{"report_id":"c407d5d0-f07b-4c8c-8a5f-b6b3fea843bf","version":0,"status":"done","tags":[],"date":"2026-09-04T19:30:57Z","url":{"schema":"http","addr":"denoolta.com/","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"104.21.59.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"denoolta.com/","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"title":"denoolta.com","dom":{"size":71347,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36283)","md5":"b79d767b807ae7767b0e25dd9da81730","sha1":"87e73750d71121f7fa1ee5db9f0cf4a3f6ac2188","sha256":"a1219a0bbe1ff8bc95a144b7678ea0465ba7001b1ffa33ae49a7dd6c3376cb7e","sha512":"0fce7869a820e72dc4bb4ad33d5ffca224d4a41fd9b7cfe6abb9338e98f7384ab98533bf06fc1a5cc0c8d716e8a3593ed69bec673ff43607b6cfcfeb9dbe8b9d","ssdeep":"1536:V1sInfChjD1M1X131d151E1X1g3C1u1C191VTLTDQ1h6V4101v1zyz8:EIXcyz8","tlshash":"f163e6b5a806cc9eec573d4d647ead3c108ea56bc655ceb9f2ccce1087c25795b82ac0","dom_hash":"domhash7d25f5be38a3ab2873a89072561aecf7","first_seen":"2026-09-04T19:31:01.587401Z","last_seen":"2026-09-04T19:31:01.587401Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"denoolta.com/","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"104.21.59.175","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T19:30:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.dalyanolta.com","ip":{"addr":"172.67.134.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-13","domain_rank":0,"first_seen":"2026-09-04T18:58:56.426607Z","last_seen":"2026-09-04T18:58:56.426607Z","alert_count":0,"request_count":4,"received_data":1118457,"sent_data":2276,"comment":"","tags":null,"fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"localhost","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2024-10-13T02:33:42.572698Z","last_seen":"2026-09-02T12:26:52.261328Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":2189,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":1,"received_data":455164,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"denoolta.com","ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-18","domain_rank":0,"first_seen":"2026-09-04T18:58:56.429295Z","last_seen":"2026-09-04T18:58:56.429295Z","alert_count":85,"request_count":17,"received_data":940459,"sent_data":8664,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0y2ukzqrefdw-.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7e8ec30d1d4e80d80050a9cd93d0918","sha1":"b607ed292800b87da670cd649dba1790a502229f","sha256":"dc45444dde8dea41c067273aa2c61824296edb0a9d873590e7fbcc7ebe8f4d85","sha512":"62fd71de15cf65a7b072ebbd5d514bf31f9fcf9dad0c1c0c0da98f4df3a2915c94692ee1dd63c5f485299d5f81795353066876cae274921ae3f0bf199902dc49","ssdeep":"384:Kod0D8uGeac4l5zqT2HDZ4/1mJ3c2cGi513DrPOY3h:Ko6D8uMbYn1G3cuiDzfR","tlshash":"f1a20ba532e5fce6035b81c4943f000af3391d72655da058b7ed5c9a6f60989e0f2fb9","size":21529,"data":"","first_seen":"2026-09-04T18:59:02.366416Z","last_seen":"2026-09-04T19:31:01.600143Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/012.030j4z2ri.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"198352ad688b64351dacaa46810ea553","sha1":"b8f735c1d7a55d3f520c57689dc815818fbebc2e","sha256":"feefa0aeef14a61abbfb3a5da4a3dba3b18109308470129c5c672da6899e155f","sha512":"e314bcdaa6d3e3e603a6b0624b31688c01947aaa363e1eee073a3dd105dc02d1f9014e4175337c75f0952f985103773b064c7b951518718004e6a8ee231d83cc","ssdeep":"384:kBMo/733T8keFesBcAtmGYzYARjHB2QC6PxUw+6y0EM0IcT7N:do/733IJFnB5mGYzYARbVPrDYN","tlshash":"9cd2d4a971d5f4911b9314a9803f500bf2392c7a286de0b0a3e2ccf579e059de537fa9","size":29304,"data":"","first_seen":"2026-09