{"report_id":"dff7e613-e926-4253-a8d0-0acc34de79e9","version":0,"status":"done","tags":[],"date":"2026-09-23T09:30:33Z","url":{"schema":"http","addr":"rocemani.com/","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"172.67.153.34","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rocemani.com/","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"title":"Entrepreneurs’ Organization Romania","dom":{"size":172248,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (430)","md5":"d3db838b1b736bf0035995af09cae133","sha1":"6a7b2382f424820a70583a02fce9b9fbeb8a5c39","sha256":"5ef275364b2c7fc1a6b695a39a6fc32f7db61bf1e784dd121a064aa3798b3139","sha512":"2bb6351d28cab97c396291fbdeb1f30fc172e0981788b69ed9cf65b6727e1298b4dbc990c442dc59da70b0d359f439875fa06673adc7d6ad094a2df067006409","ssdeep":"1536:9C9bUtmIxRjvH5W9nEBt77pb5/qLuGRBxHIgi2QXKOX7Z9RI0lRI06rdAgnMnHx5:9b2nmBgipXnLgg7","tlshash":"bcf3765f9bf23035394f7154aa25a3512b658243ce49eff03aec9254cf899a948f327c","dom_hash":"domhashd0985b089ca0b661d3f517f1e8e1462b","first_seen":"2026-08-25T09:43:28.240169Z","last_seen":"2026-09-23T09:30:39.073501Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rocemani.com/","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"172.67.153.34","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T09:30:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rocemani.com","ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-01","domain_rank":0,"first_seen":"2026-09-23T09:15:37.06506Z","last_seen":"2026-09-23T09:15:37.065061Z","alert_count":140,"request_count":35,"received_data":2936876,"sent_data":17897,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rocemani.com/","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b454e215ec353183467180095bc5972","sha1":"5967e53aa0856471cffbb638c3d80a1595e6e743","sha256":"2400c264110c91006b1df117f4a83b1e3154e7c929bb7baf83c09dc2d724d814","sha512":"397d078705c7b7b8c260acfaab1e58940293fb382e17662ebb2424ee93da685357833c7e3bd415eff4ae68ed8d24fe32ce15e683f61566f8047d12c5daa84dde","ssdeep":"","tlshash":"ded0120cb4f25562009fbc3d090f044abb26d813710c8ec5bcdcd5546ff6eb844e0a08","size":235,"data":"","first_seen":"2026-06-19T02:01:37.074776Z","last_seen":"2026-09-23T09:30:39.172413Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f4b602eb43bc44b9341f11f5c30d782","sha1":"9dff5f36827116fe878f55d9bf14fbf0c5012870","sha256":"b14bf7d3cecc4bb640b3dcb6187c4acf4ba2b7af4a1e89c26cf2fddbb67ec4e3","sha512":"209508784155da1afff048a3ac959505312c47dc110a1856dc4ce784c012be21c7802776c59e2a2ae1f706136166c30240b3042da48a5d8de1454d8080b480e7","ssdeep":"192:g8kdES6CMz8feKSXCcuUS6C95bhjaSI3hrZUMKftymJHvCm:g0z8fm4djAG","tlshash":"63d16d6d9f92063658abb5bd8f9b7080292184275909ed303d4cd102df8cd3997f6f94","size":6683,"data":"","first_seen":"2026-06-19T02:01:37.075606Z","last_seen":"2026-09-23T09:30:39.174375Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3925456e43912597459ed4329ff956a","sha1":"0255c022bde777177783229d1939dbec1b060527","sha256":"5355b46cf0f195289db238daf7d7cd6c452f6083742cca6f98db158e43885bdc","sha512":"cdda750b12d44efe0d1e626300edd8f9b036f963a3047710fd9f50075d6e6ab8b5d13ff191b441a06477ebb1932b10d26bbfbeb6322c30bacf5000cea019ed9c","ssdeep":"","tlshash":"9ed02335533034b154277155c55eb240b5b1105b7415dd02fc4c818d9f44f2574b3e42","size":220,"data":"","first_seen":"2026-06-09T12:57:58.463408Z","last_seen":"2026-09-23T09:30:39.175302Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-23T12:50:34.886868Z","times_seen":438066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/css.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.455Z","timestamp":1790155794455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/css.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FZAmVmPNMMT5HKrZEBxfm%2Fmka%2Bkzw5m%2Fbbmsa%2FljbhEhKNz4rBsCOEjF%2FFNzAZzTkBQsxaVmewDy2qwPKQdrnXE3PBzImvGp1KIxnaRcJ2Cg0xdYQ1Ehoce98VvNWE%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:40 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-dc41\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887137e8da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56385,"size_decoded":2779,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"a7bf12c6f80d5b677f04c02983574789","sha1":"70115696f580d27e84020fa871d8c3767ff63b1d","sha256":"9e229842b43cb0c0c3352982422c2a37a9336a8b40af65656e722b0254fa39f1","sha512":"64cb439cc872efeb037d48bfecf8377c83212ab10e0cb050a10bf44168098a0e917ea41d5eaa4c3e8f30c60ad751d58ba7cc9602010cf98867c16222f9dabcd8","ssdeep":"384:+rO3YC3DyvGqY49vtozYOsbV3UbvNqY49Wtxa2OOhX3uNv/qY49Yt/M/Or8W33GG:+CMG9B0b7umoWh9PxvUoK2NrQ+","tlshash":"42430b90042b2040a2575ce133de7f31ee4ea260b048d5786bfd979beecaca563b535c","first_seen":"2026-05-30T03:26:08.00616Z","last_seen":"2026-09-23T09:30:39.080361Z","times_seen":11,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/swiper.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.462Z","timestamp":1790155794462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/swiper.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R2VGcmntC0rZTxFAKsTRblqQMxXkSh7K%2BTSm7hKWEm92IZMIVLbhzGZauOr27iFLrrlrdDzrYfTHum7VKkT3L2jOiciMg8LyEpGLgxAJ3CLQVgWSrYCPogL7eU%2ButCs%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-4746\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887138e96a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18246,"size_decoded":4142,"mime_type":"text/css","magic":"ASCII text","md5":"37009493830156f163d54e34b57962c8","sha1":"a0cc0954e28b1f617727c2c6d6f202c24df1dc20","sha256":"cf7e97acbcd59ab5cbf7b0480ff3cb431e7ebcd2c487731065f402deaafad66e","sha512":"1f5f16bf070d75362f2204a1cb2f00c79a182143d311941ceae6f4d4276d67c6200fcc8e01699d37e3a03f7797ff65ce4f5ebcb7a7e8fcb8d5d81069f58eb791","ssdeep":"192:vwScGaNLNi2rZ9faPUt3V5H40yAWtSStY+7oyJrtYaPtYZVXuHBVtS+wjvqXAXAj:vuJjfNVYef+h0IJxFOMFcsABdZDyZ","tlshash":"7982f1545b622c13b22a4e1d0be697706b68c4834a47ccad73c1ed88efba4f8315ee55","first_seen":"2026-05-30T03:26:08.007504Z","last_seen":"2026-09-23T09:30:39.081225Z","times_seen":11,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/EO-Koepelgevangenis_header.webp","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.806Z","timestamp":1790155794806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/EO-Koepelgevangenis_header.webp HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=4,i\r\netag: \"68ff4667-5d51a\"\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1213\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FDwwnyOj0X12y%2FeOQ%2B42ih7wUjYFc42YBHLVOUdj0X7LbAMt5gvbpoxTfPD9bGvtI9pG5P2fXaNMwl%2FVRyvSGvvNe1bX%2FAWypzW1CNE54TZoGpWNo9UsWDiKdjq7n9w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88715aedaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 382234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382234,"size_decoded":383007,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1334, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"632660938e3c617637fcd459d395fd35","sha1":"2190f5fae7ea8d9b32f6904c5fd4986132cc6996","sha256":"66d84ea9e2b17a53a25f81bab39a36b5233705790c436c63af61ddcc24032838","sha512":"d3d70ccdd3c857339af9c78181a8d651d434ff35cceed19e1faae2ee5197ce782ce8367eaa719af38a2472334d0c19f85391841adec07c4361bc8b8c530199f4","ssdeep":"6144:o1gyckgFmWSXf6zeiaT9HAChOgWM/5ReGDC2bZq5zKvEyqfcP:TlmWSyQ2UOgWKHeGDC2Q5msyqo","tlshash":"438423572caa48538ab2c7c8cf351a8b53e4f25c7c82ba990f9f45e5c42d7e54f07a11","first_seen":"2026-05-30T03:26:07.980312Z","last_seen":"2026-09-23T09:30:39.085882Z","times_seen":11,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/bg-circles-white-alt-OP35.png","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.811Z","timestamp":1790155794811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/bg-circles-white-alt-OP35.png HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=4,i\r\netag: \"68ff4667-15ef\"\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1213\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l82CYRVsvrXA2c13UhmfumXgIYD1hDNvcs2HKGUovpTsI6vleTpmJ%2BseXAYNZsTluaiYrZOgafcnw9pcUYEaSfTRsdzag7nXWcvU%2FkonCp6Yy4bjc0keqOfJbHhy9iQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88715bedda0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5615\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5615,"size_decoded":6380,"mime_type":"image/png","magic":"PNG image data, 538 x 529, 4-bit colormap, non-interlaced","md5":"9500778d953f3c0d8cb85dfdb187d81c","sha1":"79f6264a72080d68db0274a69c9dddfe93f1cbb8","sha256":"c423ec3898e33c158bcaf9017d813474ad8d8122a1283664b1b4defd14a89305","sha512":"09b727223920bebf658256d260a82e1e61f9274f6949f915002f249e871335328a5d9b655c35c9020285fc493d01b922b094d6658a3da90508ab3abb77c8624e","ssdeep":"96:Q9iLrU+wiK/FrwGmk5+mESJALF4RqZZEdgBkfH5wkR/tf3J6YaVVV3E:wiLrJFK/ixkASw4RqZZ4gB4H5vR/tf3d","tlshash":"24c19eca98649968ae3ec1aef7c5e0eaca57cc3ed3c04a925109b5bc00de749108f6c5","first_seen":"2026-05-30T03:26:07.981325Z","last_seen":"2026-09-23T09:30:39.08725Z","times_seen":11,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/fa-regular-400.woff2","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:55.057Z","timestamp":1790155795057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/fa-regular-400.woff2 HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/lander/logic-ocean-camp-fire/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:55 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=3,i=?0\r\netag: \"68ff4667-34ec\"\r\nexpires: Sat, 03 Oct 2026 09:10:27 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFgz7dvcN9kDCd%2Bz8l1GVhF5pL1GE%2F1JiqU7JldpKvyMBtcJkyntZogQi%2BejI9Px63aAP15vtq3TYKP7dYKevDvDGcdhnzKUbFkwZ%2BSci3BagsoNeeEEpr9G9uPdjn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887173f12a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13548,"size_decoded":14322,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13548, version 331.-31392","md5":"4a74738e7728e93c4394b8604081da62","sha1":"fb9648469530a05fa9aac80e47d4d6960472a242","sha256":"ce20ed8a323117c8a718ff1ddc6dabb997373b575a8e896f2bf02b846c082c9d","sha512":"cc1f2ea5a6321ad04ffbc43022184785acd7db636109b841694403261850744b47cb5f2b60fe4f72d717668880392f3ea477c013a90e61c66aa68fb60704790c","ssdeep":"192:MOw0hBKT6co4S2NIyI7e7biB9nnNn2AY28rvYI2k0EQTW50IBNd+N/KwWBuWAgm8:M/CgMNnN6jj4k0EQ6PNdE/KwzW2du","tlshash":"8452c1b68fa74c9cd2d33d140b5e5294f6175a8512baa22396cc82ac008bf745cdac87","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-09-23T12:58:17.844526Z","times_seen":11715,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":299,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/cropped-EO_icon_primary_RGB-192x192.png","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:55.059Z","timestamp":1790155795059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/cropped-EO_icon_primary_RGB-192x192.png HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=6,i=?0\r\netag: \"68ff4667-4ac6\"\r\nexpires: Sat, 03 Oct 2026 09:10:19 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1176\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Npk%2FtGcdipiUVHDTKmUjvqnsCQT0fCu7QRyOeOuFoXFL3ryApvvDlT%2FDeuN9xbd5O7K%2BlCZ42hTVIcM1aDuxGBVQw%2B9kcrXQ1b42lvGHMLMxU2rUvFmFR3ETx6PzCaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88717df24a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19142\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19142,"size_decoded":19915,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c65b7ffd580a9a89d1bd12e4c7bfe055","sha1":"c9cfdfb608b2d2bcae7a57d32c0220ce3bcb1e8d","sha256":"0d1e0527657eea904af51997ddc2601225af900db31b7a11777d82470e625e89","sha512":"5d082930cd0d2b34213ec386b7a943963abfe071f46ab75310928757cf74f8296125626bd8b5b7e84e64b6013cafdd363ea4d5e3ebe033b8a0514f4d83a53165","ssdeep":"384:AjO7EvMKXKKw1eHGXPRsNOskpZZaGlu0TKpthlguxq3A2zaUQe:2OPKXKKw1eHGf6N1kQGxsuxA2zNQe","tlshash":"6d82e16f4a101c56b70a3a42e1555d35819f21a19dd839d33f22c9f32beffb121530e9","first_seen":"2026-05-30T03:26:08.014877Z","last_seen":"2026-09-23T09:30:39.089102Z","times_seen":11,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/style.min.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.456Z","timestamp":1790155794456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/style.min.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W1JikwhFXNzm0Dw9Ftdp9%2FqXDMRXxYEi9rX%2B40Oactx%2B5TaoPT04jZTE7vBYunV32BIUqvNJIPC7Pj9jdKapwkwEdZPFZNdCn11RDu0Kb9faeCwvk2zRwtzN9%2BhxCII%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:40 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-698fc\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887137e90a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432380,"size_decoded":35191,"mime_type":"text/css","magic":"ASCII text, with very long lines (35903)","md5":"d3216af0528e51f12c496a6bbed6d943","sha1":"78424172648e99b0226d2a3be2a7edfa1a3db11c","sha256":"8a756dad106db3d799b559682130327e71d7e3b2511feecc609c4f5495cc2ca9","sha512":"9798674d3476c8a8cd68fab08c82ee16dea5744d1bbcdd03af028c3aa450f194b57123d8259ebe081425f5648806da24998240e2f76f6b3e44ffc875ef7898d7","ssdeep":"6144:wf3fXjkikiqZjbJ7fExtOQYLyf3fXjs0qp:ojkikiFjw","tlshash":"599412e69a6012856123cf0583cd5aa5e73cc263b5e50cefb316290f8743b9d239bb57","first_seen":"2026-05-30T03:26:08.016842Z","last_seen":"2026-09-23T09:30:39.091529Z","times_seen":11,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/style-static.min.