{"report_id":"9e462ace-9d9b-46d5-8330-7843ac59f642","version":0,"status":"done","tags":[],"date":"2026-09-13T18:54:47Z","url":{"schema":"http","addr":"moc-rentura.com/","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":0,"asn":202412,"as":"Omegatech LTD","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"moc-rentura.com/","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"title":"Platforma Moc Rentura | Oficjalna strona internetowa","dom":{"size":224739,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32829)","md5":"5d76ac3a0a8071bb0d251ab49c7f989b","sha1":"173baf4664dff451b525ccd08fe5ea8775070484","sha256":"f105910718e233a6859eef0ff961930606f8fd52305becde024560dc750ffd07","sha512":"72ef64bcc486cb172d57f25dfff6ff7f1ca3c15335575a3362529eee5cb5fb5fe5af97660ef5036fe1dc31f40f027bbbdd5419694628f41ee78ef08c39adb645","ssdeep":"1536:CgpVmsfkUgQmTa3MZo+Hd1+wmzXI7pGl2sPbaBBHQvKWBe+C8xlshwt0HU9pKw+H:CgpV/kOQszXI7pG2sPbarmcxlYH/4Tz","tlshash":"4a24b61212a936264033d3c020659f76faa6ba9bfb67ca0037ec47b17bf9c4c641b55d","dom_hash":"domhash94dba2e92693521917dc197773bc6c0f","first_seen":"2026-09-13T18:54:49.465962Z","last_seen":"2026-09-13T18:54:49.465962Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"moc-rentura.com/","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":0,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T18:54:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":5571,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-09-07T08:15:42.085292Z","alert_count":0,"request_count":1,"received_data":18822,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":2,"received_data":208232,"sent_data":1117,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-09-10T03:45:03.789901Z","alert_count":0,"request_count":1,"received_data":2523,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-06T23:16:32.201366Z","alert_count":0,"request_count":2,"received_data":310982,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-09-11T17:53:59.224216Z","alert_count":0,"request_count":1,"received_data":978,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"moc-rentura.com","ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-04-22","domain_rank":0,"first_seen":"2026-09-13T18:40:59.176635Z","last_seen":"2026-09-13T18:40:59.176635Z","alert_count":115,"request_count":23,"received_data":622979,"sent_data":12020,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.frankfurter.dev","ip":{"addr":"104.26.15.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-07","domain_rank":0,"first_seen":"2025-03-27T21:41:51.44369Z","last_seen":"2026-09-09T13:31:22.454144Z","alert_count":0,"request_count":1,"received_data":973,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"moc-rentura.com/","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-14T22:45:51.506907Z","times_seen":201459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/scripts.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"efe3eb145325f12e3bc16ff0b8dc6fc4","sha1":"81e479584019d62d2a83cb56563dd1c0dcaa80a6","sha256":"a617e8d9650ce730648e1fd0e06af93e8f236ee1cae531cbeaba8ad44f0e929d","sha512":"fca8502b938283d75b7f47b836a7979bb438da45f8dde0d20a2fd790ee422b3a6e98f5b35478ed428458f637b0c800d685a32dfefa81b5ed1177ab3ac82cb498","ssdeep":"192:5niEmEl5j2AvoQEokMx0i/N+5PL0rv0PHc6M2ayCMd58NGMGXn1H:57mFAvh/N+5PLr/d7dndDr1H","tlshash":"b512636a76b20436823300df978f965537103087b945eaad3b8cc2441fd8b5da2f2be9","size":9265,"data":"","first_seen":"2026-05-12T02:13:00.401666Z","last_seen":"2026-09-14T19:18:37.598081Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/forms.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"importedModule","is_inline":false,"md5":"438381e287b412691bb337ec52c717e9","sha1":"58ac4186c90f39756be58d27ab6f5546a0a17ae8","sha256":"0b0ab1128dd96541915fe9c1fa807e45b318cb355b5abf7492d9a42feb440229","sha512":"90a923c065fe46f6a75482d8c1f4ec3be6c8b2ecdefe91de373baf470e918f4b01c3cb61d5d6c4aae8119c25f8f9682b38379dc37362c0c1b159017ff5929566","ssdeep":"192:SlzohnLKwq0rEZfVxlRQHuxDtwt5t0UAVvab60IX5HJ35:Gohn+Fl+Ofgf0UkabaX5pJ","tlshash":"b2d1229921fa45394db311fcbbc7a502692d3027148ecd547e9c62102fc9bed6bf1798","size":6608,"data":"","first_seen":"2026-02-13T03:24:00.147257Z","last_seen":"2026-09-14T19:18:37.590291Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/utils.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e654fbae22a0762fa384b61fd03f1679","sha1":"3f2dc491443ab4d9dbf6abee895d8140196f0aab","sha256":"93c8dd85421914d3c09fdacc4b77730595202004a1d8c9ef7639c7551157bda6","sha512":"af44d0ca2f0ca731ecb7e535963c694710a3e887c8bbdfc95066f1fab72d5c5da66313e9097498d246b93a04a1b642fd65d591e80d325a72bb0f7bf5a5f8da6e","ssdeep":"3072:TklM0tDKjFs3OwPss3MwPky0zOt62xFMfM+dhvo4sUifhNyf4LtXKtofQVkmDmVu:TklMmDOW0IxFMfM+dMGou","tlshash":"fe44f0ebd63c973ba1d87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","size":268720,"data":"","first_seen":"2026-02-13T03:24:00.128548Z","last_seen":"2026-09-14T19:18:37.593677Z","times_seen":1129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae5b2ecf0db42cccace5ee36aa219845","sha1":"7d06366f2515545ce419609536b6caed59ae7632","sha256":"4a83c5733407449e975f6940a1f8ad3050491f3907d9cfdfb5e4e620de6fd213","sha512":"fbf8c817e9b9015ddfb34f4e8dc34050a0b12ea57cf98a5b8e59ae36fb5b691746c23ff253166790fb0d07bfad49a9db40f956b3cf25c55f55f797a43a52939b","ssdeep":"","tlshash":"0ef047ddc130c52651acc20c003f3bcd785700310c9ee885497f426265b50b7f14d55f","size":599,"data":"","first_seen":"2026-09-13T18:41:02.050196Z","last_seen":"2026-09-13T18:54:49.506269Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f1e74e68391f6beae6e917c5bc99685","sha1":"9afea928da30326b2b26cd8e5a7f937d1cad1bad","sha256":"83af79d281ab644ae61ac510568ab6f2c7771652c688c7585de8acf050aa56f8","sha512":"d11fbd417a162ef9d22c155e9c7668f8f717e58fa6b85f2fbf39c203ca988753f20985a392dde931e0d64ee823cd45cf7acba40b659cd13caed12c67a6ba3fad","ssdeep":"","tlshash":"1c01fe6ca072457f0efb105f7213e3843e791007b14ac4a8378ce1a92f99bdb42d69c8","size":732,"data":"","first_seen":"2026-09-13T18:41:02.051367Z","last_seen":"2026-09-14T19:18:37.604161Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"393dd04c3edd29a4f93582ad14dce2a1","sha1":"9547af69656b37ca52ea84e2513d677ece12a678","sha256":"06ca222038d205533f627fe3587ce5681c8a0caa71ce74998c5b5c182d23aee0","sha512":"4ea31c3504c9a5a5fee3fb7d200c42a0323fe8a928a17477cafc8b9c8d0c9b406721c86f8e37578bbf5ed7ceec934e92936eee156a76cb9e80a8afefb98af772","ssdeep":"","tlshash":"2a01260b0946491140227169ecff6b6c756305532bd1e5f07ebe3650af1850f6737faa","size":726,"data":"","first_seen":"2026-09-13T18:41:02.052494Z","last_seen":"2026-09-14T19:18:37.604742Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"2327d062cca2c7c7bfc3227f4470d854","sha1":"022b0c65496b441626edab60b82c2497716bc708","sha256":"5c784e8245bf25dd0bd8abca3daca58cd7ca61d13cf817d9f7b374c080826db5","sha512":"26e80e2afe7d0e42a055ec58662006ee02c84c65c3728842a0b31b1864ff1ce1b079c3ceb87a95d34e6080e4c8cea176950b120a441187eadff0bf85f81d3964","ssdeep":"","tlshash":"5af0c6ff1e37873a442711c99f9b2845291121277093c8b8f8fdcb841fd5e108562b2d","size":616,"data":"","first_seen":"2026-09-13T18:41:02.053612Z","last_seen":"2026-09-14T19:18:37.605327Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/sliders.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"importedModule","is_inline":false,"md5":"834fd3ceafdd46b0bb281254e936084d","sha1":"46dd97913897b2a1fb6fbfac9140e25c696cbeb0","sha256":"8a8dc3156c04d602fc5a6b493cc90328ad883121c42bcc644771e4f01efebfc4","sha512":"716fec83e508768427ce25eb0c8c1e5cfe0d1ac0f3a63d5fe95ec86550d511ff2af2d820a770965dcbdc4acd6a480e89905b62bc75fab603f92cda0c358207b6","ssdeep":"96:BWbrPGgsSpO6gAQn4lfW28+zPRNRGzKUsWZ:BW/PG/CgAG4lp5W53","tlshash":"79911266703523368a6741edad0bcc41e2eac0477906d680f1ca071a8fc6fac96e5dfd","size":4311,"data":"","first_seen":"2026-05-12T02:13:00.457304Z","last_seen":"2026-09-14T19:18:37.598668Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","size":17946,"data":"","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-09-14T19:18:37.601958Z","times_seen":1865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/geo.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"importedModule","is_inline":false,"md5":"8b14a654b9112f2114657858993b3350","sha1":"ff3982f20b739776c86bef3066ac89aceac1ac8d","sha256":"bee4593747761e3e4ad47338f96a7504845fdb6e01a12821afa0fb0cc3b7dcec","sha512":"95f330e9adaa9a1bf5586398050df3c87ed00b5e62cdcd95d97303bc5195f99fbb4f0c142944065fe76742e840e91dcbbcf4c956d017f8a4fed708675eb3e877","ssdeep":"","tlshash":"2601996552b6062040f731cada6ba2602031e00f374cd8ea769f03481f8991d82b27dd","size":696,"data":"","first_seen":"2026-02-13T03:24:00.146223Z","last_seen":"2026-09-14T19:18:37.602504Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/lazyload.min.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf5154b6bb0c06f2815b3b2dc01ab4fd","sha1":"fd56231873de2769995b9642a119b1426a41ce5e","sha256":"1632d2af4c7a54f873e4cf415c19d8b9282db268c8fe7d92e159c7c7675e6fdf","sha512":"fa338ce0f5a646d5361bd9cffc67f313dd1a5bcdd8a9dce1f1fa189a226ebdf203a87c772429d7eb232bd693582fac1a51b3b23eae0bc40712b4bc5159026a37","ssdeep":"192:mTP85/2hHrQ7oLXC7JyE/UaiN1pDib7UMFYRfz/9oNIbJuly5c:mTPW/cs4X/WHK1pDCUMFY9/uya","tlshash":"79f1a8535907b03f793b625660dc33153028749bec0e4ce47d685de9a15ae4325b3b79","size":7462,"data":"","first_seen":"2025-02-20T08:43:01.683971Z","last_seen":"2026-09-14T19:18:37.59188Z","times_seen":5185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"584b32aaa35c260a3b4ddacfce274a42","sha1":"324ecf2536f3781db1f77ed454bf3c271594454f","sha256":"990fdaa51ed5c86f92d670ab5a79dbf7415f34900dc2f443c5a03dca94479475","sha512":"bca5c9cdfd2562a5a1d31e26c974022172e14ebd599e30d3daf091d27a266a820a025b2ea1e1329bf18be3489c51aafca5025db638631452fee03afedd8f8a26","ssdeep":"768:mYJ0FRsgH7XpwJxK6jk4ixVDQtwnixrUT2PXIh+vH/kvzas:mcgHl6Q4ixVDQAsrcGgmHMas","tlshash":"f603b52d6316672babfd8155f4e4a582de6f7a460944886c3dac8fcb0098dc379b3734","size":40669,"data":"","first_seen":"2025-11-18T18:36:54.272556Z","last_seen":"2026-09-14T19:18:37.593097Z","times_seen":1155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/currency.