-04T18:59:02.364223Z","last_seen":"2026-09-04T19:31:01.599526Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-THBZ7WJKC3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ef36c75245dc8a609fab63ba56b336b","sha1":"f52df3d3ef621fe329de3810e3fe8191cc982511","sha256":"b182d7cda962d57d5a0cf653d7604672afd56fbc26a43c0a48bb93a08acf282f","sha512":"a899046e223b711d8a5fbf353a41e02ebc84b653d9ae1be5109426b995ffd00c50710b0b38579c6133622ec54572912d4e784e0a0754ceed18cf48f22ce1e65a","ssdeep":"6144:POH1lhNPZfKXr3uNfDZyc3DR/dEpv3ygWEHQMleG7aT8p:QhZeCxbEHnei7","tlshash":"8fa419cd73c670229392f674903f018bb67a69a2b44cc899f28adcd42d3469a5177f7c","size":454560,"data":"","first_seen":"2026-09-04T18:59:02.345922Z","last_seen":"2026-09-04T19:31:01.59366Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0jbphrqodp4m1.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94e8cee1263ea8d60fe39d2d23b4aaa9","sha1":"c2cd94610d12c5c36ebf970471d50fa02f69e7cd","sha256":"5f8248032caa8efee949eccf8ff936ceb6521839a36cea120c8a9888b02a5215","sha512":"bca9792e404ce6a09901092bd1be7a32ed1e5e6a65d5e5846417ec8b73ba7def81b737c032edd9c9e0a802afcfa7880da1758f36f079918cfd8bf0a6be791204","ssdeep":"96:jYTI90v6XS4rRuDa4QozvhlDYdcLJSjYQ0n2G871fD7OYLmoB1D160uu:390v8SuJ4BvnvSR2X257lRb9","tlshash":"e1c1d8f16b01253923dec39bf070a283376a56e59916009e523dffd9192b8c222dff64","size":5713,"data":"","first_seen":"2026-09-04T18:59:02.340596Z","last_seen":"2026-09-18T01:12:06.345459Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/07tgojdr7gdlz.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f262d4866ca5f98d30b7a49ae64df8d","sha1":"9faaf0b32d185ad802143811117b7284f5befb50","sha256":"e0016af30867e052d7ffb8c8052f07fae2f13f4982e9130d01587741d517dd10","sha512":"1cdb55943280293110ddac0e3fe968f9c2b559c5a460ad4e42fbe225f151fcb0fbc4f4fb6edcf08f12ad3bf51452e5b07eacd2e85844b082d472e2ff247329ff","ssdeep":"","tlshash":"933176046433cefcb85759dcb7ee960c601b2e64db0f8939a27c383126c61f43982385","size":1727,"data":"","first_seen":"2026-09-04T18:59:02.3686Z","last_seen":"2026-09-04T19:31:01.588569Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0d3shmwh5_nmn.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","size":54646,"data":"","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-09-18T08:09:32.908263Z","times_seen":16782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0yoi6g0rt32bk.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39e13f9db37abeff215aa36e19bb2405","sha1":"e0af097e02afddd93216c7ef347137d0e8707af0","sha256":"65fdff012ec77033567147aea9a2843f9574cc7c808d9a879844f745609059df","sha512":"e36cab58f3e66f6b1421d6257a1e431ed29e3ea9118ba7bc4f7ee216cdaf6218be0285abc2ee84fedc1e6b8f83ab7614af0039636cc983d1765d917d31a38d02","ssdeep":"3072:aFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwd0++z:aFLtKOfGWYpyI9vGzD58nwd0++z","tlshash":"7524fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","size":227314,"data":"","first_seen":"2026-04-11T04:27:15.564022Z","last_seen":"2026-09-09T16:54:57.241684Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0pqt~8bl3ukh4.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c621d697f789f9a625e80384da50359c","sha1":"21b6e9613cc917a5fa984be427364d03e5757cbc","sha256":"5261101892e2476e4346e19e86fd5f19cbcf7c765ff76e92eb9cefcc86b6db6a","sha512":"59a0ad4d3270e18ccc1178b7a1c8902793a70e88a518f01ce894d1d3335251953289630dcaa26b4c6d9a3b6bb5563b8845d5fabfc521878c382c7d2a56957ffa","ssdeep":"384:p7/A2dkTd93jBT0diRTRIpowbIBqjac/s+rPYjDExpCkKMny1V0U5+wQhKHAlwe4:BN8pcowkpc/s+zYXExp7ly1V0UVD","tlshash":"4513e7b132d4faa3539341e0e43f2016f2780d7520ad6470a7e89c9f754d88da6befa5","size":44414,"data":"","first_seen":"2026-03-18T18:55:57.705164Z","last_seen":"2026-09-18T08:09:32.902219Z","times_seen":15312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0klgb-p3as~4i.