09-22T10:08:56.5689Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-22T10:07:52.949Z","timestamp":1790071672949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RlW0C1QMgAt%2FToK7%2BSEBMSHorj%2FGS%2BiqFU%2Bnp1gBTNU1usdf%2BGf5pgZBsCqRq%2Bo0zrgxqXga9xa7p7Z5MZwyB8rMY8fjaMK6W2ZcyDv351ccPuL9%2FOP5lwXmdWVUiA%3D%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 10:07:53 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f081542ec6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"pdfmake","description":"Client/server side PDF printing in pure JavaScript.","website":"https://bpampuch.github.io/pdfmake","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"JSZip","description":"JSZip is a JavaScript library that enables the creation, reading, and manipulation of zip files in a browser environment.","website":"https://stuk.github.io/jszip/","common_platform_enumeration":"cpe:2.3:a:jszip_project:jszip:*:*:*:*:*:*:*:*","icon":"","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap:4","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":90034,"size_decoded":9825,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (713)","md5":"06927e322798fcda5fc209185d5d1b9f","sha1":"2c67f0dd32cf34648d140ff7b55aab0c1facbeb5","sha256":"4837675982b3c2ef2de15da31d11f104158239f74de09054aa456d843e2a8e61","sha512":"47e84d04c989cd9e1389e2400eaa3c89e6de856713686f2c6079c48f3c7ff370c18521099d6ca1e8599dfcb508f81054bfa4096ded1c2e102d0a26f28b288100","ssdeep":"1536:FQl9FZc5LoH7NCwoUeKVg+DBdu0/lsHDiTSkQ6r/omVQG4xbkfqQCSg0acF8Y+7B:F8a5LmpXTBCCPlt0mW967XShZ9VbZH/9","tlshash":"8293bc2644f2603b0593c1c85e262f1bbed2954bda2b494876fc0fea5fc7e42ec63159","first_seen":"2026-09-22T10:08:56.570626Z","last_seen":"2026-09-22T10:08:56.570626Z","times_seen":1,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":7,"connect":20,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/css/bootstrap.min.css","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.589Z","timestamp":1790071673589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/css/bootstrap.min.css HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lfasoPuOeKpIc%2Fg6nVghgWkEJtOT5D0%2FINAduZBA2fJLsCpTsLkqnMoIRFxOUKIAdJRiPkE38Tb0AxK6Hk%2BvsC7ON8LjAXsb8K%2FCLBBQMEz%2Fy47BO8gOkUUzdTyG9w%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ed3261-28021\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08157ffcd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":163873,"size_decoded":24726,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"94994c66fec8c3468b269dc0cc242151","sha1":"ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad","sha256":"62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab","sha512":"190194d1f30c8b6dfcb80f9afdb75625fa5418a52405d81f15d8019bbd92510e817b25a3a18feda27d2d1231fe3921fd88fe037e1fbb1ccd08f5fe5e4742ffe3","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fM:4t04/0VUpz600I4fM","tlshash":"c1f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-05T04:27:21Z","last_seen":"2026-09-22T10:08:56.572086Z","times_seen":26509,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/641c4404a7b08_sergiu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.674Z","timestamp":1790071673674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/641c4404a7b08_sergiu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-22c0\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xBkInySr00QEP%2FYTIKqoeOfIjgXmfyGAJj5eXZfHSOAIRVM75eyvmjNjznziYHgPb2oJB1L5A01atktyCa1Vv0yQRdpgGU1d%2FgLfWzNRFUqRu5%2BMpOfjjtmxUOm1LA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081587829120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8896,"size_decoded":9655,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 150x220, components 3","md5":"29c71e9d5f8dfe795d854f526411b1b0","sha1":"54f2d474d4e8c29e716709c3fe332ce69001a416","sha256":"fa3dbcc4b3022ff5274a8e9222edf9c65b5c2f0c0f1be63beac728c592ee54da","sha512":"3ca08e244a05fde179ff4551f01090101c5487d0ed0ed9a5bc9cebd03677ed72fbb685d167765c60f1e47e10deaf7c043024cf6c867c50b646144a31012191da","ssdeep":"192:NQQKrrwvv01I4sxZNSxOxF26/rHiFublQqXk3fF3KYPipH:NQxrw/ZNS8+ELiAZQcISH","tlshash":"d502ae464b82fc881a8576767522d1a6cf13a8d9df06423cb90122bca8dfad1ad39e44","first_seen":"2026-04-22T10:52:57.381933Z","last_seen":"2026-09-22T10:08:56.572758Z","times_seen":13,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/62821b0c3555f_adrian-marin%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.689Z","timestamp":1790071673689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/62821b0c3555f_adrian-marin%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-6c0d\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uB47L2cgKMk0yW7PZqWKRaOawjDCfwiY5jr3hetvvOkx83Lh0wIKmnSPGcHGUjhGErx8OTOPF%2FOKTGExJGkp9gPz1rAMytyN2Z0dQ2lMUDwr%2FvWhopDZgvabhV43Uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a840120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27661\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27661,"size_decoded":28431,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 150x220, components 3","md5":"b7a34ec20d8fddae07c7d3f9264f9909","sha1":"9cc145d5c5eb3b2ab22495fe3636e9027f90f714","sha256":"2b48e08f3fe309f6b13665ccec41fce38950a6cb98d04130216c65dbdf35c9c4","sha512":"215b815093c18f615345c3d9b8041e23974298b04484f96d534cf44398b266d6d0e42deb6018cf1dfd11aaea79adc1a9bbb1cf68ef11f22c453a9c62edd6f763","ssdeep":"384:8YNg74J7cvvHEuslS0DXA1OkXuIXMAckTAttTSwhNXQ4SaB85I5:8YyBHkbPA7XuIX/UvGws4tX","tlshash":"a5c2e0719fd3c17ee28fe3f826845595a2924b15903379ec3d2692508f50ac2e7493fe","first_seen":"2026-04-22T10:52:57.310627Z","last_seen":"2026-09-22T10:08:56.574384Z","times_seen":16,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/css/swiper-bundle.min.css","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.597Z","timestamp":1790071673597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/css/swiper-bundle.min.css HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bkt7SIg%2FkYKwFuEW49YQoZPdB5oqvb1ilGJJQFhUzeH0%2BK3PPKfLx7BmC5Br9eHqFdoNwj%2B9q0b1WCcUSWm8bVKkgQd1QNhIKHtdW4WH7WHiPRbYQJKa7l2Mqdew0Q%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ed3261-3ccb\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08157ffd7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15563,"size_decoded":5240,"mime_type":"text/css","magic":"ASCII text, with very long lines (15306)","md5":"b56d7f26577507e9719d15072d0dbe78","sha1":"6db837e695d4cb51173a95c7c65c0e8a9d0cf9c1","sha256":"6ca8fddb17d96df80923b284c7e07888f947eb3dd03974cd31e85f4d5e9dc6dc","sha512":"46090b8a60e0e961b332347dead84158e7ebf792ebd9a0b1769f095407a21ed9eed4c8fbfe635ea1d837f4a451a07384d1f51fd63bba58fda215a16da65e562a","ssdeep":"192:BUmUJbiKneTTzbHZ+SKUP3p/a/AMQfHffxVeesedOJ9A5Pz+c3At2/6:BVUbeTXbHZ+GA/AVfHfS4XYz","tlshash":"d162136853402c2763274f370b71cbb9ddb444825b93896ea1c0ed84d7b6cb9236f6e9","first_seen":"2023-04-07T10:58:19Z","last_seen":"2026-09-22T10:08:56.576122Z","times_seen":792,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/pdfmake.