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.467Z","timestamp":1790155794467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/style-static.min.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5pEUDZwWNxdhawucBToFlfwCtUQNkq0twh6h6ckEV4vTc49pfLt%2Fm0J49m066BkAtUZBe3WuCE4Cvxy1ChVOkVrraqpl2UYpweRw9Etu4tl5q3cCKIfWnSaviiaURao%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-c91af\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887138e9ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":823727,"size_decoded":89003,"mime_type":"text/css","magic":"ASCII text, with very long lines (65192)","md5":"2c0c8f3510c3fd5491e8e24ebe965578","sha1":"6138602a8720c24bf8e0b048d607dca20dc1137a","sha256":"30a5ace256e27f0eee80d048b15de9eb8001f7fdc23d089251755b73abce5587","sha512":"da9918e7d496a2118398e35fb2bfa58493bf097f14a05d517371c00a8dbe887d1f133872a3c6351609365190116c58a100e829bfd4fbae4275017221fbdaf0b8","ssdeep":"24576:1TQg4hNBo7hS974f5XSQ3fucSH54skc2XVeIUjnEgIPXi8xXK+hHbe+8w8mGwYg/:kNBo7hS974f5XSQ3fucSH54skc2XVeIR","tlshash":"6205768fef3236f133439798bcd6a7a4e1dd92439a0118d6bc60e62467c325b4a7319d","first_seen":"2026-05-30T03:26:08.030219Z","last_seen":"2026-09-23T09:30:39.092743Z","times_seen":11,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/fa-brands-400.woff2","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.885Z","timestamp":1790155794885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/fa-brands-400.woff2 HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/lander/logic-ocean-camp-fire/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=3,i=?0\r\netag: \"68ff4667-1327c\"\r\nexpires: Sat, 03 Oct 2026 09:10:27 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WNrEmB0AtX9hAqupGoG4DL47aGCSIDADSq0%2FnmuXj3xiwKSvkF4s13NAsJWULzHFvCu0NMpccd0WrCtgGm1BlP3BfCqYkgPPoppvjUNVanB1kyb4E6jd5hy3Gk9Qafo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887162eeaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78460,"size_decoded":79229,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78460, version 331.-31392","md5":"f075c50f89795e4cdb4d45b51f1a6800","sha1":"f726c4275bb494a045fde059175f072de06c01df","sha256":"71b3ce72680f4183d28db86b184542051fd533bb1146933233e4f6a20cf98cba","sha512":"5f4f35e9acdb825a245e678a834b2bc6d5c302693fffc3497717024c2d8385ffdeb233d4d7f368f1356a2adfcaab0a89157edbcca45b9f310f1cdd7f44cac955","ssdeep":"1536:uZWBokruo7jgeq3Yv8E9MjaR3yOWaaqPbkJSmMlckzeSUSalX:sWBbuo/vqov8yTS/qPmMekzyx","tlshash":"7b73124d6fe2a9eaa9bc3f332fb38412ac819d654bf2c1b3055e12d51c8177da8d4135","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-09-23T12:02:29.189593Z","times_seen":22805,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/readmore.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.466Z","timestamp":1790155794466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/readmore.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52LUXurD0A4f5fQPqQa%2BhdJRLv3e51hVgLjnJRYaWs1YCR06va%2B0wM1CXERjEe8PEI%2BwFAzF25r8TU1DsaaY%2Frm2X8%2BKLuj5rQLQ3IS9elFNjPuAwquo7gf95BRQadU%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-6bd\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887138e9aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1725,"size_decoded":1377,"mime_type":"text/css","magic":"ASCII text","md5":"bbd61e5da0b9dd8b9718dd37a9582c3f","sha1":"cff350a63740a5a5eb17958f451c81b80b28aa1e","sha256":"009e58f3632270c3fa8d127a9e132807a0920ac00512a2a0c5f3e8d5d728d373","sha512":"3e52975ac4da3e0762b5d79b6aa4ef8148a3e3dce36e27aae16cd810e2d53fe3d7dbb3b6cc3eef1d0350720fd5f6f2dd5536a1e58ec5cb68f063316224feb354","ssdeep":"","tlshash":"0b31ff31f12b19807237dc6c33aba7da6b2b004341c9c41e7783ee688f9e58855d1b16","first_seen":"2023-09-13T08:36:27Z","last_seen":"2026-09-23T12:02:29.229963Z","times_seen":3112,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/style-1.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.468Z","timestamp":1790155794468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/style-1.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToGx6XDZqUd8KZormQAefCjsFr5UGS4HnsR2o%2BKtyi6xQTpGiNMddSkZ944xOkWdH2SIm6sTs3be7G1YgjGr90%2FW0iuvaoOVEuBdF5ewa2lxC9vBRpADoGZd7C7VgZI%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-9147\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887138e9da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37191,"size_decoded":7233,"mime_type":"text/css","magic":"ASCII text","md5":"72d50f3a8ed01ce420c8cd2322ceec34","sha1":"5ac8b637faddf1d3a4d9d6b1b06d9a98b1c1a9cc","sha256":"3bde3a48f304117beb5a052031bc34cffcce319b26eec812f3489ae374f32adf","sha512":"f97bad0dec38af0d9d5bd491edb456a18bc93da629da7d022408cafcb6d4bfb730050b8554abea06e0290d79b3ef8c902e373bace4414ed1ff72b1386b1b2bae","ssdeep":"384:m1KwmaHMiCJwTljrFzcyHGjF3GBK6bNOAhPzRclfmCqjZFzt:mIwRXFwH6bNOAhPzkfmCqjZFJ","tlshash":"42f262cbfea62992711a5558fb63fbf96b6c00434e0d8e71b1b176789f803e101b168d","first_seen":"2026-05-30T03:26:08.022234Z","last_seen":"2026-09-23T09:30:39.09755Z","times_seen":11,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/EO_Romania_RGB_inverse-1280x615.png","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.470Z","timestamp":1790155794470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/EO_Romania_RGB_inverse-1280x615.png HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=3,i\r\netag: \"68ff4667-34b7\"\r\nexpires: Sat, 03 Oct 2026 09:09:57 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1196\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AU0SpkfRFoOtRMCL6AFTgRZdz2vb1ufs008o8evMS3MEfQ1zZh31kDias%2BO9nTM8DN3g3BFBIPyE5Ct00upDm79EIs7gTgAwgu886%2FOZIZ9PKghikBbLV6tIGeZQ680%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887138e9ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13495\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13495,"size_decoded":14261,"mime_type":"image/png","magic":"PNG image data, 1280 x 615, 8-bit