{"report_id":"fa53c417-09ea-4dbe-b122-ab16d977d57f","version":0,"status":"done","tags":[],"date":"2026-06-18T00:59:50Z","url":{"schema":"http","addr":"rollbit.us.com/","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":0,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"rollbit.us.com/","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"title":"Rollbit Casino - Crypto Casino, 1000x Futures \u0026 Sports Betting","dom":{"size":53345,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1996)","md5":"4e7449058512bd56dce2e7e06d62d432","sha1":"2ebdba45617afba7f328c1fb0433001116c70f50","sha256":"23854386c34386004ddb93e858568fdb6271b332d1fd12f392037aaa92b4e087","sha512":"86dd51658a8274f6003c9b61ef57967698d4ff13466ff9480fc494bcc1835ea74e03f08ceaafb283efee8f7c2fb3072c2492cf27c4ca0e3869e4e685a5291742","ssdeep":"768:zvWGDKnpXhqxYduuKcNRBg3x+h3qITfKtcpv:D2duuKYRG3A3fwWv","tlshash":"8933951259f817fb02b321d26275375aee928027c64a65087a6e4b8f4ffed47c82371d","dom_hash":"domhashbd820f3e7e487e526eb2d13593c6e75b","first_seen":"2026-06-18T00:59:54.35452Z","last_seen":"2026-06-18T00:59:54.35452Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rollbit.us.com/","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":0,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T00:59:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rollbit.us.com","ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-06-18T00:59:50.955854Z","last_seen":"2026-06-18T00:59:50.955854Z","alert_count":16,"request_count":16,"received_data":364906,"sent_data":8265,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-14T22:19:01.724334Z","alert_count":0,"request_count":4,"received_data":92404,"sent_data":2264,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-14T22:22:05.140579Z","alert_count":0,"request_count":1,"received_data":5836,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rollbit.us.com/assets/js/main.js","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"adb81f57d4726fd7d8f20b635e2e173a","sha1":"e8ff19b2ceddf21bf20823f68927d5157714023e","sha256":"2ef9bea1d3c2f3d265d5b46c65a48ac77ea0d3d9e86447a0196f9a32cfe9080a","sha512":"ccef35a67557e003791a850b52dbf5f2de728f76bc9081f3cb24102865db04d5afe8fe5c8621e646a2a71c902c50bf5609a2a98f212f5e48738c45fb01353fb2","ssdeep":"96:oLMdX7dHPkmmhn/1QXnDdAMyIRa1PGtILrcA7BdxBYvW:oLMdXRhmrEnJAMdRahGtIfc6BdLOW","tlshash":"81b1322fa9e3287658bf337a97ef8354b56040470446d9053d1cca8c5f90ea60abaed8","size":5273,"data":"","first_seen":"2026-06-18T00:59:54.357064Z","last_seen":"2026-07-14T00:52:36.760267Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f244f3ee94d440e8e3b32437c1ca13c","sha1":"34ba3a0d7c503594d10c2135de7d7365c8679067","sha256":"9a6b40d24fd1b42dd269e479002de3d57a9099a822a5486aa8978ada11d5205d","sha512":"d16f88fd99eccd1f2b82036564539dcef98361379fca6228915d26f2592f4622f8308da09a742651c255f2e046cfaaacfc8304d4d942b1ff0de6def98e47208d","ssdeep":"","tlshash":"5c115e29e4d22a3354b733e927df5750296204235046e9203f2ed64e5fb98541d27fcc","size":983,"data":"","first_seen":"2026-06-18T00:59:54.376879Z","last_seen":"2026-07-14T00:52:36.778245Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rollbit.us.com/assets/js/main.js","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:24.920Z","timestamp":1781744364920,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:24 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69d02631-1499\"\r\nExpires: Fri, 19 Jun 2026 00:59:24 