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3084d6b15bfadddc1192294fb34d504e","sha1":"27f0ae39a417370a5c93556f77e7ed76225a7e51","sha256":"4b5b5197ec347023b91a7b6c11f8bd3d614ac12cd8bbc156966704f09f84e770","sha512":"ffaa1ea88d3eaaae29806ea82186a33d94ff9d58713cc8a82af066812537f191b1d72a95a539e38bae0debe0283ccb135a90f81a5160e8187df169bfaf95f099","ssdeep":"192:O15CSNu13JEFOFegNnH7ffLmXRNqJNK3ItyAe:OCJKY7ff+CNK3Ity1","tlshash":"76f108a53071b4d1a9974158802f840df27f6e39d86e587477ae4cfa26e085cb273fd1","size":7590,"data":"","first_seen":"2026-09-04T18:59:02.372829Z","last_seen":"2026-09-04T19:31:01.5899Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/turbopack-08fdecb38l0cr.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5a8bdd731807653f51d771b07b1be0","sha1":"7d2e2797b6bae403ee8d626b03a7f2efc537456d","sha256":"62de899b7436f3e9934185a25f49da260244155afb6475b86875fba10b665f53","sha512":"73c2b3e593ee76d2099a9fcba29daa44a00dec43a20c5d39747a17baa6e45208b17bc9bcb32345a41ef009315a70240120e1a230d68465fd03b1b17358e05730","ssdeep":"192:w4gM9BC83EsgdLUEohxOklFETND+S3sBT4fCT3cXX6hfH2:w4gM9tNoklSyssqCTMD","tlshash":"c122c6da37a6f07343afa1eb806f4004f17984a9145d541cd3aca8eb28354ae85e7f76","size":10580,"data":"","first_seen":"2026-09-04T18:59:02.343649Z","last_seen":"2026-09-04T19:31:01.602386Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/00z2264halltr.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e5c5ece1ddd77409869aa8852434ad4","sha1":"c5a74083df37e986d71b596be74bb6d266e9530b","sha256":"33bcda7f41957ac9bcb41ac19601dd2ca41127e4981fa772b5c7c96b0a5a01cf","sha512":"1c62a8c42e841bd90c100bc6606fc264bcd8d0a4536fcb0aba87156e17725664d1c83738d28b4902fbb3e2e9c0adb4b641c774a9b34bcc1d86f773e931d5a1cd","ssdeep":"3072:SjnjNeo2dZL+lFHWEO0y1yqYlicL+bnz03NbemB:SjnjNeoQZilcEO0+yqSicabMNbemB","tlshash":"a7e3f7f935d5f482076b40aac03f0006f22c4db7189e6860e3e5ddda756465de2b3faa","size":144214,"data":"","first_seen":"2026-04-19T13:05:43.215725Z","last_seen":"2026-09-04T19:31:01.592815Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-18T08:35:42.631069Z","times_seen":435724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/07tgojdr7gdlz.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:25.845Z","timestamp":1788550225845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/07tgojdr7gdlz.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:25 GMT\r\netag: W/\"6bf-19fbd670a79\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1923\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSNUCnleiXiGXC%2BJFwP8XNFb0qgccEf4eKyNB45BWdRdH4dhKrhfj1uBqKCH2IiR6RxIIcw3%2FHKngAsk74HKYRzT%2B3zjT2MwRgg%2B%2BI8gpaHhFIsQU%2BwZm5Ub7knko%2B4%3D\"}]}\r\ncf-ray: a35f689f8c7b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1727,"size_decoded":1642,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1724), with no line terminators","md5":"3f262d4866ca5f98d30b7a49ae64df8d","sha1":"9faaf0b32d185ad802143811117b7284f5befb50","sha256":"e0016af30867e052d7ffb8c8052f07fae2f13f4982e9130d01587741d517dd10","sha512":"1cdb55943280293110ddac0e3fe968f9c2b559c5a460ad4e42fbe225f151fcb0fbc4f4fb6edcf08f12ad3bf51452e5b07eacd2e85844b082d472e2ff247329ff","ssdeep":"","tlshash":"933176046433cefcb85759dcb7ee960c601b2e64db0f8939a27c383126c61f43982385","first_seen":"2026-09-04T18:59:02.3686Z","last_seen":"2026-09-04T19:31:01.588569Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dalyanolta.com/uploads/dalyan_Oltacilik_0415971602.png","fqdn":"api.dalyanolta.com","domain":"dalyanolta.com","tld":"com"},"ip":{"addr":"172.67.134.