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"importedModule","is_inline":false,"md5":"98a93293ae196b68e464509fcab985ec","sha1":"053f1a9012b5dd880e10e88f91145e7937cf08e4","sha256":"c42d64df9e6a183e2f9eb678ec85e6861b6bcd431342cd00087d63571900e89d","sha512":"be1582c27f09407aae6c8c07b2218ed3e7c54e0e02e2430f09b509085eef197c8e39c23a1aec7a639a2cebea14b33f2e1bb693faec41c7115c03b8ccdc7ee876","ssdeep":"96:xU2XwoKafqYFbSPLv+IPuYmRglJHBuQhwPKiuXKnv:xVLRIPLvZuYQgnHoQhw0anv","tlshash":"1091f1d46b234590c2712198584e788064f2963b7c09b9cab49f410c6f4dd1de935eff","size":4332,"data":"","first_seen":"2026-04-12T21:43:49.272548Z","last_seen":"2026-09-14T19:18:37.594408Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"moc-rentura.com/assets/css/tailwind.min.css","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.684Z","timestamp":1789325656684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/css/tailwind.min.css HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Apr 2026 13:02:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e8c6ed-f8f8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63736,"size_decoded":12820,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63667)","md5":"45bf4d7130325a478379a23980e4d9d3","sha1":"8dc4531fd3becc4964e7ca2334d0bf9663a2d0e6","sha256":"2d85429acadc94f838ac561dd0e02c19fb3c249e90a879a64a31b05d02d21fc3","sha512":"91e258c45c983d11b5544c835232b7d3b7f39db1ef45c537ba023590b023431a1d016f6e809694405cb42c58238cf68f12da78489a39c3eb1ba8638bc2191293","ssdeep":"1536:zJ/r9WuSVgVPMH/FQ/fqTqfg+rw2EZm86QQM0:zJ/r9WuSVgVPMH/FQ/fqTqfgsEZm86QE","tlshash":"c253b5926315d03fee23e079636df06c773dba41ad928ed8ea81521796c32f10d67b18","first_seen":"2026-05-12T02:13:00.454559Z","last_seen":"2026-09-14T19:18:37.587125Z","times_seen":5,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/ava-2-108.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.068Z","timestamp":1789325657068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/ava-2-108.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2035\r\nlast-modified: Wed, 22 Apr 2026 13:03:36 GMT\r\netag: \"69e8c728-7f3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2035,"size_decoded":2805,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7537b5c2d6545cd18f2dda82dd4bcca8","sha1":"00659824a7f24ba85f5054c17af487f431ec18f5","sha256":"3255c161698a5095e4d97452a12e687f2ba51142a031a2a717eb75c381cfc51c","sha512":"6508f996041bcfa612eb12e8503746af343ce35b064427d51543bc8dbd21440879553e1d192799ecaebbc371aaf0f7aed9f275c3f32058e256f4a41d4a4defb9","ssdeep":"","tlshash":"7041195862509b29c67d0b31a0bd0303bb5422b5a76fb3f37d0a3764b926b12e15ac29","first_seen":"2026-05-12T02:13:00.406772Z","last_seen":"2026-09-14T19:18:37.580632Z","times_seen":6,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.frankfurter.dev/v1/latest?from=USD\u0026to=NOK","fqdn":"api.frankfurter.dev","domain":"frankfurter.dev","tld":"dev"},"ip":{"addr":"104.26.15.64","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:21.046Z","timestamp":1789325661046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frankfurter.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 17:36:11 GMT","end":"Thu, 22 Oct 2026 18:35:55 GMT"},"fingerprint":{"sha1":"5B:2D:3A:D8:F7:94:2A:DE:5D:F4:5E:14:3F:16:18:1D:C6:C6:22:AD","sha256":"F4:D6:87:DF:8C:CE:47:DA:30:62:33:AB:EB:8E:19:12:EE:D6:51:01:43:C6:F7:FF:8A:A8:5C:B8:FE:8A:AE:60"}}},"request":{"raw":"GET /v1/latest?from=USD\u0026to=NOK HTTP/1.1\r\nHost: api.frankfurter.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nOrigin: https://moc-rentura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 18:54:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SC4OlmR8fhP6Xf3GxujPFbpagjgGPOHATG5U1MP4lp%2FngKhuRlcs0puMLyiQXw4BcvskU6TsKsuut0slYQ74XK7VsvnmICqTLQPLkNok2BVewiAu7qjJ%2FzjDWZJdG7ryUUDzvYE%3D\"}]}\r\nvary: Origin\r\nx-robots-tag: noindex\r\ndeprecation: @1779103800\r\nlink: \u003chttps://api.frankfurter.dev/v2/rates\u003e; rel=\"successor-version\"\r\nage: 831\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\netag: W/\"a5f78aedefc93c72e18880849bb06461\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3a95c25bd8fb512-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70,"size_decoded":969,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"811c120bcd38db77dde64d512e5bfe27","sha1":"3dcc92b20a6c33a262623f2ca397e67ab26f71b6","sha256":"bf1127682c7e63f8dbd5b631675c97cd0c3cd2e83cb8836a86b773f25a79fad1","sha512":"170940cad1f8bb43d4728cba6c5eb2a0afc75e2583fbe3b7ffd4bf0effd86d6ab57fb0f95f4e38d1dd6322cc463a694b89b003d8edae11dd83df89df775f3f5b","ssdeep":"","tlshash":"7da0220ebabccea0e0000cb0fc208a002c0c3200228c0b008ccee200c30002c080e828","first_seen":"2026-09-12T05:06:24.774292Z","last_seen":"2026-09-13T19:13:15.110996Z","times_seen":7,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":6,"connect":2,"send":0,"wait":45,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/ava-3-108.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.069Z","timestamp":1789325657069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/ava-3-108.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: image/avif\r\ncontent-length: 3068\r\nlast-modified: Wed, 22 Apr 2026 13:03:12 GMT\r\netag: \"69e8c710-bfc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3068,"size_decoded":3838,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7d9c007599907d3080f9bae5874e6b2f","sha1":"39eb9b1162f59a8fcfddf758d1c7fb36977d0010","sha256":"671b4bbb3dd81c0d941f878f901bb9e31d2b4e0b1afd3268a8431d528a1a025f","sha512":"568aa6480d8e1ed9f48a5cd17302b778ffb2a190f68dfa16a1a8ec21309503608381d6ba8383ecaf2b979ac8c629475d8c788a3bea2bee11b8a7ab54254ecc5d","ssdeep":"","tlshash":"4a514d9021607eb4d9ce113454dc53c45a9a619823e4fabb490179dcde17f93f915e2c","first_seen":"2026-05-12T02:13:00.420853Z","last_seen":"2026-09-14T19:18:37.596666Z","times_seen":6,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/geo.