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5273,"size_decoded":1849,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"adb81f57d4726fd7d8f20b635e2e173a","sha1":"e8ff19b2ceddf21bf20823f68927d5157714023e","sha256":"2ef9bea1d3c2f3d265d5b46c65a48ac77ea0d3d9e86447a0196f9a32cfe9080a","sha512":"ccef35a67557e003791a850b52dbf5f2de728f76bc9081f3cb24102865db04d5afe8fe5c8621e646a2a71c902c50bf5609a2a98f212f5e48738c45fb01353fb2","ssdeep":"96:oLMdX7dHPkmmhn/1QXnDdAMyIRa1PGtILrcA7BdxBYvW:oLMdXRhmrEnJAMdRahGtIfc6BdLOW","tlshash":"81b1322fa9e3287658bf337a97ef8354b56040470446d9053d1cca8c5f90ea60abaed8","first_seen":"2026-06-18T00:59:54.357064Z","last_seen":"2026-07-14T00:52:36.760267Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/logo.svg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:24.925Z","timestamp":1781744364925,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69d02631-1228\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4648,"size_decoded":2151,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74262ebb07d8335d26c4379b608c85c2","sha1":"8a56207784882ecc4b2566912bc166165bab9913","sha256":"a997ea8e32b2ad3ae2ab5ae9b00790402c6186d1cd190b36d0549bcb68faddb0","sha512":"38b4d0725efff4f6ee84d36cd307f64493d91986508b938b65a345103f33210503dbed945826d0b19b58209e4bb617b80e5dce47cbf18034b5c050d3da92d0cc","ssdeep":"96:jgaHxVYfg8tnLwnHHColish0cZ93qP4fZEvvseA:cPg8tn8nbQsh0cLt6v05","tlshash":"f7a164e4428d91cd628a93f4db3448f6ab3ea0f67645c15dce2e6da0e01244fdcbb5d4","first_seen":"2025-10-17T02:40:09.706754Z","last_seen":"2026-07-14T00:52:36.774688Z","times_seen":4,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/slots/fruit-party.jpg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.123Z","timestamp":1781744365123,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/slots/fruit-party.jpg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15719\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-3d67\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15719,"size_decoded":16024,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 276x199, components 3","md5":"ff894a4368664ebef2b9154756b13a01","sha1":"26162bb44d67fa4663dbb10dd8f08fe51040d1e2","sha256":"148023f1b549ee24e58823ed6a8d8ecbf824253e464c29bf45abfa6d4b6d6be0","sha512":"c3dfd6e3cb2f15eea7c8a7fb32b7bcb7557489873f6b9bae2d73c66e6113c36a042673210ba14c8e54549f584aed7907e9f29ae96e4e30edc86183890e4cd579","ssdeep":"384:+aNLEJCncQ3x/gQvTmdDrBjsY/G0RUYZ/dligrV1:+qQCnt3x4+m3u0dnL","tlshash":"b962d0e4bcfb5e669b68e6770372cf499e7c0f4d9398682c2c6607180924cbb7136196","first_seen":"2026-06-18T00:59:54.359341Z","last_seen":"2026-07-14T00:52:36.777192Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":33,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/slots/big-bass-bonanza.jpg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.127Z","timestamp":1781744365127,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/slots/big-bass-bonanza.jpg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17721\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-4539\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17721,"size_decoded":18026,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 276x199, components 3","md5":"efea64e7167fae204128c7cb1bfa5f9d","sha1":"48527d6da79a56a6c67831db8cf226b04e9bccc1","sha256":"a2ceca588b1c09482f2d621fdf06ab1e94c712e1644a69d746137c4748c385ae","sha512":"5a0e1b013a4ff82403c39b99861d4970b06505e887091ad514a9f6f060fa57ee6616fb9a91893269bd80a698908a76516a77867b640d67618e1687f94fa8042b","ssdeep":"384:TXDovGj/u6N7M5SjcoIk4vvykwRKnYrCGkg7cYTADMZpBLIYgmf:jD0IDN7MYjBIbZwRKykhYcDoWVy","tlshash":"4a82d0a57f08d674f5a4f673a0648ac292a70b27b513898dfc266dc70653c260a7648b","first_seen":"2026-06-18T00:59:54.360413Z","last_seen":"2026-07-14T00:52:36.762544Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":32,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/slots/crazy-time.jpg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.133Z","timestamp":1781744365133,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/slots/crazy-time.jpg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 23688\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-5c88\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23688,"size_decoded":23993,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 265x199, components 