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.064Z","timestamp":1788550226064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dalyanolta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 16:04:43 GMT","end":"Sat, 07 Nov 2026 16:04:42 GMT"},"fingerprint":{"sha1":"97:3C:AF:87:A1:64:40:07:BD:58:4B:C7:2C:BF:41:82:89:97:91:6F","sha256":"D0:0B:89:88:29:E5:04:AE:7C:C7:DD:51:BB:2B:A2:B4:56:A6:09:3F:E1:E4:95:84:4B:FA:37:BD:0A:0D:35:DA"}}},"request":{"raw":"GET /uploads/dalyan_Oltacilik_0415971602.png HTTP/1.1\r\nHost: api.dalyanolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: \r\ncache-control: max-age=14400\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: image/png\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\nlast-modified: Sat, 23 May 2026 18:08:50 GMT\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8l9Djo9pwFQAEKbZK%2FcBEl13o5W6MuhxaGO5zjabK4kv3lp4IlPkyXVzA9PHio%2BLjif6%2F66KJkcub%2B8GnDaMpJcSwP%2BzAr%2Bau0426mh8OaqDpGdvW4CfQUIcGWWzOU0S0K2B7U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35f68a13c6e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 267293\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267293,"size_decoded":268691,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"2a0bfc3aa362b7a0e6a7731d3484a6b2","sha1":"e98aee193f60dd140a4cc8793891ad7883d15b3d","sha256":"0bd25e23b676ebbf152baaabd1c0d0a26fbb408c6f1f42d87d23754c1430a40c","sha512":"6e37b77b32b1e25e7bfba203fc5243546dab564e8dd95e6650d887d8a356d2cecbf17c6f2dd6c1000873f8e26943fbd6034504ec3e1d5ff300b251a893b6900d","ssdeep":"6144:IqrSAu79PjTwU37HYWcX4SNB9dGF8lv3VUGgL5MLlHp9y3oW:IqmD9nwU37mX4SHGF8ltUDL5MLlHzy3Z","tlshash":"2544230a6b912a17b1a590873752c720db52c978f3b3e766a21decd8fc38154495ef32","first_seen":"2026-09-04T18:59:02.369814Z","last_seen":"2026-09-04T19:31:01.589275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":30,"connect":24,"send":0,"wait":463,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0klgb-p3as~4i.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.168Z","timestamp":1788550226168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/0klgb-p3as~4i.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\netag: W/\"1da6-19fbd670a78\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1922\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXctT5gODg%2Bk2i9SqDtbYUPXmIv4H%2FqQwTRpHWGOPWFUhkz0Ek%2Bgt6xo9gv%2FZ5fjW%2B7%2FnFGOw9jvMFjIegeOTIJdxYlq9o%2BpNlDQiW2Be6FEpEWl2q4PjNXK%2BjyQZY0%3D\"}]}\r\ncf-ray: a35f68a18cf176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7590,"size_decoded":4313,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7584), with no line terminators","md5":"3084d6b15bfadddc1192294fb34d504e","sha1":"27f0ae39a417370a5c93556f77e7ed76225a7e51","sha256":"4b5b5197ec347023b91a7b6c11f8bd3d614ac12cd8bbc156966704f09f84e770","sha512":"ffaa1ea88d3eaaae29806ea82186a33d94ff9d58713cc8a82af066812537f191b1d72a95a539e38bae0debe0283ccb135a90f81a5160e8187df169bfaf95f099","ssdeep":"192:O15CSNu13JEFOFegNnH7ffLmXRNqJNK3ItyAe:OCJKY7ff+CNK3Ity1","tlshash":"76f108a53071b4d1a9974158802f840df27f6e39d86e587477ae4cfa26e085cb273fd1","first_seen":"2026-09-04T18:59:02.372829Z","last_seen":"2026-09-04T19:31:01.5899Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"localhost:1337/uploads/small_lufer_caparisi_1_0aa5076ab4.jpg","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.177Z","timestamp":1788550226177,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/small_lufer_caparisi_1_0aa5076ab4.jpg HTTP/1.1\r\nHost: localhost:1337\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-18T08:41:52.422598Z","times_seen":18530418,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dalyanolta.com/uploads/dalyan_Oltacilik_0415971602.png","fqdn":"api.dalyanolta.com","domain":"dalyanolta.com","tld":"com"},"ip":{"addr":"172.67.134.