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.651Z","timestamp":1790071673651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/pdfmake.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7lPChXkUozDfkBRF4B9SRmcdbbEChOFHu2MdhBTy%2FC7pA%2FttQkraLlBl4OTUDlYPm51m%2BNJOjnAIO7QzpuQ5BayzheAP6bjFSLkkEj5YAtlOveEAIEs%2FMXooLLvEw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-66863\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081585812120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419939,"size_decoded":103086,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32024)","md5":"71b5d08a3237892f2661c1402dee48d6","sha1":"2991bce0383ec91647499f26d01d6004a584026d","sha256":"2dbcdce6229bcb2dabee7d6893e7ab46ea6ee1c8281dc73b3c79aa822eb90be9","sha512":"79d4c58480a037c145e87ef4b4ac9c6ebd35c5dbbadd4abcdb9f7a7295e819dfa19441467cab182965c059ff43b4a2d1b9697d15045822825fd329d97df6f334","ssdeep":"3072:11Z42oS4nBkU+k2YDw9l6IkirSHjxGAQscEJ67uUhUFLUHXqFs1zB0DQjeDDJGqP:1mS4nv+kVwkbjxG5/TuUhoxGqP","tlshash":"b0942dd5734b736c9391c7e88c5a010ae175ad09680637bdffd8f8d1dca48c8d1aaab4","first_seen":"2023-03-07T14:53:26Z","last_seen":"2026-09-22T10:08:56.577082Z","times_seen":113,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6362846ea4b2b_ion.png","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.737Z","timestamp":1790071673737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6362846ea4b2b_ion.png HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a3xcPngNNv5%2FwcXPdwf4DB4Hxw%2FYK8WWr7z3eVSLxVjnqFAWzxR%2BO4hHB4wd9nhyFFxSr4tuNsjpjPhW6MWe84IEMazAkkP0a6OJCuqXvM5JzppdJpOg0p3Vl8b89A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158e874120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"748fc5331f64d11526fab53ed03e05e1","sha1":"19a3891e33b87ad8cce52c33e1b7b639a1b1026c","sha256":"32aa23862aa87002d0bd1746c27dc02ce6ebc3c56a059959c4c69967a88d893c","sha512":"402a7d44b821f530f5114abf15b67b4486b9ee110fde6599cfa32bf11505b086a86fc7fd3bd171b9652a0bf8672cc9aa7355f824f95bd10001b17cd5a068823d","ssdeep":"192:Vj9jhjOjK/OaaUl8PzPzj081B89/7vlCeNA:f//F0tA/7vlCeG","tlshash":"fde1b963f5f925be10938272316e7b197de48013daa608a576edc1720f8df84ee03244","first_seen":"2026-09-22T10:08:56.581858Z","last_seen":"2026-09-22T10:08:56.581858Z","times_seen":1,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i|Raleway:300,300i,400,400i,500,500i,600,600i,700,700i|Poppins:300,300i,400,400i,500,500i,600,600i,700,700i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.585Z","timestamp":1790071673585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i|Raleway:300,300i,400,400i,500,500i,600,600i,700,700i|Poppins:300,300i,400,400i,500,500i,600,600i,700,700i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 22 Sep 2026 10:07:53 GMT\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75174,"size_decoded":3687,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"88c59aa92b550d3fe3504dce6c01ff7c","sha1":"0f7626f2c3abdda44c506f6c1750f22f645dbbc2","sha256":"c564845f99d4a5500d0f9bfaa2c7eb62fea2086cc333d076233aa6018832d54c","sha512":"71636df08fd9b6497bac8c05593f48c32adaabac2f72bcd2da1a26873626a7cb2f996c1915f098f9d75c12cc736e04ec88c67175a12065edc7a812568776ce02","ssdeep":"384:+eO2pXt2tv/qY49Ynx8bOjI8t7KvGqY49xn+vROFuGttcvoqY497nMZ6OiFLty5N:YbPUiCAgkgHLFosL3Jbcg","tlshash":"44733091042ba440a7832dd223df3e31ee0fa2547044d479abfd5adaedd6d6a63b035c","first_seen":"2025-09-17T16:04:57.73173Z","last_seen":"2026-09-22T12:11:45.443965Z","times_seen":833,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":37,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/validate.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.630Z","timestamp":1790071673630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/validate.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwifUqMJpU24VRvFgJqAvFWF7wXo1krQtoIsFgklBParRCjOYZZJFqpw8ueSYQfu2mT5wcqEsigAdUIhcWiK90%2BcI9ODFbqJ5cKy524lCegxSnOSBIvmq1Kbxn%2B6vw%3D%3D\"}]}\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 01 Oct 2026 01:45:45 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ed3261-aab\"\r\nage: 116528\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f081584801120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2731,"size_decoded":1724,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ed8b1bb7bc739ad1d93e6490d95fc511","sha1":"9f08035259ff3724a333fe992a46f738e678d77c","sha256":"e99cdd73d19c092753755057bac9f28542476cc8920fb3937f89384997fcf391","sha512":"7d61d34306aff9a133c8b797dc997db1e7a024d1895e8fe76a6437b751fb0b65c43c66a373745e1039259cfae20143819df6aa22cdc223175e62e5d0da649361","ssdeep":"","tlshash":"1b51eb1f166916738a3367f55cc74a80f238503fd99046a67d4cc50d2f384e59ae8fe8","first_seen":"2023-03-07T12:21:33Z","last_seen":"2026-09-22T10:08:56.584905Z","times_seen":432,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/628369d1aafd5_Dorel-Duta%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.681Z","timestamp":1790071673681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/628369d1aafd5_Dorel-Duta%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-3ff6\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzwNmRBmbzHBVbbvHUi1iiCF3EO%2FH4npLQdWCdvVLuGwiSBxE14xv82lSqxjme3MGtP4EetReG0eKzXcCKTj2Ica7CoMDj3Bi5N%2Buk0aIrVKJ6AHRwe4B9PIQNsdKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081588839120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16374\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16374,"size_decoded":17144,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 150x220, components 3","md5":"d6af6182fcf9996a79b62a754c3c9c28","sha1":"05867068a10e0bf74af889209e7bc567a08c358c","sha256":"eeebbdf0c4454789f4d6839e68aae8de2c7592bda52438624ebc3cbd8f54d247","sha512":"5fcdc0362ddc0ed83995b5a785da44bf0fa82ce5777d878bae69cdab5fae50a851ab79f87aeb8dd4eab37c4e59b23ab3af72ab5ec5171d27bc6b6dd0cae5a5e0","ssdeep":"192:IByRvTyNK2bJh1b151WWxtIfZYjRF3ONZRNdF58mOj2qmmRAGcm5h6huPNDc:IByRvTyk2hJ5Iw3iZnfhOjEmHf5hRJc","tlshash":"e772d04e3d53c722e4d1ddf174ec1679910c02b8988b6c5de9482f2caa5b3c0be648ed","first_seen":"2026-04-22T10:52:57.340558Z","last_seen":"2026-09-22T10:08:56.585647Z","times_seen":16,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6645d2426b020_cosmin150.