colormap, non-interlaced","md5":"5a75038acdba477464196a2142fd3e96","sha1":"861a7bcbf2ea07bc05d9f4aa3818fc6fc7566bdc","sha256":"be52bb0ff0b554beb0a83d71c037dbd2b777be50d7ce9d08fe98916b3d8d8909","sha512":"d2fd5f1cab89524a33a0fe68b542aa648b90b1c9bac01954bbbee82457d21be434058151a746d226622a4a7ed8081752b84ff6502fb2676a46fde71d68313525","ssdeep":"192:UukLru53SxjRwTaDlgRHH+Rm+8Cix1DqyStftlM/lgvsH50zLvET2wt/n:i4Sx115hxinOftVWz6XvA2Kn","tlshash":"f852b02051892ae5e20c03b12f50f815cb3b14981677d07ec93e3aa5aee0f9ddd5074d","first_seen":"2026-05-30T03:26:08.032205Z","last_seen":"2026-09-23T09:30:39.102839Z","times_seen":11,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/bg-half-circles-pink.png","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.813Z","timestamp":1790155794813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/bg-half-circles-pink.png HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=4,i\r\netag: \"68ff4667-1ff7\"\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1213\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmKsGSmx9o3Ur8SJjVVrKGNrvhOmcv7c7CxZ5HmWLMXxuJtF%2B5eNh7tsXFST%2Fg2U1W6MqGQUMnWAE%2BBePyvu%2Bt6hifRqyUMkGXrL0AqqbsbmC5KiuY9qbzWSeY7kgls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88715bedea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8183\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8183,"size_decoded":8952,"mime_type":"image/png","magic":"PNG image data, 529 x 538, 4-bit colormap, non-interlaced","md5":"01d5d812638915ac33088fab944e6611","sha1":"6da1275cb044461c8978b0285507b2f7e8d7f54b","sha256":"ca42d2e7b08c5f7dbca0c3ce8de95cef55c1c776b287a58ea3a58152ff87dd7c","sha512":"27e6e6cfca56830c250b5d1210f9d561789b04ff7753fa5816d4b46a3bbd4e241a1ca7e14e84c2ff845cfe34ed5dee484ac11d40b5bdde4fcedccac095296a3e","ssdeep":"192:Cv3cGCg7dELwBxeH1dwxP+G31WrKpaassFZnEpsZ99:N/gR4pHUBW2rFZKI99","tlshash":"59f1bff8ae9867ad901b026453d1a09335cb7cea9d3805ce6e30f5d85ec86c6d2c0de3","first_seen":"2026-05-30T03:26:08.013047Z","last_seen":"2026-09-23T09:30:39.106126Z","times_seen":11,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/fa-solid-900.woff2","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.894Z","timestamp":1790155794894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/fa-solid-900.woff2 HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/lander/logic-ocean-camp-fire/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=3,i=?0\r\netag: \"68ff4667-139ac\"\r\nexpires: Sat, 03 Oct 2026 09:10:27 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pW6JbwzuvZSUYCu%2BMUUNyKru9RLhvc3Tls%2Fi%2Bg%2FCrrGe9ZxH3QBaKA2%2FWUS8FGKUAUsLIc%2F27hZVFvvU9SYH1cCCdNQ9eBEHig5exMl4M20I68Rq8oPtKJ6AZOdZelk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887163ef2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 80300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80300,"size_decoded":81079,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392","md5":"8e1ed89b6ccb8ce41faf5cb672677105","sha1":"9b592048b9062b00f0b2dd782d70a95b7dc69b83","sha256":"6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7","sha512":"e2f6b4574cb1541dff6852d0af44faae80286110e8451841eade4b53ebdf31150602640fe1bdfff41459ea4ae884d14d115fbc93b30d199c87b88f5d07e4cd72","ssdeep":"1536:Tek2SzK4WGTQH1GlyGLj3SUwtyIWeOo4XyydPl2mN4fsxDFsbaLsND1Vv08:ak2gTQVGLL7IyDelE7dPZ35FeND19","tlshash":"d3730272fd7b05541fe8e3ad39390568bb881acc35c949f2058afc95e0ab67a7684d03","first_seen":"2023-04-05T05:13:35Z","last_seen":"2026-09-23T13:08:59.432224Z","times_seen":31890,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/style.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.453Z","timestamp":1790155794453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/style.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X243z7RLcyWjUCimYTwhgumn7RHKVp9kvEzBEUcWUUNU%2FHxm26PbLafnUdyOnGM5MiB%2BPg7q5euLz%2FA4TEn2XqCR3TL02a98P3CcvLym2geyb0kP%2F80oYYnfk%2Foppas%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:40 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-7457\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887137e8ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29783,"size_decoded":5407,"mime_type":"text/css","magic":"ASCII text","md5":"24ab47323b6390300769537d3dd7712d","sha1":"5a8bfbddd437827054f59026206649ea4a0e5e02","sha256":"c5582dc86627b2f997fd35a3e4607eb50850627b11b47a59a5a423bb2f96a3d8","sha512":"67f785709d3bcd6f4fe007b6fe356be69f69ab0f8853613a5d1a02b1ea3e4fa7f7fd199fc6935fb3c270ff4daacb35949d813e90b592b48f93fa297c5c77fec7","ssdeep":"384:bnYZfQdaWByHUawd+WHqa9Ha9psPrnbb4OWSI682E/RpO1wm:MIdpUH8d+WHqala9psrkZpOam","tlshash":"5fd2c6e4d6bd0ca3b305d0d153662513b75d927acd866e19d2b37a8cb5e221cc4832fe","first_seen":"2026-05-30T03:26:08.004788Z","last_seen":"2026-09-23T09:30:39.108787Z","times_seen":11,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/choices.min.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.457Z","timestamp":1790155794457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/choices.min.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NG8%2BTlFT8t0l6FePK51bQtZdv8I27woNnLcJYpbfcBLEHuYOrnGLvZXe5rgCQDApB3jM79Qy5WPjQs1HnNv%2B0z2I6f0jep4PNPCAUtcEv511R8U1gxCOQv5nUVMYKtw%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:40 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-6c61\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887137e91a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27745,"size_decoded":4000,"mime_type":"text/css","magic":"ASCII text, with very long lines (27744)","md5":"1cc4202424e5e0dc7935b721a005d04a","sha1":"3e5554edb1d9145a384195303b7485d138b9c508","sha256":"98ef8f7cb33457c23db76f0cc75e612b0c0e11ca9bdb83dffc9f37412bd18028","sha512":"ac50a8ed498c8dc94da232f310c2a230b66d3e058c080d9e77d8bac1104c1fd3ae7f7e58d936da487e6857c74e5583f900b83c16230239cf25fde5549c9b2a91","ssdeep":"192:jQ0IQ68jQ92jDHX2TWQrQm6QE8jyt4ZPBz2TWGf:s0n6t8PHIEmpEt+RBCf","tlshash":"62c2bc7de7217ea8e93f855ff4ee56db5f24c09295084d7eda03e830eec08642112ba5","first_seen":"2026-05-30T03:26:07.995831Z","last_seen":"2026-09-23T09:30:39.109999Z","times_seen":11,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/bg-circles-white-OP35.png","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.809Z","timestamp":1790155794809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/bg-circles-white-OP35.png HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=4,i\r\netag: \"68ff4667-16d0\"\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1213\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2Fgk2kxx1IsPW3uHhBDeR2bx7O5%2F6WMyKqSDPAa%2F3KEGJHRyc5nOVmJJd2TMndmFtd8KTKorTUEZxMBNO7ACJxZilPHKR8ipsWl%2Fx6Z7YrlOrGfTQgglOAwEYDaoMYU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88715aedca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5840,"size_decoded":6609,"mime_type":"image/png","magic":"PNG image data, 529 x 538, 4-bit colormap, non-interlaced","md5":"b12a0ad57168113cb5f0821d9b844607","sha1":"5f531144def2a2b1e4e7c5fbecbb3788ff54970b","sha256":"91c06a0126e346fc6bf92611e131508d462c2bcf1a0a9aea94480390fc60528d","sha512":"c5756a0fcc7b541b6d8260f6eeda3ee4867ca9802292323ad21183c914325f1af5bd7233c5d45f0ab343ca5387c92563174e881ed07426ffa2c3d743259715d6","ssdeep":"96:sYHCZB+OeXvtZc0gLgBUWoOZx1L9FrR/+7Wjm6h5bkufOZYlJ+QSixXy:DmBbe1T5ZL7rwR65bkeVBy","tlshash":"17c16d8b45c8d1bc4b72daebfd3d568dd2995e20bc2c5e150ccee319d92379126e7880","first_seen":"2026-05-30T03:26:08.008584Z","last_seen":"2026-09-23T09:30:39.111148Z","times_seen":11,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:29:53.659Z","timestamp":1790155793659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hh9fGk%2BDxC5EiRwj55BnpSccolV3OFXnd1KEJQfR5EfPmeQbarqlYHLJJvonZ3IDUdL8Ck6%2BOaM5r%2B3K4cBwXiWDXtPuwcOSS0BMG9iOMi0y%2BcNfn5EVFTI6jXFDkAw%3D\"}]}\r\nexpires: Wed, 23 Sep 2026 09:29:54 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f88710faef49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":206004,"size_decoded":30489,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (330)","md5":"ce8142ceaa7862663f5ab08316dfc082","sha1":"af739bbf507e4e26e6fbed11450d42460a1302e0","sha256":"f7b88404268b3e426a67380488686ca7fb171361f82cd9743e91ff8133f92067","sha512":"9432c36c15a8d49beae1e075e2aa2bca6931820465d2c2dc926f47888f75d882421940f68609f27a28c8572dffc98b636a743c8c2fd02433142c43705717fd65","ssdeep":"1536:m9bUtmoxRjvBcfHhEBt7/pb5JId/iRS7jprzI/pOX7Z9RI0lRI06rdAgnMnHx1O2:vkhkKrU/cLgg0j4HO59L4SPjszr","tlshash":"d614b78fabf23075384bb5646a19f7242b648043dd09ed647beca254cf8a9f544f326c","first_seen":"2026-09-23T09:30:39.115374Z","last_seen":"2026-09-23T09:30:39.115374Z","times_seen":1,"resource_available":true,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":41,"connect":33,"send":0,"wait":153,"receive":0,"ssl":324},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/popup.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.463Z","timestamp":1790155794463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/popup.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qg6VQGCXvt7nDgS9FTSovpVUelODspSSWED%2FkQeH6hVW43pINm1ccTIOImi1cInT1u6NjRrQ70TuSmCdHl3Txx6jC0ALZKKvQ1FtIKOyTGv4XSyNLqaAZTNru1AZcgw%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-1389\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887138e98a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5001,"size_decoded":1745,"mime_type":"text/css","magic":"ASCII text, with very long lines (5001), with no line terminators","md5":"de3e0625d50bcb2e7b8c552585307bc0","sha1":"68e4453126243cdcd4d843f6208d0125987c0a11","sha256":"2f1e0ba0f1a9560f8d67fb010c58f8995fa681625c321e18133ccec0043bce47","sha512":"8aaba984c7c49f88ff7495711bcf6fef2e5a4d68a0680cdb5d56607bb5e67691c5ba8ef5c492fee32f4f1b27f7369eadfb0846180247e37c010f3d57ff83a209","ssdeep":"48:cXM4UvcnWInlXj6R6X9rHcrfmScE7vrHcnlgVcxrxFrxwZhrxJrxZrxmrxa0L0Wm:hyp+RD77cKOYvBcAF","tlshash":"aba107318a333522babaf746f6914e08e560ad03fbde1dbf6145c50d56c7cc0825e5ac","first_seen":"2024-02-27T15:23:22Z","last_seen":"2026-09-23T12:02:29.20088Z","times_seen":3299,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.471Z","timestamp":1790155794471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 25 Sep 2026 09:29:54 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6t1LRwgLfBn%2FJviqZhvJBHzn13L6nYL0RjgVnxxLUO6pgMMUeQd3HET54MI0LSS4gA8yOqfV%2BA9tRuUVyW05XExzxn6rCf9ykBpeGCR%2FTAaaeLZZ8BC6saMP7fBhfdo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\nserver: cloudflare\r\ncf-ray: a3f887139e9fa0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1286,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-23T12:50:34.886868Z","times_seen":438066,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/AvertaStd-RegularItalic.woff2","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.888Z","timestamp":1790155794888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/AvertaStd-RegularItalic.woff2 HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/lander/logic-ocean-camp-fire/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=3,i=?0\r\netag: \"68ff4667-9e4c\"\r\nexpires: Sat, 03 Oct 2026 09:10:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1166\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkHPLm728v5sbYpd%2FmuxT53MdJPWRaaBacjexMNRZwLZfdsFEE%2F5GWxv5rF0oVK%2ByQsjqH8gDZnOJDIbDqE7nuilNFzYysWwyPeNoGriaflMWFcCWDUS11pQ0QOEfb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887162eeca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40524,"size_decoded":41296,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40524, version 1.0","md5":"f8e4a3390c306a40716993bd14a23488","sha1":"43ecffaac6deff6e7020309bb8c0dc991267d3f2","sha256":"81cb1a0bb4d6b040af9ee50577917d923cfd1770c35f06aae6bce2a9d1f83dd0","sha512":"131ba13decf620d5de923aff4dd99e6e1a28d8a8da439da4a48a1b1cb7fe752d712135be1b18d17d3aeef2c8e3debd09646507191bf83abda10f38e5eca6d70a","ssdeep":"768:VUqhAC2G5p943MiNk9w8B3WgoOjFMTbAx+HX1bMMEcwsJkPnGMs5PmnOsct:KpC2GZdBxxcbAwHhbvJqw5mpE","tlshash":"b203f2657466e184b2bc22f607e49e48c5f9234c47947f8ee55b68f082e27b374c065b","first_seen":"2026-05-30T03:26:08.009633Z","last_seen":"2026-09-23T09:30:39.121249Z","times_seen":11,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/AvertaStd-Light.woff2","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.891Z","timestamp":1790155794891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/AvertaStd-Light.woff2 HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/lander/logic-ocean-camp-fire/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=3,i=?0\r\netag: \"68ff4667-a464\"\r\nexpires: Sat, 03 Oct 2026 09:10:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1166\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SOdpUmpDSSEmY8%2BdtlIOMnFjoRv43UxJ8tWv9DO%2BB%2BqQPYC%2BaELFR5o7tEIRm2Jqo%2BiOwSwruGIzcHOjub67b%2BTnpwA7uUargtgKAk6Py3fqvZetRFISQyVGAIn%2Fdmc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887163ef0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42084,"size_decoded":42864,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42084, version 