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.323Z","timestamp":1789325657323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/js/geo.js HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 696\r\nlast-modified: Wed, 22 Apr 2026 13:02:35 GMT\r\netag: \"69e8c6eb-2b8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":696,"size_decoded":1492,"mime_type":"application/javascript; charset=utf-8","magic":"C++ source, ASCII text","md5":"8b14a654b9112f2114657858993b3350","sha1":"ff3982f20b739776c86bef3066ac89aceac1ac8d","sha256":"bee4593747761e3e4ad47338f96a7504845fdb6e01a12821afa0fb0cc3b7dcec","sha512":"95f330e9adaa9a1bf5586398050df3c87ed00b5e62cdcd95d97303bc5195f99fbb4f0c142944065fe76742e840e91dcbbcf4c956d017f8a4fed708675eb3e877","ssdeep":"","tlshash":"2601996552b6062040f731cada6ba2602031e00f374cd8ea769f03481f8991d82b27dd","first_seen":"2026-02-13T03:24:00.146223Z","last_seen":"2026-09-14T19:18:37.602504Z","times_seen":314,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/forms.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.326Z","timestamp":1789325657326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/js/forms.js HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 13:02:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e8c6ea-19d0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6608,"size_decoded":2745,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"438381e287b412691bb337ec52c717e9","sha1":"58ac4186c90f39756be58d27ab6f5546a0a17ae8","sha256":"0b0ab1128dd96541915fe9c1fa807e45b318cb355b5abf7492d9a42feb440229","sha512":"90a923c065fe46f6a75482d8c1f4ec3be6c8b2ecdefe91de373baf470e918f4b01c3cb61d5d6c4aae8119c25f8f9682b38379dc37362c0c1b159017ff5929566","ssdeep":"192:SlzohnLKwq0rEZfVxlRQHuxDtwt5t0UAVvab60IX5HJ35:Gohn+Fl+Ofgf0UkabaX5pJ","tlshash":"b2d1229921fa45394db311fcbbc7a502692d3027148ecd547e9c62102fc9bed6bf1798","first_seen":"2026-02-13T03:24:00.147257Z","last_seen":"2026-09-14T19:18:37.590291Z","times_seen":63,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.634Z","timestamp":1789325657634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:56:10 GMT","end":"Wed, 11 Nov 2026 10:56:07 GMT"},"fingerprint":{"sha1":"F3:18:40:3B:2F:29:8F:72:5D:C9:F9:8D:83:FF:1A:13:26:F5:A1:7A","sha256":"17:EB:45:1D:BC:F6:67:CB:CB:85:0A:03:6F:55:93:30:F8:33:F4:78:1A:C0:46:17:64:09:C8:78:62:38:02:5D"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nOrigin: https://moc-rentura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 13 Sep 2026 18:54:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, HEAD, GET, POST, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://moc-rentura.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m50Kq6oNKJKCH3XZ07zQEphNvvNr0p2SlQWTNdSnclL11Py9I97c51mXsNT8IojY2iPGgDCfZjNUsWrdTFuVwxep50mIdxhX1LSi1eruLdyfFAf8pU92OCtD\"}]}\r\ncontent-encoding: br\r\ncf-ray: a3a95c23eb3d5696-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":2132,"mime_type":"application/json","magic":"JSON text data","md5":"878adf64487b5ba37608106f8e269077","sha1":"b0ef56570413b25e55b2ad3f36609fd8ead6d116","sha256":"aa56dfcb6ef80ed825a55643ec8581ae4b1cf25f703dd7c66659f02420872662","sha512":"352bc3c08398b375bf697c19b0a26af887e9a5e8b9c0b0e66d4d94028803ad4080db7f9597e46af7dbdb1111368f379484fa63f04376afe010a7c86a464b8f34","ssdeep":"","tlshash":"0301df68e4780e7b9cb813987078691b113422176e563a8e7bd4a74d0f8d9bf30b135e","first_seen":"2026-09-01T12:09:39.774459Z","last_seen":"2026-09-14T19:35:36.27465Z","times_seen":458,"resource_available":false,"data":null}},"time_used":3393,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":239,"receive":0,"ssl":3147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/add-108.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.071Z","timestamp":1789325657071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/add-108.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1210\r\nlast-modified: Wed, 22 Apr 2026 13:03:00 GMT\r\netag: \"69e8c704-4ba\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1210,"size_decoded":1980,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"958faba82f9cbb953a669d3c0d4e52ba","sha1":"56d765bb8c3e04c111cff76d4b0779a0d2acb7fa","sha256":"42c96217e58cd76e0fc0e25f250a0ad6fee6731a91f7053fb1cbf6d3544458bb","sha512":"f351aa03277acf7d10beae3bf77f5df05e2cbd1b48899b05d9a056234f77ded8daded5f135c9c6d2ca815b07c196d36ff5e06eb846ce049aa696c564d845aa16","ssdeep":"","tlshash":"1621930023b07f75c598277d061c9b6a77a022a8b976e2a30c2e7628d632b13e905c1c","first_seen":"2026-05-12T02:13:00.439862Z","last_seen":"2026-09-14T19:18:37.592537Z","times_seen":6,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.681Z","timestamp":1789325656681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 13 Sep 2026 18:54:16 GMT\r\ndate: Sun, 13 Sep 2026 18:54:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-09-14T20:05:07.47158Z","times_seen":21915,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/hero-bg-1280.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.688Z","timestamp":1789325656688,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/hero-bg-1280.