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.880Z","timestamp":1788550226880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dalyanolta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 16:04:43 GMT","end":"Sat, 07 Nov 2026 16:04:42 GMT"},"fingerprint":{"sha1":"97:3C:AF:87:A1:64:40:07:BD:58:4B:C7:2C:BF:41:82:89:97:91:6F","sha256":"D0:0B:89:88:29:E5:04:AE:7C:C7:DD:51:BB:2B:A2:B4:56:A6:09:3F:E1:E4:95:84:4B:FA:37:BD:0A:0D:35:DA"}}},"request":{"raw":"GET /uploads/dalyan_Oltacilik_0415971602.png HTTP/1.1\r\nHost: api.dalyanolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: \r\ncache-control: max-age=14400\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: image/png\r\ndate: Fri, 04 Sep 2026 19:30:27 GMT\r\nlast-modified: Sat, 23 May 2026 18:08:50 GMT\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6M3I6v%2F9ja59eGMo5AI%2F5vq5gN6f%2FQ8bqQN%2FYv1GZ5gpHCww0YXV8WI8Uz9NrB%2FGDsCyrFTvPu8%2FlnrkL7OcTg10alumXtazyBM1dHGdtuNdBKDQ6nCxw8jzlBN1FAc2rQ895xs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35f68a60d48783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 267293\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}],"data":{"size":267293,"size_decoded":268694,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"2a0bfc3aa362b7a0e6a7731d3484a6b2","sha1":"e98aee193f60dd140a4cc8793891ad7883d15b3d","sha256":"0bd25e23b676ebbf152baaabd1c0d0a26fbb408c6f1f42d87d23754c1430a40c","sha512":"6e37b77b32b1e25e7bfba203fc5243546dab564e8dd95e6650d887d8a356d2cecbf17c6f2dd6c1000873f8e26943fbd6034504ec3e1d5ff300b251a893b6900d","ssdeep":"6144:IqrSAu79PjTwU37HYWcX4SNB9dGF8lv3VUGgL5MLlHp9y3oW:IqmD9nwU37mX4SHGF8ltUDL5MLlHzy3Z","tlshash":"2544230a6b912a17b1a590873752c720db52c978f3b3e766a21decd8fc38154495ef32","first_seen":"2026-09-04T18:59:02.369814Z","last_seen":"2026-09-04T19:31:01.589275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":479,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dalyanolta.com/uploads/magaza_273x1024_38ceda4b5d.png","fqdn":"api.dalyanolta.com","domain":"dalyanolta.com","tld":"com"},"ip":{"addr":"172.67.134.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.093Z","timestamp":1788550226093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dalyanolta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 16:04:43 GMT","end":"Sat, 07 Nov 2026 16:04:42 GMT"},"fingerprint":{"sha1":"97:3C:AF:87:A1:64:40:07:BD:58:4B:C7:2C:BF:41:82:89:97:91:6F","sha256":"D0:0B:89:88:29:E5:04:AE:7C:C7:DD:51:BB:2B:A2:B4:56:A6:09:3F:E1:E4:95:84:4B:FA:37:BD:0A:0D:35:DA"}}},"request":{"raw":"GET /uploads/magaza_273x1024_38ceda4b5d.png HTTP/1.1\r\nHost: api.dalyanolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: \r\ncache-control: max-age=14400\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: image/png\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\nlast-modified: Sat, 18 Jul 2026 10:34:54 GMT\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06zWZlrzJglVt67w8fhCQqQrRBiY8M%2BFIdywZgrQa50Da13cXN8feuJZmVI4uHG6Lg3MrYbPxCY9b%2FTQqRNwUQu8V7s8m20MNGvhFZ1SYH4CnqC07p14%2BTxw6QtLHfQZhJVIDfs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35f68a13c6d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 