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.705Z","timestamp":1790071673705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6645d2426b020_cosmin150.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-16f7\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbkAJ3FWqKN5MBaOLnnParnEDDshrpuiYRqhlrfsGwwH2DEc4Gs1Y2rw3fWrnIvHSNK0oeRPPrbUxBucsgp7HObjlxAxBDGRG9rV8xYIb3DwKrYUY%2BA5v426bDyrhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a850120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5879\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5879,"size_decoded":6646,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, baseline, precision 8, 150x220, components 3","md5":"00a9af9b1da79dbd8078332c022e9a27","sha1":"01d09b55639cf6b354aa6459032dbeb277724fd2","sha256":"e22e88089c7c7c223e96f0a579ddf2d9b946140915b3e58840cc3e8b0bd57968","sha512":"277b53afe094949ac0f8165fedadf14c2241b05fcd85a98b3021ee116ffe4c93fa53087807fe5653e4320e63fc99d62b7eacb54b222a7d91d8615a17ceb10afa","ssdeep":"96:yLAfiRZCeT1wtoq+kBXM5Jg7+yh1MfImMgXBi0Jd/0FmZS+1IhzQrm4FgAva0AwI:ygiRhT1wmqLxOeMMgx/J1lqhzuLueaqI","tlshash":"45c16c29ba42c382ca48c13c81be8816d7fb925c04f5412f8689ae355e5213dbd3fac9","first_seen":"2026-04-22T10:52:57.331517Z","last_seen":"2026-09-22T10:08:56.586362Z","times_seen":14,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/css/remixicon.css","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.595Z","timestamp":1790071673595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/css/remixicon.css HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSjWBPoyiDx60%2B%2BnsAnGyh1IS42%2BTu00dldYbms8tu4E2PEoO9sr5LT1tSf2k9gwp%2BuFa5xAmR3urLqx5g6mYTsPqll0sk%2Fa3SSLlHj29s86KHlih3CmLJqj5qPs1g%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ed3261-1af3d\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08157ffd5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110397,"size_decoded":15386,"mime_type":"text/css","magic":"ASCII text","md5":"6911f60acd27d7e357acb511abd0922c","sha1":"9e885fa94cfb4b6468c0a9379038e761389e7a02","sha256":"d0433712f1b22d502d1c1399b84f20aa5200c77ebf3c76eb154ecfe2d34f13ae","sha512":"f4d27dcbb4f054f6012d776cb2cb35d81b495dfe6e992f7904a2d6d49c4aaf4b8bfc1f46d6993cec6152e4458a0cf4690754fc418633d07c0114c8c6eaf00563","ssdeep":"1536:j1cvr8vn4cYzgKvP1IqRCwNd1l3JclUaqM1:jK8v4cYcKZ7clh","tlshash":"2ab3c8beea4f44801702e8d66367274163b9b77d8d817c7ad413688df7c766883862ec","first_seen":"2025-03-20T05:17:38.593065Z","last_seen":"2026-09-22T10:08:56.591748Z","times_seen":31,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.617Z","timestamp":1790071673617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 24 Sep 2026 10:07:53 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KNXyJuYsiLosZkV8jT1lD8peS0hSNVoEBKqFFubExorMmIZKu2B5LbrzMX%2B5u9n1j%2FvFJtetN9ikTTq0b9HrRT%2FQzKFEvQgTF7C1DATlpdtbS1iOK5yoX6EeLbPRcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nserver: cloudflare\r\ncf-ray: a3f081581fe5120a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1288,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-22T11:47:59.196583Z","times_seen":437549,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6405ba9e92968_rcrex180.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.751Z","timestamp":1790071673751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6405ba9e92968_rcrex180.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIE51RxzIvWXF05EVGe%2BDHmyS%2BgvSoyJVawW8CYnaCqobNv7hSoL3uikPV4IJSUvY1z5c6bKmAh%2FzuwKNmvlzUlLYVJbMY4nxo4eUGRiUj%2FbOHMQvRm5IZhUZoig3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158f88b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0517008a77d0647b3b859a62e0ad989c","sha1":"cb3dcd27f5083ddf42a21835ad614973085f3a3e","sha256":"267c2d29b3d292e6ede37e40cb6d5ba5df1c8436f207a1f3ff8a9eb091e75519","sha512":"fedcde310c5a49e18711e0ea5b6f6aaa4b31be48b192514e93255809eb52c75a915c4ba2574f9c5b0f87c7b2786b41f679cb5861e74169eca1485d4c3b89c86e","ssdeep":"192:Vj9jhjOjK/OaaUl8PzFzj081B89l7vlCeNA:f//FWtAl7vlCeG","tlshash":"b7e1b963f5f925be10938272316e7b193de48013daa608a576edc1720f8df84ee03244","first_seen":"2026-09-22T10:08:56.594299Z","last_seen":"2026-09-22T10:08:56.594299Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/fonts/bootstrap-icons.woff","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.305Z","timestamp":1790071674305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/fonts/bootstrap-icons.woff HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/lander/raketna-nebespeka/css/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:54 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RRJio06M%2Fd0i%2BHggwqZ7aBtvS7NvLYPQ1HhycLkLgZyFl5Qxj0M9iGLmT3ZFbASwDsIahCHpGIROEH75Nq1ir%2FcQr4EUJQb8OTSqUJ3EQJxzp870Bgp%2FuSdmw%2FYs%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f0815c7976120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7930,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"84bd861a9ca678b73b6a1f8fae3e18a5","sha1":"3cf599838b57cb300613a6854e0e5469787fd005","sha256":"c42b175adac3181880c7852bb9af7f717848d79432ec2e86f1f4b8eb3921bd20","sha512":"9041e1eac15c61818892926073be3918a6ff4c078f876ed023921f9cab8c611d428ac90cbb6eb9ceb75f7fb84c75aa2f531c547d5ebeffd2d3f9932a58442dd9","ssdeep":"192:Vj9jhjOjK/OaaUl8PzVz4081B89x7vlCeNA:f//FxtAx7vlCeG","tlshash":"f0e1a963f5f925be10978272316e7b193de48053eaa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.597077Z","last_seen":"2026-09-22T10:08:56.597077Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/perfect-scrollbar.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.639Z","timestamp":1790071673639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/perfect-scrollbar.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zTHuQdABen6w1MCEQ1mBbJwW%2Bt0zOhTc9gXvzhiekUNhLZqO9c3NtZIX9NHEFhxQsvOC8ysJsnZ9EgbeIzjS%2FB%2FeSlUv71E%2B591TddRLi3qHNGPte6WPgTi48llLA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-4c05\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081584808120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19461,"size_decoded":6733,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8460)","md5":"4707a5fde2e52a52c114cdad148fcb39","sha1":"cd1784e029249ebf5d57de1f677a4a61019706ae","sha256":"8ffaa73818038726b1178c18e4d06259d9a7b49cb88830946dce416b65c92840","sha512":"c9436d834938d08bd140d476d1b278a07e90790fe682cf4bb1ae95fb7ab14e3e7cbb6afe2620183a1396d28fa28ee326a82b42120ecb65103e4f8b7ce3f6b254","ssdeep":"384:qreCEASl1+jBjDe9mR7xWQEVspwr0OR8CvKM8ePhI1uhLIrn+w8zUdlpEm:hCvSijx7xWQEVseKg0LJ","tlshash":"2b925458362134b881ff25aed49f474e33364053f74e44e8b484def86ab4bb53265b2a","first_seen":"2023-03-07T13:03:09Z","last_seen":"2026-09-22T10:49:57.404753Z","times_seen":911,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/65e1e13a2778e_Tom-Johansmeyer-%28Headshot%29.