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:16 GMT\r\ncontent-type: image/avif\r\ncontent-length: 263646\r\nlast-modified: Wed, 22 Apr 2026 13:03:05 GMT\r\netag: \"69e8c709-405de\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":263646,"size_decoded":264420,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"14915e22170a15cf56da4590de5eb7e0","sha1":"535f26c356f5816680db374bab9320cb5781ad2c","sha256":"c92a14dc045b09eab1c1f86ae9bf25237e228e268b29e88244248b4d56b9b312","sha512":"325320827ce005ae68085902d3f5de966bfdcce0656daef26fa4317c8703174300264bae642409b911a4bbc539778536636232fee8a787f0c9b301ee023e8bc7","ssdeep":"6144:f4R/+Pkh1oXFQF0clwrZLiZ450nQNKRYVhLWPDb:fSbqFQF+ViZ4mlYVhY","tlshash":"e3442367b92cd220d755e47e0e1a1ef79992ac4a1205fd38afebc6c803c58864e04f5f","first_seen":"2026-05-12T02:13:00.432748Z","last_seen":"2026-09-14T19:18:37.584404Z","times_seen":5,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/ava-3-108.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.716Z","timestamp":1789325656716,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/ava-3-108.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T22:51:38.22464Z","times_seen":18467164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/add-108.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.717Z","timestamp":1789325656717,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/add-108.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T22:51:38.22464Z","times_seen":18467164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/favicon.ico","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.618Z","timestamp":1789325657618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 22 Apr 2026 13:02:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e8c6ee-3aee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":6681,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c681ab31d782c5a451cba154a024c849","sha1":"95adbd71aa565fe52cfb947582f8b2ef125db1c5","sha256":"52d49f28234d6ad940f6351e90779c5e7f6dccecb9d04a316d1924842c84b7d0","sha512":"c8420306baab5e1a0ed30c52f52c5cbc88b0c941e09bed8f73113eb000ddeaa32749db682fb09a1059d0804c377bef22cec9376c2e5716daa80a2d9b32985892","ssdeep":"192:sf9goa0ETaEyV6KaGk9JdnmXFgGUdeUl/cPesjSH:sfLa0ETalUWmmXeAUl/cPeSS","tlshash":"fd625aaa7721c55ec5945538cc62d1fa23167f59ed730683a8d83f8f29b21f9392034c","first_seen":"2026-09-13T18:41:02.030938Z","last_seen":"2026-09-13T18:54:49.484881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/no-flag.svg","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.702Z","timestamp":1789325656702,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/no-flag.svg HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T22:51:38.22464Z","times_seen":18467164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/ava-2-108.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.715Z","timestamp":1789325656715,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/ava-2-108.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T22:51:38.22464Z","times_seen":18467164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/laptop-2-1280.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.072Z","timestamp":1789325657072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/laptop-2-1280.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: image/avif\r\ncontent-length: 27292\r\nlast-modified: Wed, 22 Apr 2026 13:02:50 GMT\r\netag: \"69e8c6fa-6a9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27292,"size_decoded":28064,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3c1eb8590a6eba356dbfb4b5811e4dc0","sha1":"a8e20c0d80782c3cba91151429b5f03b9736dd38","sha256":"9990f0c458db8308b76db97f0b79518956d734bb0ec981b9bfeb9349d32db1af","sha512":"79398559e300610542044bb9642d0c5b67efdc0f08fae93e7e77741eb286bf581ff53445716602d420e54c21eca386f269b507a7396c4ba7452376e2a9c41d56","ssdeep":"768:lpjDn0lDvCeLl/gCbKLUTIxL88wqy4q2nLwRBI:zjjGCeLlYIQxQ8G4q2cRa","tlshash":"e2c2e1623af9df13dcac72b02065894018f6f46b471094eba593f94408df79b4c079be","first_seen":"2026-05-12T02:13:00.423238Z","last_seen":"2026-09-14T19:18:37.58212Z","times_seen":6,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/favicon.ico","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.619Z","timestamp":1789325657619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 22 Apr 2026 13:02:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e8c6ee-3aee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":6681,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c681ab31d782c5a451cba154a024c849","sha1":"95adbd71aa565fe52cfb947582f8b2ef125db1c5","sha256":"52d49f28234d6ad940f6351e90779c5e7f6dccecb9d04a316d1924842c84b7d0","sha512":"c8420306baab5e1a0ed30c52f52c5cbc88b0c941e09bed8f73113eb000ddeaa32749db682fb09a1059d0804c377bef22cec9376c2e5716daa80a2d9b32985892","ssdeep":"192:sf9goa0ETaEyV6KaGk9JdnmXFgGUdeUl/cPesjSH:sfLa0ETalUWmmXeAUl/cPeSS","tlshash":"fd625aaa7721c55ec5945538cc62d1fa23167f59ed730683a8d83f8f29b21f9392034c","first_seen":"2026-09-13T18:41:02.030938Z","last_seen":"2026-09-13T18:54:49.484881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/laptop-2-320.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.718Z","timestamp":1789325656718,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/laptop-2-320.