68552\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68552,"size_decoded":69943,"mime_type":"image/png","magic":"PNG image data, 273 x 1024, 8-bit colormap, non-interlaced","md5":"e6613aaf5e393db69c8701f83c92110a","sha1":"e0aaaef7b5439c63d8af2ca23de3f0f2d288e822","sha256":"0b41e2aa84e11468c43076b74913d944f9a5adceb320ae8c4f3f3ea8c9be6e0a","sha512":"bca783414dfcb775d563acd4d6af105f9861aff4ca2716c7cc530d5b4d1033c076a189b849c0b79b108a1fdc6c99eee56540eab33aacffda326d598d3ec5bcdd","ssdeep":"1536:tgcGYAY0QiFaAUZn4cFth89JW+vjdlBcQEM:rqQ+I7F8XHjP1EM","tlshash":"a263025d1a5d943ab372eaa6fc467467ace01a84d8bcdae33145c7c1c46b1133334376","first_seen":"2026-09-04T18:59:02.33723Z","last_seen":"2026-09-04T19:31:01.591657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":846,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"localhost:1337/uploads/68fd4aa02ba2b_1761430176_c0c08b0a46.jpg","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.178Z","timestamp":1788550226178,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/68fd4aa02ba2b_1761430176_c0c08b0a46.jpg HTTP/1.1\r\nHost: localhost:1337\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-18T08:41:52.422598Z","times_seen":18530418,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"localhost:1337/uploads/small_turkiye_nin_canli_deniz_solucani_ve_cin_kurdu_merkezi_137789c809.webp","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.180Z","timestamp":1788550226180,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/small_turkiye_nin_canli_deniz_solucani_ve_cin_kurdu_merkezi_137789c809.webp HTTP/1.1\r\nHost: localhost:1337\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-18T08:41:52.422598Z","times_seen":18530418,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0pqt~8bl3ukh4.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:25.836Z","timestamp":1788550225836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/0pqt~8bl3ukh4.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:25 GMT\r\netag: W/\"ad7e-19fbd670a78\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1923\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n4HvHG7%2FVxWuryGlbyaPu0nhi47S%2BkYSWSXvXVAc3syzCm5dVw0nc6LMwi0JwIKcWHQQaREeAEO0%2B5oafPJApE%2FltS5yR5FK3FGMcpPgdyEEZMAzCXviiWRmIZoyNvk%3D\"}]}\r\ncf-ray: a35f689f7c7176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44414,"size_decoded":10015,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24405)","md5":"c621d697f789f9a625e80384da50359c","sha1":"21b6e9613cc917a5fa984be427364d03e5757cbc","sha256":"5261101892e2476e4346e19e86fd5f19cbcf7c765ff76e92eb9cefcc86b6db6a","sha512":"59a0ad4d3270e18ccc1178b7a1c8902793a70e88a518f01ce894d1d3335251953289630dcaa26b4c6d9a3b6bb5563b8845d5fabfc521878c382c7d2a56957ffa","ssdeep":"384:p7/A2dkTd93jBT0diRTRIpowbIBqjac/s+rPYjDExpCkKMny1V0U5+wQhKHAlwe4:BN8pcowkpc/s+zYXExp7ly1V0UVD","tlshash":"4513e7b132d4faa3539341e0e43f2016f2780d7520ad6470a7e89c9f754d88da6befa5","first_seen":"2026-03-18T18:55:57.705164Z","last_seen":"2026-09-18T08:09:32.902219Z","times_seen":15312,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/00z2264halltr.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:25.840Z","timestamp":1788550225840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/00z2264halltr.