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.697Z","timestamp":1790071673697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/65e1e13a2778e_Tom-Johansmeyer-%28Headshot%29.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-5a8a\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPQpJpoZN%2BtGWEmH8WozhKaPyZBCYOrM3ynVz8wKrWOAgpJpJSQ0NdbKVtBDMlYxDx%2F9eV5YtPbwgFu80npxeEDfqciQjVzUJc0zRYaOe68xOIf%2FyyG%2FX3LSOk3PVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a849120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23178\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23178,"size_decoded":23952,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=15, height=220, bps=194, PhotometricInterpretation=RGB, manufacturer=Canon, model=Canon EOS R, orientation=upper-left, width=156], comment: \"Optimized by JPEGmini 3.18.18.230752555-YEP 0xc7478df5\", baseline, precision 8, 156x220, components 3","md5":"558072358809aecf4a39559298b021b1","sha1":"6aedab20f0b4eed042915632bb956f3ea46bc1af","sha256":"102f86841f5ef038eeb504de7d46a8fc4e8834700993856df9b69bd05a498283","sha512":"22533d25f48d70503adee3af652b593669c0ce9e050e14af965ec20c4473147c35bfbb29ebd7f02fddb18bc260daf049f77c5ed66a315b08321a5de7be1eeebb","ssdeep":"384:JygUO2pgOEbsXKnxMW7/p97C6eRpv1TRHG8LaGcsBbfhHlObVkZfdfEG:JygZEgOEbsXKT73kvlRbLa4Bbfhd1","tlshash":"f3a2ae48f7119d11e9d0f57568fec38717339d889ba3924bb84db58a3fb2680ce1d294","first_seen":"2026-04-22T10:52:57.279762Z","last_seen":"2026-09-22T10:08:56.602417Z","times_seen":13,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/660fad0c70197_vnanu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.714Z","timestamp":1790071673714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/660fad0c70197_vnanu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ox0xjHPsrqn6kNBZvYvVyBQWLb9nUkgctNsAmuT7r5K%2Bqz9AMAw7GM86Oe%2BTu9Fg1xY%2BtdULClrsfeP6%2BM3Nkzp7oV5cBvvwWMAh%2F%2F09vqJT8C2XFkPo0P3RQGlqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158b85d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"bcb7caddab6cb21939d5ad66d36fe32c","sha1":"b2296506f6da1819cf3abcac0f4dcf5b6949ce14","sha256":"ee2a77d799bd82f98b7e700249470f618066d4fd91e1bb8ef58ac000a6c5f1d9","sha512":"486df5d032aaae3055a5a3a84aeb24f027365401e262a35f9642b8ea72895fb741e4801b6913c79ce0447fdbf788b0faca31cf40c0c77d212ef3b016d4e4cdda","ssdeep":"192:Vj9jhjOjK/OaaUl8PzUzj081B8907vlCeNA:f//FhtA07vlCeG","tlshash":"3ae1b963f9f925be10938272316e7b193de48013dea608a576edc1720f8df84ee03244","first_seen":"2026-09-22T10:08:56.603414Z","last_seen":"2026-09-22T10:08:56.603414Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/664b65c6a9856_neacsu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.721Z","timestamp":1790071673721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/664b65c6a9856_neacsu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38gop02bb0J4Z7RE%2FIs%2BkV2Id6dO5XZbqZMT7dDRC18pMpr%2FIBaL3UVwceOE1wRK0UZkPv6PCGqGowpAMXu9itdCP4yxjTvPAO3Z7ZD%2F5dnC2tIFlT0FL6dI9tRJ7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158c864120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8d86cc1e2823dca331ff622d29e8ff86","sha1":"fdb0d8cc91e519e65dcc549c46536fb6d7103dcf","sha256":"18f3be1abfdc12b2e5658f561619247498bbb6a61abc187267294e03fd3bff3f","sha512":"06879f6474117580068315a1c0b140324b93f5858329c5a634c3bf6c8d87526f70e80c6d328a94a1ce3b5df6df095907b3add20a6265e92a4e6f4a4bee83abbd","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzqzj081B89W7vlCeNA:f//FPtAW7vlCeG","tlshash":"8be1a963f5f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.605321Z","last_seen":"2026-09-22T10:08:56.605321Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/660f9c66a96ec_Daniela-Badaluta.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.733Z","timestamp":1790071673733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/660f9c66a96ec_Daniela-Badaluta.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cImqQZxj7duTCLtsHjjwTUE43haxmFoZmJo%2FwcDxnVruBLmecfYySFIHydSygVk1cDazES7X4kW3OBJvP5jdcLarZusFNFOyPzW4PFOeQ%2BOuQCDrH0MyEVP1vZsbEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158d870120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0ee1fd6f1ffda92ffecaa05bf0e9cf2b","sha1":"5dca1b9f5c95e28c75f6c15ed9a492e35ac4c024","sha256":"ddb63cec5ab9cdf091783cea9e3bcf161cd69c9cc92a06ab992299ac01ace8da","sha512":"d2c918de116773f4dfc46b558b0d07d15cde5139c5ab22783a43c9b971e92148891a2fd7f27cdfeae94b1df8bb96ad16bdbdfd90e534d497eb6590031b8df662","ssdeep":"192:Vj9jhjOjK/OaaUl8PzEzj081B89s7vlCeNA:f//F5tAs7vlCeG","tlshash":"3ee1b963f5f925be10978272316e7b193de48053daa708a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.606662Z","last_seen":"2026-09-22T10:08:56.606662Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6650d8c6d2a00_mariaboghian.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.734Z","timestamp":1790071673734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6650d8c6d2a00_mariaboghian.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZZH9LVxL0tyzedK7x2QcSzIdMOTo9xI6wzWfdPjdxztGObJdq3%2FHUbUeRZnazzT%2B%2FhlmGVuJPBXdNZdcRezBDQJUwxBLMzURuYAOl1c6EDjUNsqfV29y%2FlBsW00XQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158d871120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"154fbcc275e3ffad9d8be6ef537de6ac","sha1":"e3bf2cf6ce031356e4e85488df979b783a833243","sha256":"4162d0b46e8d6a39ea81af8ceb69f0d33e924fab2e97c7f07190ddf680d1e4a4","sha512":"6943dc2234f66e59537ea2a9cdf62067a1b3880c1a2866e701aedc03d068bf9164ccb4d9bb7aec5eda6fa1f9c69cf4ec96ad7ead9a7dde0fe93907a724677931","ssdeep":"192:Vj9jhjOjK/OaaUl8PzFzj081B8957vlCeNA:f//FatA57vlCeG","tlshash":"45e1a963f5f925be10978272316e7b193de48053daa708a576edc1720f8ef85ee07244","first_seen":"2026-09-22T10:08:56.607991Z","last_seen":"2026-09-22T10:08:56.607991Z","times_seen":1,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.127Z","timestamp":1790071674127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:03 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nage: 65691\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":8811,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-09-22T11:51:04.917608Z","times_seen":308662,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/buttons.print.