3","md5":"f02609bc330f9f1d6ab5c501b4a5bdc2","sha1":"4e3fce6f2aaf74ad276fbad72a332e574571c93a","sha256":"06ba65fb7d411307692a24c90cc023062258fb44d2de6fb8790e339ea468cc27","sha512":"26c8f5d7610a38b92a986b0c560cd54729cbaa9b076cfb274c34a91a2f840b2dff4b760050d463c485afa1cd30d31eca3f3f36aa8da287c0b088da8f8b091f83","ssdeep":"384:vPuKaaL71aX54Bl9B2W3NBm129+82kbupnsoYouWd497WMQUEfDq3zbX9OFs44WT:TpQ+Bl9J3E29mTrZpd4RW5jfD2OFOWT","tlshash":"feb2e1a2f8ef84f17073cf264fd6791b15961eb11eb22b2dbd0243a10d768653b64924","first_seen":"2026-06-18T00:59:54.361298Z","last_seen":"2026-07-14T00:52:36.768215Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/content/content-home-what-is.webp","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.134Z","timestamp":1781744365134,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/content/content-home-what-is.webp HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/webp\r\nContent-Length: 63136\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-f6a0\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63136,"size_decoded":63441,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 900x503, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c3cfc6d0b90958df864441f568e0793b","sha1":"9e4d7bc61396339c0dc8311e99e27b5b00d7fa0e","sha256":"15307ec35cb392523188ee3ebba9c8abf15840e472c8230ff95e18901edc989e","sha512":"dbc0f3f397bda74831277dec82022c39e52a46d62ab5ed89e53639d9df163627589750e46ab56301bd9b624582a3d31530a4e9a59ef04ae6ed694dc39abe15da","ssdeep":"1536:dn2N6p7NvNwEdSb5T5xBi+sjFYttoGMIVh:A6X6Z5NCjFEJMIVh","tlshash":"0753028a3139605085d49beb46ac1f43deee136ce10a03895fef62b6a97d5c1713239b","first_seen":"2026-06-18T00:59:54.362327Z","last_seen":"2026-07-14T00:52:36.759152Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":25,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.112Z","timestamp":1781744365112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rollbit.us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:39:08 GMT\r\nexpires: Mon, 14 Jun 2027 10:39:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 310817\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-06T07:48:22.883758Z","times_seen":26698,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":21,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/slots/wanted-dead-or-a-wild.jpg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.125Z","timestamp":1781744365125,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/slots/wanted-dead-or-a-wild.jpg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 16317\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-3fbd\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16317,"size_decoded":16622,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 265x199, components 3","md5":"827ca564683dafe8f8b9269a3cb34dcd","sha1":"b3e3b040b7514047fa68e1091883cdf77fcc1bb0","sha256":"5f616f8fe5cf3b74e59bb3d4e74e2f65f1e1b2b707c59842a1e828dace458352","sha512":"1633d8c4c3bb4a54f79efd32db3707cb39297641cc8bd92e7c6b0e15603a557a498a2a4ba98cd9a24789e9f390f06d7d74c36083928beda7ce24743083bbfb1b","ssdeep":"384:I4x0ormY4FG5G5JRBvdqqR7V5W1kpCh2wX8sjLIA8pEaI17UKm0WUz:+ormn51vdR7LW1vAwMaItIa0l","tlshash":"0972d01ab1b320782440cfb6edd5949ebeac9818e47c206e1b4583e18b71574dbebf71","first_seen":"2026-06-18T00:59:54.363787Z","last_seen":"2026-07-14T00:52:36.763651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":54,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/slots/le-bandit.jpg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.129Z","timestamp":1781744365129,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/slots/le-bandit.jpg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 19372\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-4bac\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19372,"size_decoded":19677,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 265x199, components 