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:25 GMT\r\netag: W/\"23356-19fbd670a78\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1923\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ro2eVBZkgbCtCL8OXag7dQein77R3Dt9XMchLqJ4tJggwIMw1QZ2xQ48U%2FxAS%2FVk2ZJtSazQXLaPevBEF8UQZ6KVCiwurrhdeGuh45l7kE4hEWcQVUTnHT51ujPx7GY%3D\"}]}\r\ncf-ray: a35f689f7c7676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144214,"size_decoded":39503,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6e5c5ece1ddd77409869aa8852434ad4","sha1":"c5a74083df37e986d71b596be74bb6d266e9530b","sha256":"33bcda7f41957ac9bcb41ac19601dd2ca41127e4981fa772b5c7c96b0a5a01cf","sha512":"1c62a8c42e841bd90c100bc6606fc264bcd8d0a4536fcb0aba87156e17725664d1c83738d28b4902fbb3e2e9c0adb4b641c774a9b34bcc1d86f773e931d5a1cd","ssdeep":"3072:SjnjNeo2dZL+lFHWEO0y1yqYlicL+bnz03NbemB:SjnjNeoQZilcEO0+yqSicabMNbemB","tlshash":"a7e3f7f935d5f482076b40aac03f0006f22c4db7189e6860e3e5ddda756465de2b3faa","first_seen":"2026-04-19T13:05:43.215725Z","last_seen":"2026-09-04T19:31:01.592815Z","times_seen":15,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-THBZ7WJKC3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.040Z","timestamp":1788550226040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-THBZ7WJKC3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\nexpires: Fri, 04 Sep 2026 19:30:26 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157155\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454560,"size_decoded":157759,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"4ef36c75245dc8a609fab63ba56b336b","sha1":"f52df3d3ef621fe329de3810e3fe8191cc982511","sha256":"b182d7cda962d57d5a0cf653d7604672afd56fbc26a43c0a48bb93a08acf282f","sha512":"a899046e223b711d8a5fbf353a41e02ebc84b653d9ae1be5109426b995ffd00c50710b0b38579c6133622ec54572912d4e784e0a0754ceed18cf48f22ce1e65a","ssdeep":"6144:POH1lhNPZfKXr3uNfDZyc3DR/dEpv3ygWEHQMleG7aT8p:QhZeCxbEHnei7","tlshash":"8fa419cd73c670229392f674903f018bb67a69a2b44cc899f28adcd42d3469a5177f7c","first_seen":"2026-09-04T18:59:02.345922Z","last_seen":"2026-09-04T19:31:01.59366Z","times_seen":2,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":38,"receive":47,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.042Z","timestamp":1788550226042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sun, 06 Sep 2026 19:30:26 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVPHofokjH2TWNN%2F4Qk%2BTOFnf63t%2FcG%2F1FrNrBrsEY2Ygdq8bmef6IbmAa1RNjjLMNbvrOAyncPfZ46oOMyumbO%2BpiuIRqonRQrpCej%2B4mnB%2B%2F1ZM3E8V2ZC85YjS7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\nserver: cloudflare\r\ncf-ray: a35f68a0cccc76ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-18T08:35:42.631069Z","times_seen":435724,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/image?url=https%3A%2F%2Fapi.dalyanolta.com%2Fuploads%2Fpater_noster_82479f4784.png\u0026w=1920\u0026q=75","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.065Z","timestamp":1788550226065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fapi.dalyanolta.com%2Fuploads%2Fpater_noster_82479f4784.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=30, must-revalidate\r\ncontent-disposition: attachment; filename=\"pater_noster_82479f4784.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\netag: 2nPGkR6PqjX2S5zu_hkCcLAqYdgo44Ar9n1SWUcUDYU\r\nvary: Accept\r\nx-nextjs-cache: HIT\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwMy4TUxt0%2FJwd6oSyOHHLkdV0DhdUcAcTpZT176Z9%2BGLaLnvnVr5O%2FRDUFwRtGA1F3XIy50sZIvUmAEX0VGGa80qbb3xBEb0cmqdoyp99L6Jg6TXpoGPIfMsAoZ7fc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35f68a0ecd976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 