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.648Z","timestamp":1790071673648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/buttons.print.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l0xfjBgAQGlmyteCOklUdWlKJ4%2BzJ%2FRB987QkMOppjv8zNdIZmJeQr7TqbMqt0eFsoC56%2BAV1U%2BN%2BK3YzhYwcc6JnIgRoAM2zwzwoRFrKsEnWAghUUwhssKQJz6v0g%3D%3D\"}]}\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ed3261-728\"\r\nage: 24975\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08158580f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1832,"size_decoded":1745,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (509)","md5":"3ec98cddb8f4391fc3c195dde8a70d54","sha1":"e63cede8a29faf7962df2e44e8177da4d27ff5b1","sha256":"fc6885de80d5d8147ad81bcf51c19403cd853b4fa9f646fd21e31203c3b3f0e5","sha512":"8e93c98461acc899bd5b6c1234fd341f1ca9ba0ce5db6a180ac897aeb0b2ab03dc71d7d423d84970639c667a73e5b2a9648f73457e5a071bff0bca318f6c976f","ssdeep":"","tlshash":"a23173d57040712c073364a8706fa88478f3a9523051f475964cc9e0def291ca53bf6a","first_seen":"2023-03-07T14:53:26Z","last_seen":"2026-09-22T10:08:56.610572Z","times_seen":44,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/664eefbe4260e_filimon.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.698Z","timestamp":1790071673698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/664eefbe4260e_filimon.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-1d25\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 24975\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g5DU1atIF6A0G5ods3ODbGgutCnrEa5RQcefbMowuEjmg66nUhUs1idTb2OWTx7%2FhlEn2j%2BJhaH5naRKNdOakO%2FKOezaSwVewyE7T0rM3DM16jpRjpZup%2FPepPvY8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158a84b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7461\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7461,"size_decoded":8234,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 150x220, components 3","md5":"4f2bb28759650a7a80f90e3cbe16fbb8","sha1":"352d62df4dcec5c34434221649179c551b7c4a23","sha256":"98194f41ed5a8287a23b6de06d093ce8b6d529db0ef979e836395713e779b9f6","sha512":"269736493bc8b1112beeeea7ae5ab3412bcb15ef2fe7f46901f7686738a5c10f569cfaf8d9c42bb2a01381e748e19891281f6d36858491b38c55b0347aa4de76","ssdeep":"192:i36JQf3n2MnqgKRFaIF59EHLGDOpC1C5C+:i33/2191p345n","tlshash":"ddf17e2b72121d77c8a1fa753e2089013e1cdea4cd81802de877b9bd5b540ddc862ad4","first_seen":"2026-04-22T10:52:57.346221Z","last_seen":"2026-09-22T10:08:56.611223Z","times_seen":13,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/fonts/boxicons.ttf","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.335Z","timestamp":1790071674335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/fonts/boxicons.ttf HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/lander/raketna-nebespeka/css/boxicons.min.css\r\nCookie: _ga_BMK8WEQ4BT=GS2.1.s1790071674$o1$g0$t1790071674$j60$l0$h0; _ga=GA1.1.1034600199.1790071674\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:54 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BiMsq7ct8TygyfVRLClcpFAQqruflljfuf%2BWY2%2BSOHoouFs3qgTnX22AzPTalTODe6DpSqSDM43WtD6dQRz2cfTLH559i5wdAObAq%2B%2F7dWcCcnHDL7DCTp0hW6USqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f0815c9986120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"82c9a1e5b57ab4329ff3712d63029e46","sha1":"6ff5d3c2c006f28c2a7df60339c2458d89b26c94","sha256":"a2a9937162683e77c3e0680124b6c60e53bb4fff5b3e5c64c2c4b68b5b6cdd48","sha512":"e9bc5aa8c1520180455734dcfaab882920d3576e2d2cb3ac4efc2ec4738117a1bdea1b659bec2b88313b21d88705a1abfb3893f9c10db2e1bef885061b6deadf","ssdeep":"192:Vj9jhjOjK/OaaUl8PzOz4081B89C7vlCeNA:f//FQtAC7vlCeG","tlshash":"17e1a963f5f925be10978272316e7b193de48053eaa608a576edc1720f8ef85ee07244","first_seen":"2026-09-22T10:08:56.611896Z","last_seen":"2026-09-22T10:08:56.611896Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6411f20ebf251_iuc80.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.745Z","timestamp":1790071673745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6411f20ebf251_iuc80.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZxgpPptKSZDklQSUb5tHGDhgRNpoGnnFqX8kBPWiXTf%2BnHkbwAFCdz9QBjKG%2FJiYiTLoLK3f3inraH76qpXdK8W0P6df59mY%2FQ3%2BxPxcIAsZ9OUtrHG3wnRprubHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158f882120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"23a7229b600009e29897ad4ce3cb949c","sha1":"2ce8c0b1a1caa7c2a155f4eeb76fc490b6ac828d","sha256":"47f2830a54eed6ec61df6ab30f2a4895aad5f59175d3e5ed62afebf5412b4419","sha512":"c67732be0adb2f965c5f86456a3b144d285b25359cf3cf5bc09d01b3ffcc215fa4455a156b6a411a0378ee9bd0a83747271a8ae07cbb5f5247039286eae3572d","ssdeep":"192:Vj9jhjOjK/OaaUl8PzSszj081B89zx7vlCeNA:f//FmtA17vlCeG","tlshash":"4de1b963f5f925be10938272316e7b193de48013daa708a576edc1720f8df85ee03244","first_seen":"2026-09-22T10:08:56.613934Z","last_seen":"2026-09-22T10:08:56.613934Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6658394cf3de8_life150.png","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.749Z","timestamp":1790071673749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6658394cf3de8_life150.png HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yvs%2B1WtyGb4wsROiyLSI0Sm9S44BezMrShLWcQ7ceKWd3T7XaXNNiKhAX5f8aDwXlYEylbWQ3HmxF31p2hyFun18mloYO%2FB38a7wlFtpzXj7tt0fzcwt1PYmjhpGpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158f884120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"1ea131f41dcbcc3bbe746f74466617b9","sha1":"15941db881baaa3a0341543a924c020468cd8b2d","sha256":"88193f1bb98bbbcc82e784a161ec6d494518849e1614371680e9aaa0c0d51e4b","sha512":"de313f82eaac3d039d45667ae8dd3631e030c0cc8b1316e475cc15ad792c35447becc8ac12d8bd4337e9e914fd2b8e812eef7024d24947250e68b9828b6e5092","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzrzj081B89b7vlCeNA:f//FQtAb7vlCeG","tlshash":"3de1b963f5f925be10938272316e7b193de48013daa608a576edc1720f9df84ee03244","first_seen":"2026-09-22T10:08:56.615133Z","last_seen":"2026-09-22T10:08:56.615133Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.111Z","timestamp":1790071674111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:35 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 65719\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49076,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-22T11:58:04.833075Z","times_seen":66408,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":50,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/dataTables.select.