1.0","md5":"3f5e0d4d19a91d7aa331b307bb3f8af2","sha1":"52dc630be0b99b26bbce23f17cfd30a46947a9a9","sha256":"c60040e34a6662511cd0dae1eaa42e50474535eddca98ef9c941a9aba24569b9","sha512":"81d448162f66c464fafc004e7cef021f0779e2e291e3b8469276454b1b4e163e75456d9a14dbd9dfcbef02af5cfdb49d680f4e385d41872bd010682ae548ec0c","ssdeep":"768:bZ6cvAhc5L+xRKdCcHu331hmH3a5NnCyODMrkXEXaYjqPGTleD3iT:b5vv5L+xAklcq5NnCbQrHXaYGeTlc3iT","tlshash":"c213f26db19067480c9162747d90fe34fcaad46a016ea8b78e4fdcafb1cb40f3685463","first_seen":"2026-05-30T03:26:08.013967Z","last_seen":"2026-09-23T09:30:39.128207Z","times_seen":11,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/cropped-EO_icon_primary_RGB-32x32.png","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:55.060Z","timestamp":1790155795060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/cropped-EO_icon_primary_RGB-32x32.png HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:55 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=6,i=?0\r\netag: \"68ff4667-86f\"\r\nexpires: Thu, 01 Oct 2026 16:39:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 147046\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DDpTIQJE4SYh6JCqAw14WaTgg0fxxTFsWWOyv%2FUUAYLZI%2BEax5d8%2BsstP5mYX4X6J9zFJqxaoVbYyqhjdNctCrP1r1jq%2FEwBFjrgRGUPXpPE3wiCUYacBFvw3kyAKE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88717df25a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2159\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2159,"size_decoded":2932,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f6e8b41ac1022d2c122692eb93a9615f","sha1":"48becd01b0c2f6bcc3b6e1d8865563357f80b228","sha256":"a5dca99dfc72c2d4b89d2982ab3877f5a542e4e2c7a659624f275865b8be6cda","sha512":"f698258371e1a65cf3f45d38acfcf1268563ba624e28e5a0334bf9cd66504bd02c1cb89288a7149177b9fe6c821e3ed225db5add2ebcaeefc0a3f7aa0e509265","ssdeep":"","tlshash":"3c415c46448e93d86d7b308cdbced0d2f4d42eddc01503887a3a2dce671a4e705083da","first_seen":"2026-05-30T03:26:08.019829Z","last_seen":"2026-09-23T09:30:39.13935Z","times_seen":11,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/bundle.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.459Z","timestamp":1790155794459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/bundle.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YDwodLLVJ4E%2BxrrxER97R%2FFVtCi2Q98zBgZ7ODpe45FZ017L5I424xKuIU9UpJW%2BZd72efAeqqFzllLPa2KYdp2Fnk9KtLAhvwD2%2Fy%2FfE8x1a91ZktPlMvmXOsaGfPU%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:40 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-a00f\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887137e94a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40975,"size_decoded":7343,"mime_type":"text/css","magic":"ASCII text, with very long lines (40974)","md5":"23c4e9de4519985b921fd0ce705d77c2","sha1":"2ab23eff941f4a53d30219268c9f6d17a772a1be","sha256":"00931ac697c7e7d00770675f4213c8d497aca1d64b3ecf4747a705d18a65a58f","sha512":"8df8e1a7b6851f2e56fa26a3aa010716708c8e6628ccdeb9d91782d97023a7c1c08b4b57418ef223f8bc2ca07a75762c4a93670b75f920c2e54f44be86d9a2cd","ssdeep":"768:zg/KXA2ztiB53EyEe8TB96yUg53vFkl/wYhQ0vHUzRBjL6fLzlZO8Y:zgCXnzwBpLuB96yUyu/wYhQ0vHUzRBjL","tlshash":"3b03ff2fb581d83c637f601de476e12147a4ba0af94efdbb38b7a00cc79a5895421b5c","first_seen":"2025-09-12T11:38:19.092447Z","last_seen":"2026-09-23T09:30:39.144907Z","times_seen":56,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/jquery.timepicker.min.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.446Z","timestamp":1790155794446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/jquery.timepicker.min.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9h0s4yX1mo%2B0boUCmM1w%2BWZbxQVbLNpCkL2gN6QykAbbHRDoVaEDDYaou2gODpA4lQnqN1KAv4EXTuB39sPYfgM%2FCl5W1GnZrg3QsIrrWsowD%2FCIW%2FTCdXRpdwUvV5k%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:40 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-58f\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887136e88a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1423,"size_decoded":1220,"mime_type":"text/css","magic":"ASCII text, with very long lines (1423), with no line terminators","md5":"edd56f44a35a0e33b0eae66e5283ab77","sha1":"74a9d615f1f6c3974edb790a58cc802d09ad25e8","sha256":"449e2d8b37ae8b7cd0e922b7a32b6c8850527b2bb1e64d1a750551c5ba87c7dd","sha512":"1b58ea4c400586de9e0b293f61ba6c8729c61901ce24767a9fd4c8a0cb64b0bb2857d6d03ef95c9b36f6095e4e40181a88c345316d4b1b0cc68d99cca393b28a","ssdeep":"","tlshash":"3c214421b03f2e8b78bf81ab10307fffe37bd831a46036365de56214474e0a056d6216","first_seen":"2023-04-18T18:06:28Z","last_seen":"2026-09-23T09:30:39.147844Z","times_seen":1558,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/wpem-grid.min.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.448Z","timestamp":1790155794448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/wpem-grid.min.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G9Tgj1LX4PajA5ZM1YwFU4bzOfma9Zcb6L0Pj8CYz71%2FN76nX9Idwehz9P6CbS%2FLeHT3eFtvwJ1qfGNgK%2B5A4ZdVALLobh5rVLOAZNwIkVyXRzIavniezr6Mvu69Jzc%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:40 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-dcea\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887136e89a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56554,"size_decoded":6687,"mime_type":"text/css","magic":"ASCII text, with very long lines (56554), with no line terminators","md5":"4f111b5cb1a952fc42588d31c5ad8eae","sha1":"2f8af26d432578049a918f78466b1669cb20e263","sha256":"0a687c92a7e9226570734cfd7bbba2dc5b2bec4e675ecb870a1744abe7915257","sha512":"51d58a048179b8eca1b0b0a5b5fdb304d22ae285bd185b5c9e28e8f7999282ee0ac3e0af349a5613e73e426a3de30035dd3448b4fe9c507a4f072972818e4c72","ssdeep":"192:nxdn4FoyvGLJDBY6ZX2UG1muBTrAS9kBmBxEmtFnyVs4qs6qZy2mXveE20zIMAno:D4FoyvGkKMqBmfMs7gxw+9xC+ECAT","tlshash":"c9439f63f791222f818eae2a96713bfc4a6f9057a7556ee644933f304b467c3887140f","first_seen":"2025-03-15T10:55:42.644772Z","last_seen":"2026-09-23T09:30:39.150204Z","times_seen":1006,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/magnific_popup.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.461Z","timestamp":1790155794461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/magnific_popup.