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T22:51:38.22464Z","times_seen":18467164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T18:54:15.189Z","timestamp":1789325655189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 42800\r\nset-cookie: init_lang=en; expires=Mon, 13 Sep 2027 18:54:15 GMT; Max-Age=31536000; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"init_lang","value":"en","quoted":false,"path":"/","expires":"2027-09-13T18:54:15Z","raw_expires":"Mon, 13 Sep 2027 18:54:15 GMT","max_age":31536000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"init_lang=en; expires=Mon, 13 Sep 2027 18:54:15 GMT; Max-Age=31536000; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155528,"size_decoded":43559,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3083)","md5":"3ae44da0dc84c0ecff5df1ec020cd1bd","sha1":"cddac3b7f0824d985d3cd2df36b952b0a4916345","sha256":"62cd6cc122469740ac8f7c7a68e7190685bb9f34547d52f7bc2804b43093ff51","sha512":"30b3aac2246e40a0bb2d8b8dee1a4ffb45f001109390dba83bb8b17044bb2444a8b8fb21617c3409c13533b98d110fe6a4de0afc32bda83f1df880d73d2b89e1","ssdeep":"1536:rrA5tLftXI7pPURTkYDSt3zBKWKXOThxlshwt0uS3AwRjs9mDkSmkznGAN55:rrA5dtXI7p8RTkYDw8by+/7nGCn","tlshash":"92e30aa026f563e45103b3d0a5609ab47f6673b7e717cb0873bc0540bfa9c0d895b9da","first_seen":"2026-09-13T18:54:49.489295Z","last_seen":"2026-09-13T18:54:49.489295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1473,"timings":{"blocked":0,"dns":14,"connect":102,"send":0,"wait":557,"receive":342,"ssl":457},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/lazyload.min.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.686Z","timestamp":1789325656686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/js/lazyload.min.js HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 13:02:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e8c6ec-1d26\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7462,"size_decoded":3619,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7462), with no line terminators","md5":"bf5154b6bb0c06f2815b3b2dc01ab4fd","sha1":"fd56231873de2769995b9642a119b1426a41ce5e","sha256":"1632d2af4c7a54f873e4cf415c19d8b9282db268c8fe7d92e159c7c7675e6fdf","sha512":"fa338ce0f5a646d5361bd9cffc67f313dd1a5bcdd8a9dce1f1fa189a226ebdf203a87c772429d7eb232bd693582fac1a51b3b23eae0bc40712b4bc5159026a37","ssdeep":"192:mTP85/2hHrQ7oLXC7JyE/UaiN1pDib7UMFYRfz/9oNIbJuly5c:mTPW/cs4X/WHK1pDCUMFY9/uya","tlshash":"79f1a8535907b03f793b625660dc33153028749bec0e4ce47d685de9a15ae4325b3b79","first_seen":"2025-02-20T08:43:01.683971Z","last_seen":"2026-09-14T19:18:37.59188Z","times_seen":5185,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/scripts.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.687Z","timestamp":1789325656687,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/js/scripts.js HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 13:02:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e8c6eb-2431\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9265,"size_decoded":3507,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"efe3eb145325f12e3bc16ff0b8dc6fc4","sha1":"81e479584019d62d2a83cb56563dd1c0dcaa80a6","sha256":"a617e8d9650ce730648e1fd0e06af93e8f236ee1cae531cbeaba8ad44f0e929d","sha512":"fca8502b938283d75b7f47b836a7979bb438da45f8dde0d20a2fd790ee422b3a6e98f5b35478ed428458f637b0c800d685a32dfefa81b5ed1177ab3ac82cb498","ssdeep":"192:5niEmEl5j2AvoQEokMx0i/N+5PL0rv0PHc6M2ayCMd58NGMGXn1H:57mFAvh/N+5PLr/d7dndDr1H","tlshash":"b512636a76b20436823300df978f965537103087b945eaad3b8cc2441fd8b5da2f2be9","first_seen":"2026-05-12T02:13:00.401666Z","last_seen":"2026-09-14T19:18:37.598081Z","times_seen":5,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.319Z","timestamp":1789325657319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /embla-carousel@8.6.0/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nOrigin: https://moc-rentura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a3a95c0e681b568a-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 828\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 13 Sep 2027 18:54:17 GMT\r\nlast-modified: Wed, 05 Aug 2026 09:41:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8Ftdv+N9ebY2udt0rQTtXpm0vONp14Gw+ziwsqxhnmY=:\r\nfly-request-id: 01KX2GRC4T9H18FE8STX2SK4E3-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17946,"size_decoded":8032,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17945)","md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-09-14T19:18:37.601958Z","times_seen":1865,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":7,"connect":12,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/currency.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.325Z","timestamp":1789325657325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/js/currency.js HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 13:02:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e8c6eb-10ec\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4332,"size_decoded":2565,"mime_type":"application/javascript; charset=utf-8","magic":"C++ source, Unicode text, UTF-8 text","md5":"98a93293ae196b68e464509fcab985ec","sha1":"053f1a9012b5dd880e10e88f91145e7937cf08e4","sha256":"c42d64df9e6a183e2f9eb678ec85e6861b6bcd431342cd00087d63571900e89d","sha512":"be1582c27f09407aae6c8c07b2218ed3e7c54e0e02e2430f09b509085eef197c8e39c23a1aec7a639a2cebea14b33f2e1bb693faec41c7115c03b8ccdc7ee876","ssdeep":"96:xU2XwoKafqYFbSPLv+IPuYmRglJHBuQhwPKiuXKnv:xVLRIPLvZuYQgnHoQhw0anv","tlshash":"1091f1d46b234590c2712198584e788064f2963b7c09b9cab49f410c6f4dd1de935eff","first_seen":"2026-04-12T21:43:49.272548Z","last_seen":"2026-09-14T19:18:37.594408Z","times_seen":122,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/ava-1-106.