3","md5":"ae49d68d7f7f735e670c0aba4ef1e962","sha1":"193ac5bf2918f9dcf6707bdb8a2999147c30a294","sha256":"ee543dc9c95a946e6cd7eea54618fecfa51af1b84072bf1179dd373e9a33e78c","sha512":"d5f183e0b5b2e3ddb3d95d5dc522412bba6851c1753698470109d68376d239061ca1aef0368dc8c4f2a7059b33799343dc069decedb781bcf5a89547c218381c","ssdeep":"384:Pnqn5njvhdh8Ai5K8aLDnpj3Cz7qW2lAXcQSWVT7YXHGFcyMFaEqzXgO:Pn4jv7iCnZyeXQvwisAf","tlshash":"f692d0ebb1e7b639a763ee7a8d71b08bd2123171286d0bee93d81d1e20640d61e9c544","first_seen":"2026-06-18T00:59:54.36653Z","last_seen":"2026-07-14T00:52:36.757471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/favicon.png","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.286Z","timestamp":1781744365286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/png\r\nContent-Length: 10175\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-27bf\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10175,"size_decoded":10479,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"4474dbdd4df3e7a9c891a21c43a4c384","sha1":"fbddde406ea6d56d0cb3307834dd7d0abb772200","sha256":"c4f00015a6ab8d2b68fa963f67a82c6cfc325aef232042845615a4ca33009b58","sha512":"ee1497b5c6c828ab8f1696030ae8e44ae9caa845f4c09378915b7a5ed414659c1226b5553fa31b60b0a4575ce8f588bf850fcc6852224a25c4935db2e85dea46","ssdeep":"192:iHIamoobbqOYU2XZM32mCtma3MVhqcLE3IEXQsEzuSUfZN83Gel3h:oIXoQD2XkUtYbqrXSUWGE","tlshash":"3322bed08ca049c5bc2e7d054308993155f9a9eaa96df9a9fcc0f92f617c3034096bb9","first_seen":"2025-10-17T02:40:09.67367Z","last_seen":"2026-07-14T00:52:36.773716Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.106Z","timestamp":1781744365106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rollbit.us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:39:08 GMT\r\nexpires: Mon, 14 Jun 2027 10:39:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 310817\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-06T07:48:22.883758Z","times_seen":26698,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.108Z","timestamp":1781744365108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rollbit.us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:39:08 GMT\r\nexpires: Mon, 14 Jun 2027 10:39:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 310817\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-06T07:48:22.883758Z","times_seen":26698,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":36,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/slots/gates-of-olympus.jpg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.120Z","timestamp":1781744365120,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/slots/gates-of-olympus.jpg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 15974\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-3e66\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15974,"size_decoded":16279,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 276x199, components 3","md5":"a3a8a7af569e59f91b41775c9b42a84e","sha1":"158f58db51232a4dd2a8ef5b451498b78b41cf15","sha256":"784ccf9e2273bb416a15a6fd998cceeafb4528b3ba0c44932b754f1a039f075a","sha512":"6cefd5d017d5bbfc0c2bd9fe1caf850681c1be11c4ff1a084b0875810d9d64ad2f9281974993770f25b70b707eb92de0b46e953749f3902d31c6c83b4e08afce","ssdeep":"384:7PdjZRrJMc34HHRBqDc4x5UTEc1PQJw5fuEs90p2zFnFHZQ18Jv:pjrL3Myz4Ec1B5fc9FTM8Jv","tlshash":"f472e08f34b98c571e50fb74a438dd22fb9a0b216678104d513949ef7a193db1e8af08","first_seen":"2026-06-18T00:59:54.368714Z","last_seen":"2026-07-14T00:52:36.761564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/slots/starlight-princess.jpg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.128Z","timestamp":1781744365128,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/slots/starlight-princess.jpg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 20667\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-50bb\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20667,"size_decoded":20972,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 276x199, components 