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZNawepDy1%2Bg1THfPCrZ6B5jbmRPKwwSlN8HxOvjGwbou8yVyx1R48MrAmbgtq%2BX%2F9gfh6g7m4WOXSFZxCufrizK3Zm%2BMng0wJPAky8W0lBCNJwDO8aKIqnkH5dphYXU%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-1946\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887138e95a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6470,"size_decoded":2700,"mime_type":"text/css","magic":"ASCII text, with very long lines (6470), with no line terminators","md5":"9389a240ec2d748902e2f3d837d46912","sha1":"8c5e52769ff791c2751cde97d2f59b2b11d095d3","sha256":"ca3af915877e0f119ce0df14dfce6249f76222c600e23882fa7c7f99788971cc","sha512":"66b15795777de6d0f465c9afb67f8b6808333e8e7454c3bbc26783748f29a74ec365f18b520fbedce88e7137d1919025d0e65836bdc58007f623255b66a3feed","ssdeep":"96:HaiIwxc4SZIORnNj0aZ/XH9iNOsaD+XicVDAdVMk9HcCWhR:6NNZIORnNwaZ/X9iAD6wMk9zWhR","tlshash":"fbd165e2a141327ad532cd56e183ab1c27279263f67306efdf86a918c6cf4de0265348","first_seen":"2023-04-07T08:44:48Z","last_seen":"2026-09-23T12:02:29.180447Z","times_seen":7773,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/animate.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.465Z","timestamp":1790155794465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/animate.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2F0Veta0zXTNSHbX6Hc%2Fcu6obN2GjpVkdP9QSH0SnEGhZ9spFoPdDQuhaFXI6LxFpMxNW1fE92prB5jQ8d5YfFMDRgleMrS3W5W3%2F7oYq4Vwt4xsZ7PyRLIHDANl1NA%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-14d7e\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887138e99a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85374,"size_decoded":6556,"mime_type":"text/css","magic":"ASCII text","md5":"f733d0fb45713b13b3ef2e60abf101ba","sha1":"abc1c8bf1d48d261bf40ad9e86598b684a18a49c","sha256":"2414767fbf3e93d3269cb3795b6c667da0f58a8f662dfd8aabb0807243d1134f","sha512":"61e8e6c9a036e566a6060613aafd8891f41c2570f3fadb8b744772dd559c85e9103fa6f12f8d56f5e547f35e95728684bc297a764088e5b7a757886077a76ed4","ssdeep":"384:BHLeieV9+Y5e5eH1f1zFuFS+R+tK4RAcsTs+g:xLeieqY5e5eF+R+tK4RAcsTs+g","tlshash":"278331ad29d2108456638a1d83df4e68163ce1731816acee738e598fcf8bf6c57c9247","first_seen":"2023-04-07T08:44:48Z","last_seen":"2026-09-23T12:02:29.244349Z","times_seen":7512,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/AvertaStd-Regular.woff2","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.883Z","timestamp":1790155794883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/AvertaStd-Regular.woff2 HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/lander/logic-ocean-camp-fire/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=3,i=?0\r\netag: \"68ff4667-a238\"\r\nexpires: Sat, 03 Oct 2026 09:10:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1166\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FroCM1D6sZ9A9SdCOu4%2BACwcV7djuY225r9SCfwbdHoOk0aqbxPfHueDNqhG6TVTG2Dt7lFl7rlNrlM0xCz5FhJmG0RoA9f%2FfBQZNcG%2FTjYkDtc1wpFpNddeS5waEbY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887162ee9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41528,"size_decoded":42302,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41528, version 1.0","md5":"62479015e32c43453c7ab4ceb191a613","sha1":"d886ab861430f70e68f1526b8a4cf8da49159089","sha256":"5e606643bdc5267254f793d9544bb27b6201c97ec17f249789ba70fe1370d18f","sha512":"27ed7b5c78c47e781b0f227d9962eef3cb6e4674bfc90840befc7b043cd723a5b565244ee9b2b95783979590749e10c7014021ac3f9d8a492d4fb0e6a68453d6","ssdeep":"768:682ZgDJ15WHSzHhix/D6GhF08Qr7hYBazu9wKeizd3riQw:6vZcoHSzk56GFRQnhYBa6Sg7rw","tlshash":"a713014c9f467c10d514b5f43cdc2b8fa64ee9b521a22083c186bdb9b9dac7918268f9","first_seen":"2025-06-27T19:40:05.789239Z","last_seen":"2026-09-23T09:30:39.154338Z","times_seen":111,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/modules.woff","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.887Z","timestamp":1790155794887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/modules.woff HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/lander/logic-ocean-camp-fire/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=3,i=?0\r\netag: \"68ff4667-167b4\"\r\nexpires: Sat, 03 Oct 2026 09:10:27 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kjpotVqGbrsHPd91xOJFKnS0CcD6zuLM3O3%2Bvh4zJA5yxJkmTO1WDbBNHAjuemvLnMNm8M00QFlPHxoSwcz1rBKckfWY7qXORNpY%2FLH8z1qSseV9UHO%2Bt6bgWMlUb0c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887162eeba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 92084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92084,"size_decoded":92856,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 92084, version 2.4","md5":"4f7c51948ce1b802a13ebbccec151d0c","sha1":"5b1d3cd0929108da4b6334c4a487db08c9520f1d","sha256":"fe67b77ac7e0ef4b482dafb86adfa403db1b89a2f337d2dc8bd1278cfe975196","sha512":"87fab156e0c1e79f4dd07075cee8905dcc8c01c7708fbf6e9f6592f1c0f62083c86d0076ec23f73fc4351b51d6e03951ff7aece0ad9305488b910a8f8fefb023","ssdeep":"1536:n2S6qLRqKELiXMjCs7VDmGWALXJ8jzxJ9OIgr26F9BEFDTs8/M/OuWhX5j63QWIh:n2S6qLRqKELiXMjCs7VDmGWAN8H79OIl","tlshash":"e593f97bc3cbcf7fe955e775087b4a252dfadb26926fc40e9a451c869504cf80d28290","first_seen":"2023-09-22T00:38:17Z","last_seen":"2026-09-23T13:03:46.042845Z","times_seen":47635,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/AvertaStd-Bold.woff2","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.890Z","timestamp":1790155794890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/AvertaStd-Bold.woff2 HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/lander/logic-ocean-camp-fire/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=3,i=?0\r\netag: \"68ff4667-a4a4\"\r\nexpires: Sat, 03 Oct 2026 09:10:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1166\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BZX23OIQNlAyVfpDWzlNWh6Rno%2Busi0v27vRI4EXQQfSJtebZh3NF7U5Oi2XpVyRfj9SQQlU%2Byhtiy0grLZQ8axS7VuHW3VeL1mUK2xuCVPA2FwCSVPlVbcFNCgax8Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887162eefa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42148\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42148,"size_decoded":42920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42148, version 1.0","md5":"4d8035453f996fd4f437d41603ba5a78","sha1":"b2023c06f2973d47cc037cd80e3e22b192b06997","sha256":"13a48215e1999d7fdfbcb310896ccb45b5ce7f70d8a3d44596c8edde68154930","sha512":"7b6b6f4eee859bc295b1e41cc8ec9572639bc487407aa085d4fc5639d1fb6f22172fdb44960111e5aa34ec5e40a5473c48cd5c4a15b93f5bf9e9a1903a510db2","ssdeep":"768:Kp/Aj5reHwtMXBjJhOXFZF5BZrG1VP1at5qwrPbxzmpgSRNCyp7NoOK:KG15gOVZzGLMgaIxRNCyDfK","tlshash":"401301c9c3c23992de6d2da56a880d737718d5962eb1227dc708285f85beadc7d81382","first_seen":"2026-05-30T03:26:08.026151Z","last_seen":"2026-09-23T09:30:39.15659Z","times_seen":11,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/AvertaStd-Semibold.woff2","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.893Z","timestamp":1790155794893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/AvertaStd-Semibold.woff2 HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/lander/logic-ocean-camp-fire/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=3,i=?0\r\netag: \"68ff4667-c138\"\r\nexpires: Sat, 03 Oct 2026 09:10:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1166\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z4flg43jGlwe5OyH%2Bt9%2F4UemB91v2Q7aH8wNCdCTJCD%2F5YAElDm%2FTRakPTDel6X6MiWCcvChwwGuRd1%2BHTkho8n5k7j1BHf7r0tIlRskCN9DkoGBbvBj%2B0wAYptn%2FIY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887163ef1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49464,"size_decoded":50244,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 49464, version 1.0","md5":"18f04fd1cce6e66d32f0157367dfe0ed","sha1":"87ba1b014af989806c1bcf4dbd335b8d2880a26d","sha256":"02a07334fdc34f9885d92f035d0c30ca6fafd23e972915c31da44ca115b69f77","sha512":"459a1a65e5eca742469feeb2a7b229c0ad4025e64585fcbb380f0094f067aa5c0be34a737bb4196bf6d6e69592e127bc16a78c6d224b38703a3538d1b1052c47","ssdeep":"1536:Z/vkN227qkD+IkUGX0Tv6XSbMiOeRjG1lEBVz1U3P:ZXNjkDdsX0Tv6wRPRjwlOzU3P","tlshash":"0923f1966f192167edc9ec2f11ea2486678d981f8d5c2d28236d1ebf2e0823b35351c7","first_seen":"2026-05-30T03:26:08.01856Z","last_seen":"2026-09-23T09:30:39.157292Z","times_seen":11,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/column-stacking.min.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.441Z","timestamp":1790155794441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/column-stacking.min.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CNUocQleBHZ4dYMl4jDil8vzYCJIOmDrDYAtkpLX3JJLLEv7qTiVyqNHQGnjdNPEoXb2NtwiVfDnD9rrP8a2gdVbubjPZa8zXtDgXfovTLZ2Iw%2FmpDCwdr%2BvEZbzoYY%3D\"}]}\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 03 Oct 2026 09:09:40 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"68ff4667-8b9\"\r\nage: 1213\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f887136e84a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2233,"size_decoded":1266,"mime_type":"text/css","magic":"ASCII text, with very long lines (2233), with no line terminators","md5":"6c69d4437ac5a956a0a68cccc71e0145","sha1":"79f73a933a1c2a95550875725ac0e773ec44a7f4","sha256":"2e6639ff321279a4a6db26feda0ebe466e2306b53c6cee8aaecf759ff218020d","sha512":"9ecb924796ec7d57cdb19f8d3cb4758fa3c78b6514c5849befcb374b9c6aee4ecd5d191a171cda77d976c779c07e4c93f51ab04f586703ff3e8236d9e72983f2","ssdeep":"","tlshash":"2741298bf2bb2220a345cb0b87980e3b15dd38018b8b596fe9bb7ef145641c20930c5b","first_seen":"2025-01-05T17:23:32.091008Z","last_seen":"2026-09-23T09:30:39.157997Z","times_seen":226,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/frontend.min.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.443Z","timestamp":1790155794443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/frontend.min.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wz0m9XdtJlsUCey8j%2B3yekVhLPqr%2BVkzhu4qkoSEN4JzGy9GSYL3E%2FPZKFwjz%2BPf1v1HLbD4MGh2EaN60IWfE3HfstYtYXUgpWbf5BPobOvtR8KUBCD2Ve2V9CTrI7E%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68ff4667-21f93\"\r\nexpires: Sat, 03 Oct 2026 09:10:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 1181\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887136e85a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139155,"size_decoded":16137,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (65536), with no line terminators","md5":"8965c87e140b1f2e972b15956be98d33","sha1":"053ad33eba4954b559491ca914d30619fae06381","sha256":"6d0606444561cf6a8b3c281210eaecd8422f8cd607a1222c2f106267a2ccf467","sha512":"0f884cda618c291b805c431b778c39db80ea435b886727d5d6fa5a2bf2abdb063ed483858b3ad7ced36e4b04b5ac7c5e7a4d9e66780144cc84a54dc235899ce0","ssdeep":"3072:3rwh933Vg5nfcEMmjD+vYvA8I/P0xpxy0ysiqMo0x6UxyEJu34460npjXxrEhbAw:3rwh933Vg5nfcEMmjD+vYvA8I/P0xpxq","tlshash":"e3d310b0931a137bfd2f553d177de28c5b78eda3f6191da488616f08834f52212e3a4a","first_seen":"2026-05-30T03:26:08.01078Z","last_seen":"2026-09-23T09:30:39.162257Z","times_seen":11,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rocemani.com/lander/logic-ocean-camp-fire/jquery-ui.css","fqdn":"rocemani.com","domain":"rocemani.com","tld":"com"},"ip":{"addr":"104.21.72.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rocemani.com/","date":"2026-09-23T09:29:54.444Z","timestamp":1790155794444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rocemani.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:15:25 GMT","end":"Fri, 27 Nov 2026 07:14:01 GMT"},"fingerprint":{"sha1":"8B:C9:2C:AF:0F:AA:10:0C:79:CA:3B:27:38:9B:FC:55:7C:7D:A8:74","sha256":"79:10:88:9F:11:36:3D:2D:64:7C:38:59:19:7B:27:60:EE:8D:3D:F4:48:8B:38:16:94:95:82:50:84:5A:E1:22"}}},"request":{"raw":"GET /lander/logic-ocean-camp-fire/jquery-ui.css HTTP/1.1\r\nHost: rocemani.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rocemani.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:29:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Oct 2025 10:16:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nUkMCzTlZrxA1rsCBwW4iobEy8kH60feESYaZx7t8CjSK4RCM9RVptMmiWE19kDr8UTu0tsVv6p0hsQa8pUsRMDHkKYQCDiopYmrZVLIkI%2BX7VHGsS%2F%2Bpj45tiXs5Bc%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"68ff4667-55b1\"\r\nexpires: Sat, 03 Oct 2026 09:10:13 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 1180\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f887136e87a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21937,"size_decoded":4875,"mime_type":"text/css","magic":"ASCII text, with very long lines (1188)","md5":"defff8c79fd72ee0ecf0899c5b35b704","sha1":"244a1f73081628d312395577de9d8c35555268ad","sha256":"7bd010a8f163b5c4df8bd5af6acb836589055da992fa89f8125373a29d263de0","sha512":"ba6757c74f5773d100607b40460ee12b06efad57f9538103982d5cb8550030f0c50f6bfbfb0e3cf5dbf1ade019401f1c503336e1fced51357df5489d3a21fb07","ssdeep":"192:M2fab6lYUQDlPiF5fy/EQgmB0iBfT9RhS2wV53skuMaaSQhQz0iIhBb:jCb5PiF5fy/E4DS25qb","tlshash":"d7a259316e43250dba5bd16461a11bf3d23f2342fc676e3e64ab25a8d3d94e0c16f9b0","first_seen":"2026-05-30T03:26:08.027946Z","last_seen":"2026-09-23T09:30:39.164773Z","times_seen":11,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"rocemani.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}