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.066Z","timestamp":1789325657066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/ava-1-106.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2134\r\nlast-modified: Wed, 22 Apr 2026 13:03:01 GMT\r\netag: \"69e8c705-856\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2134,"size_decoded":2904,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"376eb2b908db8e02d97ad893991e12ff","sha1":"4c92ff5e84584c136251d3a033e70d9cc2835155","sha256":"36f4afc81ea69fc44ee3a192ca091550945cb9f1e077682141a965484253bfb3","sha512":"11de36a7e2985807e674324d7104d8e6d9646ca6bd8693ee40b30518a00c13795a640de293db654a8fbd028ac02b46e826fe9b279528be45ef5d4305945ea918","ssdeep":"","tlshash":"5341e86b7b641cd2e4cdd336c75cc366b13198a902fb4ba1e96672028e31b66d224d36","first_seen":"2026-05-12T02:13:00.430635Z","last_seen":"2026-09-14T19:18:37.601268Z","times_seen":6,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.321Z","timestamp":1789325657321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.12.5/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nOrigin: https://moc-rentura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.12.5\r\nx-jsd-version-type: version\r\netag: W/\"9edd-Mk7PJTbzeB2x937UVL88JxWURU8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\nage: 2722281\r\nx-served-by: cache-fra-eddf8230110-FRA, cache-bma-essb1270069-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 14763\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40669,"size_decoded":15559,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26135)","md5":"584b32aaa35c260a3b4ddacfce274a42","sha1":"324ecf2536f3781db1f77ed454bf3c271594454f","sha256":"990fdaa51ed5c86f92d670ab5a79dbf7415f34900dc2f443c5a03dca94479475","sha512":"bca5c9cdfd2562a5a1d31e26c974022172e14ebd599e30d3daf091d27a266a820a025b2ea1e1329bf18be3489c51aafca5025db638631452fee03afedd8f8a26","ssdeep":"768:mYJ0FRsgH7XpwJxK6jk4ixVDQtwnixrUT2PXIh+vH/kvzas:mcgHl6Q4ixVDQAsrcGgmHMas","tlshash":"f603b52d6316672babfd8155f4e4a582de6f7a460944886c3dac8fcb0098dc379b3734","first_seen":"2025-11-18T18:36:54.272556Z","last_seen":"2026-09-14T19:18:37.593097Z","times_seen":1155,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":11,"receive":2,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/js/sliders.js","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.333Z","timestamp":1789325657333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/js/sliders.js HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 13:02:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69e8c6ec-10d7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4311,"size_decoded":1878,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"834fd3ceafdd46b0bb281254e936084d","sha1":"46dd97913897b2a1fb6fbfac9140e25c696cbeb0","sha256":"8a8dc3156c04d602fc5a6b493cc90328ad883121c42bcc644771e4f01efebfc4","sha512":"716fec83e508768427ce25eb0c8c1e5cfe0d1ac0f3a63d5fe95ec86550d511ff2af2d820a770965dcbdc4acd6a480e89905b62bc75fab603f92cda0c358207b6","ssdeep":"96:BWbrPGgsSpO6gAQn4lfW28+zPRNRGzKUsWZ:BW/PG/CgAG4lp5W53","tlshash":"79911266703523368a6741edad0bcc41e2eac0477906d680f1ca071a8fc6fac96e5dfd","first_seen":"2026-05-12T02:13:00.457304Z","last_seen":"2026-09-14T19:18:37.598668Z","times_seen":6,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/intltel/flags.webp","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"94.26.38.9","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:21.062Z","timestamp":1789325661062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/intltel/flags.webp HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/assets/css/tailwind.min.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 18:54:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28186\r\nlast-modified: Wed, 22 Apr 2026 13:02:39 GMT\r\netag: \"69e8c6ef-6e1a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), camera=(), microphone=(), payment=()\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data:; script-src 'self'; frame-ancestors 'self'\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28186,"size_decoded":28958,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af30d041d95c5a83b016ec6812cda19","sha1":"2473dd635cbd3b0d8d8db8da1b27a08b4426c9ae","sha256":"0e2a53ec4d77d08efa8e8f5fc86b1c25e8f2af39d6b44334e1219ed3e0687a61","sha512":"a43b49d0a8830608a8351b1fe3afc5d468664ad79b674583f6e8f1c647fd5270181e9b1d35cbbbddc0285dc15b49e9d53f34a8bd414d32ae3ad6d659168e095e","ssdeep":"384:NmynJhMcWfubAG0nXDutFs4CIwMB7Po+NKC5NPQic7vmUbx2Kh4du2r0mRo3d0:NmynJhMze5CD+3PZ7AEZPyx2KhSRj","tlshash":"66c2e133be32a6c76d998ab018364ffa97354446bdd359c3a1f6ba98dd374c3294020d","first_seen":"2025-03-06T15:46:52.721855Z","last_seen":"2026-09-14T19:56:12.197741Z","times_seen":3615,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":275,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.12.5/build/js/utils.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.322Z","timestamp":1789325657322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.12.5/build/js/utils.