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.654Z","timestamp":1790071673654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/dataTables.select.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LmxQAinFmFWarvkXtu9QsL6%2FHHz2mbHwTiENIMdBrFqte91zl%2BuB0B972K41TdESos4IJKgpVIoswE0dD%2FGc7YWzdP3W3mIH163QP3Y8JwR4eVqlUT4GVA3TqsalJg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-2fd4\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081585816120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12244,"size_decoded":4634,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (543)","md5":"e06c874532cc59e272dc2f717167766b","sha1":"3cd3ce9acb76d153e3260d89cc6d80d93466ac2e","sha256":"4296c81ff167f50ea68ab76064ee0ed595186adad8c1b999dc3614c66b8f0bdc","sha512":"45ca7d8c859d8ecb9705c7261c0b18aa9870f1c9fe25d90bc842f509c54b5ba7b3225cb79b1ecce53b5b2c9f34751211207b1f84d12f0466f960e9e953e63789","ssdeep":"192:ZEgF5zpdl4JSf85V4ngeg66fWRw8yVs3rit00WQ7AUlHrB2aOqBvLi57:ZEG5zpG5q6rVs3rjQBYV5","tlshash":"ee4284a576707875823f38fb4dbf408ef0368496e204cda4f0a4d1c86a38a5d65a7d2f","first_seen":"2023-11-04T19:36:28Z","last_seen":"2026-09-22T10:08:56.616659Z","times_seen":46,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/logo.gif","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.671Z","timestamp":1790071673671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/logo.gif HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=5,i\r\netag: \"67ed3261-a13\"\r\nexpires: Thu, 01 Oct 2026 01:45:56 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 116516\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pakTAH5ldjWIH4PMm%2BDla3CmDXCRCgdTtuJrZbhUQeOGIpvXQ%2B7sS35HoqMRmKtvbRULAv1CsmZD4hMEs20z%2Bax%2Byq%2BshdhuLW%2BuulkiF850pHBr0NaKLxvayHw%2Fqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081587825120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2579\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2579,"size_decoded":3357,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 95","md5":"5137a1e6856bfcf4ff8764051dbf208e","sha1":"c8878a789422a22f10cf7e34beb5473069f049c2","sha256":"b4acc927c55cdcc967ecb5cd4b870f15bb84fc130d870cc44128fe8aacb70190","sha512":"6d54e1be99dde5af9b1e743eda669d424e67fbde9bbc252f443ba8e3a1500e6ba9d7889bc168db8b61d839f795b6d33513e1adffbef0a111aad25c3fd73147f5","ssdeep":"","tlshash":"33512d4b776c9571ebdf04b9347976437c28ad6e4b1393f57a981241dc011d34109ab2","first_seen":"2026-04-22T10:52:57.37461Z","last_seen":"2026-09-22T10:08:56.61737Z","times_seen":16,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/660fb41f6800b_abadea.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.695Z","timestamp":1790071673695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/660fb41f6800b_abadea.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFqJU%2BEI0sRJq7mtS5OrL9wdMODSUKWOfw7q%2BPatDECe3W4JM8nwLTnj7xeeZcvnQpxZnmZhOUAxFo1gLoVQlQEXBQzPgg9ocgvfWUrYZMNER01BuI3gQKIXEvHwIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158a848120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"d6fcc11a63ab831ac78253492f869d7c","sha1":"2495d28b9f4ee3205650674fa1c1a2f0265032c3","sha256":"cec4747356e6617cf81e51af26b01df196b101e3d033c1d6ad1a2d8fd8da1b3f","sha512":"9452c6476d5d47a6458e7820a47f25b8407fa5d5ab065f3b373211801fd88e22e1ed610e06c342200fb65889b5742a0077900cd77750d12302c625ebf97369eb","ssdeep":"192:Vj9jhjOjK/OaaUl8Pzuzj081B89K7vlCeNA:f//FjtAK7vlCeG","tlshash":"c3e1b963f5f925be10978272316e7b193de48053eaa708a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.618009Z","last_seen":"2026-09-22T10:08:56.618009Z","times_seen":1,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.115Z","timestamp":1790071674115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:35 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 65719\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49076,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-22T11:58:04.833075Z","times_seen":66408,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":54,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/css/boxicons.min.css","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.592Z","timestamp":1790071673592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/css/boxicons.min.css HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxIpZWUSwEjh2Yd1q6%2BSBwfjyFzlF6cJBlRE6S%2Bk8YzWLDfr0Qqqy4NKDaRKt2cR%2FrNNBVkmhCi9agq8yHiSUPU7WiSPFA2whEW6r9fjiJDMksijMCnAFuMBimWahQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ed3261-f925\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08157ffd0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63781,"size_decoded":12285,"mime_type":"text/css","magic":"ASCII text, with very long lines (63781), with no line terminators","md5":"8f5115de7921019f7bc6b43c4ed12f60","sha1":"3af316606783cad1b6f2596a372a68c7cac75e58","sha256":"bf312760e276941860c4476b399734acf59240d3b229b794f2de0b18481782ea","sha512":"dc4cd097376e45f011f940a16e6b12366c600206c633021c5275f171f6a86835f10fed9c79f7f422dba2b5c2e0766acb77599ad1430f0ee9ac5282373c751403","ssdeep":"1536:UYB2Ty3l+sPcUP2j+VhD2XAZkIG7WNjEwJ5qxsh90+4gfYlcvpvJ:DBHxJ","tlshash":"84533df5e59944c83b32e447c784f74c20aaf931c9461d62f26f941e6ed0a690bc6fb8","first_seen":"2024-08-20T12:29:03.155476Z","last_seen":"2026-09-22T10:08:56.62047Z","times_seen":23,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/aos.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.622Z","timestamp":1790071673622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/aos.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DW5WwuXsYM0MpKJL8ZrMD81MPv5BGdumAIxtPuMPycZ9FCMufZ7e2MCSBmvT%2BE4SYW6KnCdxmMFCwY7zpyTZhcoDKhdS1I%2F9Rt0G2BG1iZK2hIDSibzgW%2FsE6mmI8g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-3962\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081582fe8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14690,"size_decoded":5490,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14690), with no line terminators","md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-09-22T10:08:56.623167Z","times_seen":10730,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/glightbox.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.625Z","timestamp":1790071673625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/glightbox.