3","md5":"df56489d074e5d9ae552d080b517d5bb","sha1":"4b9914cef2722b544e77736368df187697d4fb27","sha256":"4a7ca6307868aed28f29f6bcf4d60fa943fb46c04c74ea2c368449fe9e3acde5","sha512":"c70b3d17dac5293a5832272ec0a65c916a937c275a4a0240f70fecb0acfacd6807e9d98d92a57c5e4c5464e709978b417890755890248bfaee7a687fad9403c5","ssdeep":"384:kvodaoYGNeT712exPEUhfTZd21T4u4jxTaRgRdzMcKtdl/svqRZqjVDXPJ:codaoYGwPV7TvQwjBOEdzZwdtsNpN","tlshash":"ec92d0b5b5e3f5207c43fe748a43a7280f63e15a2e46395c2559b2ba830ce1c45a6cc6","first_seen":"2026-06-18T00:59:54.36997Z","last_seen":"2026-07-14T00:52:36.767299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T00:59:24.034Z","timestamp":1781744364034,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51786,"size_decoded":10731,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1996)","md5":"cbecd626b396a7ed6c3336c7e5a457fa","sha1":"de49df27852f60e549fa06466034c0f302d3c2dc","sha256":"595b5393263291dff9f1f8e446988b0ac11a7845780bbbccfca55ec81c017432","sha512":"7ab5905b1feb2f76decd62fea019ac3096ce4f98083fafcd5335e7915cf99514cd1e5adb92d45d602db591ec0ae6fe1e3131c53e7b3906697c45ab0c6792253c","ssdeep":"384:Nvuvmf3KnpXhqT9YwuuNgcowMWamSIhWEBdQ+K4z6S1Yv3o28e+VS06aHqbShx5D:NvWG3KnpXhqxYwuuKcYx+YqqITDKtPiT","tlshash":"fa33942259f816fb02b311d222653756fe928027c54a65087aae4b8f4ffed57c82371d","first_seen":"2026-06-18T00:59:54.371212Z","last_seen":"2026-06-18T00:59:54.371212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":250,"connect":25,"send":0,"wait":39,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.110Z","timestamp":1781744365110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rollbit.us.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 14 Jun 2026 10:39:08 GMT\r\nexpires: Mon, 14 Jun 2027 10:39:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 310817\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-06T07:48:22.883758Z","times_seen":26698,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":28,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/slots/sweet-bonanza.jpg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.118Z","timestamp":1781744365118,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/slots/sweet-bonanza.jpg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 21643\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-548b\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21643,"size_decoded":21948,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 276x199, components 3","md5":"a2743e84e758d2707b3fb0f5774a67bf","sha1":"71740556684b78aaac02520af45ed5574cb02b94","sha256":"d64e54f831c1729b046097db497227fd71d39c069c88080da80fc0b81b09488f","sha512":"b0828bbfdc0d375a73843dd45cb84ba79883d635355324d6314da92e78535a7767130b64a5d83ed58982a291cdfc9fb462db96db6962931994aa8f2c030973c5","ssdeep":"384:k+9wrKMgSFTLKutss0WTMS5nwaaYKgrloJLD55iwOVDf6ZSEnkJfsstXL9q6er3E:ArKmTLneOwYZUL+nVDf6BkJfsuherU","tlshash":"aca2d188731fe462e02af93163938f6ee04e73c697d90555620add785d33ee6c3c9885","first_seen":"2026-06-18T00:59:54.372152Z","last_seen":"2026-07-14T00:52:36.776094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/slots/sugar-rush.jpg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.124Z","timestamp":1781744365124,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/slots/sugar-rush.jpg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 18720\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-4920\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18720,"size_decoded":19025,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 276x199, components 3","md5":"c663484d5f335b9862301b4d84527d17","sha1":"7a12c8a0c9a449c0434bdc9d298e08e04b4b93ec","sha256":"856e20858a0f6c1e3ac16fe9ccdb9815a65bf0ff02ac1b89feaba567d8f0672b","sha512":"131bae30e7c0714cc6a78cfbcb565585efdb0c76d5e8115fe331d42c462d29102d02c90c9f0debda0c1d320c07c02faef180f8fac8f71638e99681b1dd0edaec","ssdeep":"384:182EpFtAG79SAMx/O/kLBBdyvAXeB3GS7:18D/2M9SAMg/IBBdyvgQ2S7","tlshash":"a382d0bf3be349d22841c876d69b741c9e2978f5b54cea2d7004d12b37e46d90c2e39a","first_seen":"2026-06-18T00:59:54.373124Z","last_seen":"2026-07-14T00:52:36.771129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":49,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/images/slots/blackjack.jpg","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:25.131Z","timestamp":1781744365131,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/images/slots/blackjack.jpg HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:25 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17030\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nConnection: keep-alive\r\nETag: \"69d02631-4286\"\r\nExpires: Fri, 19 Jun 2026 00:59:25 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17030,"size_decoded":17335,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 276x199, components 3","md5":"73cc69df84df410097a7cf4c676b0217","sha1":"13fb06d681289d9999617cd082d824bf3618ce49","sha256":"11471d3bf70a7432eec91e68b6e1d9f2abcd9ed6d5ff6a395e6cf64e8001e6a2","sha512":"14027d791cfec7b461368c223c8eac7a618857151553ec28a8e74e1a42ea3d1f70a376e40422fa552eeab3438fa0bf348848f51901d52f5b0e2dbd92e0ebaa80","ssdeep":"384:eH47LyYa6nS0bqW768rexxaDjL1Ge3RVnxqab:W47SkCW7uOjcqDxH","tlshash":"d072d001b52261a56242f73a3cbceadb5b82cbdcf9d76138e85951323cb818034b5318","first_seen":"2026-06-18T00:59:54.374082Z","last_seen":"2026-07-14T00:52:36.772116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:24.916Z","timestamp":1781744364916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 18 Jun 2026 00:59:24 GMT\r\ndate: Thu, 18 Jun 2026 00:59:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5152,"size_decoded":1213,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2eb3cbddc2636edb61aa3c32449d6184","sha1":"84751778c3169ba380df7aa15afa692af9a255bd","sha256":"2bff454a187330e2f15d6f0b0612f7bfc95f7b8036a99896abb2d0247488d80a","sha512":"14a3a040e4049a3f0d3feb8e335ff0671818befde7e2ce20835af765b46356bc3ecd3a5a7034bea931d730da7e6d7c79dff749b589852de3f42efade1cd4efea","ssdeep":"96:cNQOEaHQOEaGJc+uhQOEafNDNQOXaHQOXaGJc+uhQOXafNDNQOxMaHQOxMaGJc+W:cx/GiZC4GRZfRG4ZYiG/W","tlshash":"45b1ff9200679500eb635cc226cebe32be8fa1556050da396ffe2498ed9fc311311b2d","first_seen":"2025-09-12T17:51:22.981034Z","last_seen":"2026-08-06T02:35:39.291036Z","times_seen":1004,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rollbit.us.com/assets/css/style.css?1.0.0","fqdn":"rollbit.us.com","domain":"rollbit.us.com","tld":"us.com"},"ip":{"addr":"178.159.43.76","port":443,"asn":211381,"as":"Podaon SIA","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rollbit.us.com/","date":"2026-06-18T00:59:24.918Z","timestamp":1781744364918,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rollbit.us.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 02:21:46 GMT","end":"Fri, 28 Aug 2026 02:21:45 GMT"},"fingerprint":{"sha1":"DA:59:6A:0E:D5:70:4F:44:CC:07:99:5E:2A:D9:03:14:E7:83:4F:3E","sha256":"5A:3F:92:29:98:0D:5E:34:05:5F:3C:C9:2F:F7:34:CC:C7:CF:C9:55:ED:4F:70:11:09:7A:4E:B7:F9:D6:E4:02"}}},"request":{"raw":"GET /assets/css/style.css?1.0.0 HTTP/1.1\r\nHost: rollbit.us.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rollbit.us.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 18 Jun 2026 00:59:24 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 03 Apr 2026 20:42:25 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69d02631-94e6\"\r\nExpires: Fri, 19 Jun 2026 00:59:24 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38118,"size_decoded":7221,"mime_type":"text/css","magic":"ASCII text","md5":"e2f497d07ed6aa4b1087edd9bd611acc","sha1":"7136da0a202b402cf7285f7cc27c5399fa57d378","sha256":"0a4abfdd201298a5de3c0df2ee23a6526dbea10a7379922995056655d3dfa72f","sha512":"1f6ce71d7abd40cd7abe6539e9d12d22d05b05747a56c894d47ea05b86f4760279b2eb267aaaacdd35f523026080b47b95adc563773404ac2b2a55e1290dbce5","ssdeep":"768:1uFqIJnEN3DQdOSCoQFHnYj0DQvgEggl3aHbac0angj0XEu0FYk:Y1EVDrScGlj0Xsek","tlshash":"a20335515b7358b5b427992827efd749735ca0638d0aed6e7ec832084f8a3f85192f8c","first_seen":"2026-06-18T00:59:54.375967Z","last_seen":"2026-07-14T00:52:36.769615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"rollbit.us.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}