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nOrigin: https://moc-rentura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.12.5\r\nx-jsd-version-type: version\r\netag: W/\"419b0-Py3EkUQ6tNnb9qvuiV2BQBlvCqs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\nage: 4118849\r\nx-served-by: cache-fra-eddf8230125-FRA, cache-bma-essb1270069-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 63100\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268720,"size_decoded":63897,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"e654fbae22a0762fa384b61fd03f1679","sha1":"3f2dc491443ab4d9dbf6abee895d8140196f0aab","sha256":"93c8dd85421914d3c09fdacc4b77730595202004a1d8c9ef7639c7551157bda6","sha512":"af44d0ca2f0ca731ecb7e535963c694710a3e887c8bbdfc95066f1fab72d5c5da66313e9097498d246b93a04a1b642fd65d591e80d325a72bb0f7bf5a5f8da6e","ssdeep":"3072:TklM0tDKjFs3OwPss3MwPky0zOt62xFMfM+dhvo4sUifhNyf4LtXKtofQVkmDmVu:TklMmDOW0IxFMfM+dMGou","tlshash":"fe44f0ebd63c973ba1d87b35968eb3cd5a8cbca3c858567826c3b54f52784e0706c205","first_seen":"2026-02-13T03:24:00.128548Z","last_seen":"2026-09-14T19:18:37.593677Z","times_seen":1129,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":16,"receive":10,"ssl":243},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/pl.svg","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.975Z","timestamp":1789325656975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /pl.svg HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 18:54:17 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8X3bkm5G4keKC9dd3i15uoPKaCyh5ByM4g84%2FIuUeA0HPBuITVRWT4IkR7IAktlrNK3Yc5MZY1DAH%2BfyPDvA9vcW0Zn7FnONQeiJQxAdCWFSOlKiOa47lidA5tsq7g%3D%3D\"}]}\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\npriority: u=5,i\r\nage: 1235201\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6864014e-a4\"\r\ncf-ray: a3a95c0c3ab556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":946,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"433e6592594c362510816cfb73b37074","sha1":"b16f04d0528991b465cb7727c06a087710fbc210","sha256":"da6d9e34f2007194b0082d4caac04d1744b7b27fc40098747d4bc62e0d5a5bb2","sha512":"6cd011edec26ee3a16490b928488724277c54884009d1f1ad8b3f2c7be2daba0e1efde91cb77b195bb2ee79781d8a70fbf1dfbd0e912ac2c8739c9e2f4d6c04a","ssdeep":"","tlshash":"24c08cf5e0fabc0c8d144330dbac32c252ab709e608504def4801d19200d7c7bc4172e","first_seen":"2024-08-20T09:00:07.029794Z","last_seen":"2026-09-14T19:18:37.585789Z","times_seen":417,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":6,"connect":11,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.053Z","timestamp":1789325657053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://moc-rentura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 13 Sep 2026 10:36:49 GMT\r\nexpires: Mon, 13 Sep 2027 10:36:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 29848\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":73776,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-09-14T22:43:31.169343Z","times_seen":34223,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":27,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moc-rentura.com/assets/img/responsive/ava-1-106.avif","fqdn":"moc-rentura.com","domain":"moc-rentura.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:16.710Z","timestamp":1789325656710,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moc-rentura.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 06:03:38 GMT","end":"Thu, 19 Nov 2026 06:03:37 GMT"},"fingerprint":{"sha1":"D5:47:B9:83:87:71:10:F1:00:76:6F:C4:5D:98:AC:55:35:71:60:38","sha256":"AF:D5:8A:1D:B2:86:98:86:B2:D5:36:5B:EC:04:E7:60:BA:E2:EF:86:FC:8D:E4:8C:A2:AF:E8:54:F9:AE:84:10"}}},"request":{"raw":"GET /assets/img/responsive/ava-1-106.avif HTTP/1.1\r\nHost: moc-rentura.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moc-rentura.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: init_lang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T22:51:38.22464Z","times_seen":18467164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"moc-rentura.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"moc-rentura.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcvsYwYZ90A2N59MKw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moc-rentura.com/","date":"2026-09-13T18:54:17.054Z","timestamp":1789325657054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcvsYwYZ90A2N59MKw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://moc-rentura.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 133644\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 13 Sep 2026 17:31:39 GMT\r\nexpires: Mon, 13 Sep 2027 17:31:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 4958\r\nlast-modified: Tue, 09 Sep 2025 18:30:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":133644,"size_decoded":134456,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 133644, version 1.0","md5":"14c15182e55c40484f5aabbd597a4e3c","sha1":"f5e340931071446906561ca93433ec5b003169b2","sha256":"9a9c5e6d78ba847c1536fa400a182169a190c06a7a37f6c1453ecdf89a48e177","sha512":"6c5dd3138ce178f91f989e294589b77122c67ab8b8e5d16fc04931555a9bbee76f59a9e0bcae039237473bbe5e81e12f7c6fc71ddec7496beb07e8749795f297","ssdeep":"3072:XEAXs9AFNgRcvYe3a181Bk/GPxDMLdddhqBe5q5PAVy:XEjUg+vYeC840IhddkBf6y","tlshash":"0dd312467f48072e27b8753e51bfb1b6d0e9305a6c9e016e270a3363cf62e3461a52d7","first_seen":"2025-05-30T22:09:31.118761Z","last_seen":"2026-09-14T19:18:37.589133Z","times_seen":2389,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":18,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}