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oH7EMHlTyw0vVtJ06cjvSqiWhcD%2B5kjFpw7bZrOl%2BMMeoDEQxteki8V9U1IkEzTKL%2FcfNSkjybEXJ4%2BvTUT%2BJuFfXPyLX46JP0TilCONMz%2FGdJ77AWCdZeiKpC246g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-db9e\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f081582feb120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56222,"size_decoded":16046,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56222), with no line terminators","md5":"2c8b54832f234f81bb1ecd75549fd014","sha1":"58238d71cb1f3b00e872803d7965024188b8736e","sha256":"267ab4a5ea85c601950cdb29b6e278c024b3e1be38d2ba27d2c39523c2e34741","sha512":"0e667ccf1e95ad28fe36fc2383638d0362e5442b05c93661f7fad91fbe5a96ef8aa124dd8e35525facf66bd90a89497049fe89231cc58e9c36602cab1969389f","ssdeep":"1536:qi1eh4HfFdUKtLmoNZzNhq3+D+dnocJpxuN2Xf3AHPGbX8qNXql+WVEpLE5rf+dz:L13apjFiDa","tlshash":"1f43f9057392387645de617aa03b930772b7260e1801d09cb4bddcdb69b8c9e31a7bf6","first_seen":"2023-03-07T01:38:25Z","last_seen":"2026-09-22T10:08:56.624541Z","times_seen":1690,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/buttons.colVis.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.649Z","timestamp":1790071673649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/buttons.colVis.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqA4vgTtB1ywCZriYZfiLQgOiLHu6iPyrQSzk49ljexGo3zlctdHQNsUBQfmNyNlF5dj%2FsFNjbqO5l%2Fk7MPFYiabyHIALr4I7EhgnTyWEqaLUeEl0ytpYK1i4kHCxg%3D%3D\"}]}\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ed3261-a12\"\r\nage: 24975\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f081585810120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2578,"size_decoded":1735,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (534)","md5":"f777e6ed023a0f06dda8019c3daaf9e8","sha1":"30791559a6201f7a4d7a9185a84277ef4cb8af5f","sha256":"251d5f92dd0fca753373eb943419e91306f2d57b3f73fc64f17dcc1bbb29ffd7","sha512":"ba8816dff05f1fc079cdf0195d6983c59bbb80785ed920636af488e64a6d66d4b24745757ae9a940692a2bd8af5e075fff9aebe4e6bee421db95429ee6e882b7","ssdeep":"","tlshash":"4f51aeeb3c4079354223b8b530df2419652afc7ab0442dedb458c7c5af6092b5d36d4e","first_seen":"2023-03-07T14:53:26Z","last_seen":"2026-09-22T10:08:56.626846Z","times_seen":38,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6295f3716695c_appa.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.747Z","timestamp":1790071673747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6295f3716695c_appa.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6AdqvveKokEOa%2BtmIrL%2FhLG2CY0DgKhAceOeQ11QukMX0zX2wz9gOpHrdd6M2sUtKVgCjL3iPGyawZn08ZvNLYDYV7gh9Y%2F8MpwtNQzx8Egky4%2FzvMUaoOc23LmWtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158f883120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7924,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"c42f5fcd5f6b281bc5468f8d98435d70","sha1":"2992165050690ace31622f3001e400a0b4013a6c","sha256":"549ad5d8ebafce8ace1985040cc5a7b587c37f104ed8a72f837c2099a4fc0490","sha512":"eca4d73950c59db40b7ee4a5dcffd5fe06c5a051fe2daec04d12efc45c5e3451f7ea0f823cb552b9309462204c2440cd4b3967268b856f0d138a77bd6e4f5ba0","ssdeep":"192:Vj9jhjOjK/OaaUl8PzUzj081B89Y7vlCeNA:f//F1tAY7vlCeG","tlshash":"0fe1b963f5f925be10938272316e7b193de48053daa608a576edc1720f8df84ee03244","first_seen":"2026-09-22T10:08:56.628242Z","last_seen":"2026-09-22T10:08:56.628242Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/62947daa4309b_antoniobabeti2022%5B1%5D.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.709Z","timestamp":1790071673709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/62947daa4309b_antoniobabeti2022%5B1%5D.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y9yK2BYlNl4OfT6usLDRNJZX3YBkTXct%2Bic8bMchu3N6S53uIGQaxyRel18TH1rkYzN1bJ2rGLiXMgCYHWjaShk4xN2miS%2B1M%2BUA725lAeH2igFvVXTyBpOInSAlfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158b859120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"26ac014a1ca92463f8a4d739ddb506fe","sha1":"1c36af0aaaa2c7d9db8494bef5e4161f6216884d","sha256":"cb4cfe0357b066dd7d44a463b694797b671a713d4e5d722786c43ea9426b7d34","sha512":"063f9abd6d76d26ab78c3cff08b3c796368fbaf3f345f0ff14852b36c513ca836dc02afb49d58585e9bf2d843acc9293581f1c26dcd2186f88adbd4cddf61f52","ssdeep":"192:Vj9jhjOjK/OaaUl8PzRzj081B8917vlCeNA:f//FmtA17vlCeG","tlshash":"6de1a862f9f925be10978272316e7b193de48053daa608a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.630817Z","last_seen":"2026-09-22T10:08:56.630817Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/images/6650d2f309d90_cameliaudrescu.jpg","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.727Z","timestamp":1790071673727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/images/6650d2f309d90_cameliaudrescu.jpg HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VtpOuYAqNEnWUB9aSasnlwH2TrX%2Frc7kfhhw1cbknbtU0nu3axTLuFA8TGhPpfiuMm2LHLBmJbpa%2FE75L%2BRS6J74n2GHRJvfAmCvje22aBbf7kuQRv7yBk6zI9ZCmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=5,i\r\ncf-ray: a3f08158d86a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7922,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"9ca42fd7838e3229ec4442e1a370522e","sha1":"32954b815de9a1815bdf9b651fbfcd0b0784a73b","sha256":"5470767af75fde4f338f42edfd57bc4d1a527d1312bf069c97b5be0db29d75db","sha512":"f10930e1d89ece630978c3a52099f85fc2df6da6dbf2bb5aa4bd798ccd46216d39456271c1b509d6ee6734aed6114a24ba475b5ed5d24a4d55d0ad0e88116e2f","ssdeep":"192:Vj9jhjOjK/OaaUl8PzCzj081B89e7vlCeNA:f//FXtAe7vlCeG","tlshash":"7ae1a963f9f925be10978272316e7b193de48053daa708a576edc1720f8df85ee07244","first_seen":"2026-09-22T10:08:56.632463Z","last_seen":"2026-09-22T10:08:56.632463Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/moment.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.657Z","timestamp":1790071673657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/moment.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Bg2MYMIKQJepCtT982s0eS9TXnHPspV49vVz5f4EV1SQaaF3xbqoNXzFc9BL87YalG4DShsRoh4OBVb%2Frl1UYOPrlqZVOuzsnrwthhsxYdU2d5s7teq5YSwuBiXyw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-c9df\"\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 24975\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158681a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51679,"size_decoded":17592,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51679), with no line terminators","md5":"8999b8b5d07e9c6077ac5ac6bc942968","sha1":"5e8a4cf3c77c1bb13e966e702422e9d25b98ba14","sha256":"0aeb4ecf1091b9c52c9fa0ba4dc118b1abafbd88a51278935e574f6baff0bb49","sha512":"3b663c843f373d0b517fcbdcaf437ecb1c11b44ac855a1c9e0d3a9a23ceadb2bd49a18896d0213f4e018bb6eedfa6564f35e2dfa89e00551b1f981b294809591","ssdeep":"768:TZUhhcH6fhB0KWkh32WUsW3wQ3hglmJbP38l/t0C:NUckhBbWA2fsWthJbPsT","tlshash":"7d33a3cb3a86b112676612b5083f480be33e5995684e4d0df509e8d93d39c7e427bfb8","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-09-22T11:13:29.569253Z","times_seen":18316,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/dropzone.min.