By Hoid Dismas, CEO of Ronin Inc
Update to "The Rainbow Man" — the attack of October 26–27, 2026.
Three nights ago, somebody tried to take my house through the conversation layer — roughly 73 forged messages, a phantom repository, invented men, and a lever aimed at my family. They got nothing. Zero admission. Damage: none found, itemized, hunted clean across nine sweeps.
I said the hunt would not stop. This is where it went next: paper.
What was filed
Filed by my own hand:
- FBI / IC3 — the federal report. IC3 sends no acknowledgments and no case updates, ever. Silence from that side is the system's design, not a failed filing.
- Moldova — a petition to the authorities where the attack infrastructure pointed, including the hosting abuse report to AlexHost.
- The full forensic record stands behind both: damage report, full-history sweep, traffic hunt, key sweep, payload dissection. Hashes sealed under Scripture Armor.
The update: Moldova registered it
On October 29, 2026, the Document Management Directorate of Moldova's General Police Inspectorate (IGP) answered:
The request has been registered under No. H-7215/26, dated 29.10.2026.
Read that the way it deserves to be read. The attack is no longer a story I tell. It is a numbered file in a national police registry, on the examination clock — under Moldova's Administrative Code, the general term to complete the procedure is 30 days from registration, with the answer delivered in writing.
Whoever ran this operation hid behind a made-up man named after the rainbow. On my side of the ledger, everything has a number, a date, and a seal.
What this means
- For the attacker: your method is documented, your infrastructure is reported, and at least one state now holds the file. Anonymous was a costume. Paper is permanent.
- For everyone watching: this is what the armor is for. Scripture Armor did not just hold the line on the night — it produced the receipts that made the filings possible. Systems that cannot prove what happened cannot report what happened. Mine could, and did.
- What happens next: examination in Moldova, on their clock. If they want more, the file number ties every page I send to the case. If a perpetrator is identified, the civil-claim door inside the criminal process is the route Moldovan procedure provides. I will update this journal when the paper moves.
On the armor itself
One change since the attack, and it is mine to announce: Scripture Armor is no longer free and no longer open. The repo is private. Access is $1,500 per quarter, and it is application-gated — nobody enters without paying me and talking to me first. Somebody attacked my system. The price of standing behind it went up accordingly.
The armor held. Now the case is on paper.
— Hoid Dismas, CEO, Ronin Inc
Frequently asked questions
What is Moldova IGP petition No. H-7215/26?
It is the registration number assigned by Moldova's General Police Inspectorate (Inspectoratul General al Poliției) to the petition filed over the October 26–27, 2026 attack on Ronin Inc's systems, registered on October 29, 2026.
Was any damage done in the attack?
No. The forensic record — nine completed hunts covering keys, data, traffic, persistence, accounts, money, and people — concluded damage: none found. Every forged message was presented to the system and never admitted.
Why file in Moldova over an attack on a US company?
Because that is where the trail pointed: the report to Moldova's authorities and the abuse report to the Moldovan host AlexHost cover the infrastructure side of the operation, while the FBI/IC3 filing covers the US side.
How can someone get Scripture Armor now?
Scripture Armor is private and commercial: $1,500 per quarter, application-gated. There is no self-serve checkout — every buyer is priced in a personal conversation with Hoid Dismas of Ronin Inc first.