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.661Z","timestamp":1790071673661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/dropzone.min.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UFkdx33BvnkpQ2ymizRQ2VNE4mqJ%2Bm0Tr6ZjriJOmFV4Nhe6akNBFve9PT%2F1gIkfwL5MlMSpweZ9DcUL7h%2Bsga%2B%2Fg9ChvOZxCMZ8e2HDji2uLF1S4DsrflqG4AvBqg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ed3261-a7fb\"\r\nexpires: Thu, 01 Oct 2026 01:45:48 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 116525\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f08158681e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43003,"size_decoded":13813,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31998)","md5":"33148c7d5e055ea747149d025cc9c0cf","sha1":"7c8fadac2e33330b6f632075de1c9ff0f15da48b","sha256":"72ce2d8528437e392a146939b362f18f7e6c81246be0c45cc9c7268b458aa823","sha512":"8f2b6aeb51d8dff7823705a2ac1851a1f0f1ba34c230512241e4defa41d1e1e60b3535eb52aee4636a900ca3949ec54028de571812634374ef3642245bf8ad1b","ssdeep":"768:GGvujwKLHQFdTC6JSJKokGuCVFzFnwBzkbf7aLGVSKdq39tATdPUOcEVE5kKMLEQ:CPLHSTC6JSJjTVPnYkbf7aiVSKdCATZx","tlshash":"4b13d7957286b17586c770e5547f010ab279e5a6a8488458f036cac8ffb8ec860f7ff4","first_seen":"2023-03-07T12:22:19Z","last_seen":"2026-09-22T10:08:56.635301Z","times_seen":120,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/js/main_1.js","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:53.662Z","timestamp":1790071673662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/js/main_1.js HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 22 Sep 2026 10:07:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wi6yVPkjsoh3ZJu%2BjOqnvEzwUNuD4YmJnXXUP0oxU420XFhB6ADfeCcPgE2h9%2FUWv0Iv0e7%2B3PyMFW0sk4B%2FxTfbTSZNjNBAUEUAOLf19we355AWRpNi%2BSLFIIJUmQ%3D%3D\"}]}\r\nlast-modified: Wed, 02 Apr 2025 12:49:37 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 02 Oct 2026 03:11:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ed3261-984\"\r\nage: 24975\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f08158681f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2436,"size_decoded":1646,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3226e9bef984f8e192fcc885b46b5627","sha1":"3fd46627994849ec45c4680f0375157f27f0faea","sha256":"3cc211ae9e54d85a5401b1e7da79dec0d28de1c2dfbf91b1f85cdd395bfe56a1","sha512":"1be58e8e30992e2529f9cddba6c874354099274538554b8170ea7051a8ff63edd8dcc128964c83a7ecdd6e10078965b6dc08afc1947dc27057c24e5dc3b6d4be","ssdeep":"","tlshash":"5b41de6974e06133023f25ee487f144e691e5007490aaf65bc8d82e81f6951cb9eff6d","first_seen":"2026-04-22T10:52:57.31802Z","last_seen":"2026-09-22T10:08:56.636022Z","times_seen":16,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.123Z","timestamp":1790071674123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/opensans/v44/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rolewas.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:24 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:31:21 GMT\r\ncontent-type: font/woff2\r\nage: 65670\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50216,"size_decoded":51028,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50216, version 1.0","md5":"b577bb8d8c25082a9a50522f5ec995e5","sha1":"b3e5bd7b3c40d97eeefad7837daa986857596070","sha256":"186836b74ceac07b2764c07c0379420e3014efb30fe918461c235e0ef6cbc4a2","sha512":"54d26a07921bc6ea7c90b3d810c3e1e965e6dbc227b002cc385c07d2f3878ec42c7580663b8663638d7cad3ff50a8402dd64673aec5452d26d30760fb5c871c9","ssdeep":"1536:fTniLxNYt7dypMNb88NcWU5a91c+D+ZXA:Ti1NYtRyp2g8iW4atkXA","tlshash":"4a33f10bc7bbaa5ec58c1bb5cd55d311a980b0f1c028bf2724230b8537a899c62b65f9","first_seen":"2025-09-17T00:16:45.72892Z","last_seen":"2026-09-22T11:46:09.631528Z","times_seen":57287,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rolewas.com/lander/raketna-nebespeka/fonts/bootstrap-icons.woff2","fqdn":"rolewas.com","domain":"rolewas.com","tld":"com"},"ip":{"addr":"104.21.38.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rolewas.com/","date":"2026-09-22T10:07:54.129Z","timestamp":1790071674129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rolewas.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:30:06 GMT","end":"Thu, 10 Dec 2026 07:30:05 GMT"},"fingerprint":{"sha1":"AD:11:F4:85:37:67:83:B6:48:1E:F3:79:F6:F5:13:11:43:25:64:59","sha256":"6B:54:58:9A:17:0E:3D:8A:14:22:A0:FE:DA:71:11:C2:81:CA:9F:09:4A:A3:24:BA:0B:24:A3:43:2C:C7:21:7B"}}},"request":{"raw":"GET /lander/raketna-nebespeka/fonts/bootstrap-icons.woff2 HTTP/1.1\r\nHost: rolewas.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rolewas.com/lander/raketna-nebespeka/css/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 9\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 22 Sep 2026 10:07:54 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2B%2F4UYiyYiGm%2FAERL6s5lxeL7CyzEaFQmYX%2BB3mbRr1nf%2BKIsfPVB6GuAO6opw2xXVPCLUF8FWck0JdSM01DQShaPzpndCk2wqAvCeem56hnq7ePJCCFOCZE7zGzlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3f0815b5935120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7172,"size_decoded":7928,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"367e64a70f815c9aa3f8a2b93e828567","sha1":"d5afb70f571a23f3f998488f99bfee85b96e3e6b","sha256":"a726c511f558b3c4419439c0c669db420591c2ef161a0216934bec91a8f2f6b3","sha512":"54415fa0ce8fa82ed66b1561d36c43758134eff20b1a6112cf9e818b95449513b48401d18348d5ee91ceeac0f6917faada052b28a0b29562ce0e8d737c5039af","ssdeep":"192:Vj9jhjOjK/OaaUl8Pz08z4081B89XB7vlCeNA:f//FRtAR7vlCeG","tlshash":"75e1a963f5f925be10978272316e7b193de48053eaa608a576edc1720f8ef85ee07244","first_seen":"2026-09-22T10:08:56.637333Z","last_seen":"2026-09-22T10:08:56.637333Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-22","alert":"Phishing Block","trigger":"rolewas.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-22","alert":"Sinkholed","trigger":"rolewas.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}