197874\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197874,"size_decoded":198727,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1920, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a74f479551c089ffe31165f983da3e33","sha1":"5745f0347cfb075b0ef10f1d3dc752300767b7af","sha256":"da73c6911e8faa35f64b9ceefe190270b02a61d828e3802bf67d525947140d85","sha512":"1cd7143fb3dfae386da1ab12fe216d66f30e90e3e943212347302815cc4b74f5569878bc5874f0ea899242b2e71264e8a61c315ba8eee110549fe6112b9eca85","ssdeep":"3072:HUKT+511woMCs03/khT6n/CY40hD3IVvRDEIKJ290wLDtQAYTSaXGErDe:HUa+5vwoM7g/O0F36g29lKA3aXvDe","tlshash":"5d1423fc5902ce433ca23e2ca793e6a76af4fd5093c79b56b30da098f65522352b5012","first_seen":"2026-09-04T18:59:02.354735Z","last_seen":"2026-09-04T19:31:01.594835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dalyanolta.com/uploads/aldimbee_banner_dar_uzun_5d33f7e92b.gif","fqdn":"api.dalyanolta.com","domain":"dalyanolta.com","tld":"com"},"ip":{"addr":"172.67.134.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.095Z","timestamp":1788550226095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dalyanolta.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Aug 2026 16:04:43 GMT","end":"Sat, 07 Nov 2026 16:04:42 GMT"},"fingerprint":{"sha1":"97:3C:AF:87:A1:64:40:07:BD:58:4B:C7:2C:BF:41:82:89:97:91:6F","sha256":"D0:0B:89:88:29:E5:04:AE:7C:C7:DD:51:BB:2B:A2:B4:56:A6:09:3F:E1:E4:95:84:4B:FA:37:BD:0A:0D:35:DA"}}},"request":{"raw":"GET /uploads/aldimbee_banner_dar_uzun_5d33f7e92b.gif HTTP/1.1\r\nHost: api.dalyanolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: \r\ncache-control: max-age=14400\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: image/gif\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\nlast-modified: Tue, 04 Aug 2026 18:00:19 GMT\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Bs%2ByL6AGBywx2BN1nCIySFNbcd9ENRTKuasxUWt7pP3Uf6qRWJun3UnhVmnvV67VBYeiGZmr0zBMRxEfDl1nl1QF8jiBxDTV6iMUtAHKR3t6r15zbvF9UcAIikRsZYx%2FsXGDZg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35f68a13c6f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 509739\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509739,"size_decoded":511129,"mime_type":"image/png","magic":"PNG image data, 700 x 3200, 8-bit colormap, non-interlaced","md5":"29cbf5367714aede75a059102c2da449","sha1":"d192d88e1f0b593db6584a37bdb41ef91cc188b5","sha256":"1cdcfd7941232e255170e6acc2fe43fbe7002a32eaeebc3378de04e661f2115c","sha512":"c155a985674e75cfc609105f255a61ec90d38c9caf3857c254a598e79975b4007c19078e9303e8d9050df660adae98c02101e9195cfa4fe5d6d21b646e714b12","ssdeep":"12288:9RspwByyC/UPllStWSga5rORBF2E8a/6cV8x/CNWPZ6E6Ql:LmwBYE3J9fEE8a/VV+qCZ6DQl","tlshash":"13b4239ea0fcd0373ed6992225fa7640a78eb1c6c4f284658138f5a434cd1c93d5a7eb","first_seen":"2026-09-04T18:59:02.360675Z","last_seen":"2026-09-04T19:31:01.59543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":535,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0jbphrqodp4m1.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.184Z","timestamp":1788550226184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/0jbphrqodp4m1.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\netag: W/\"1651-19fbd670a78\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1923\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nl02n1xZJhbQ5uTghVPg71hhqm4su%2BNO%2B5UFGOHjnSoXxt6CAewU85AbzZqeIxTA0NbisU4lv9U09KljGGTw%2F8F9ahUfkuaY%2BFsZ%2B0zcrbMIKh0AiFmJ6afu6BSVMsA%3D\"}]}\r\ncf-ray: a35f68a1acfa76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5713,"size_decoded":3140,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5713), with no line terminators","md5":"94e8cee1263ea8d60fe39d2d23b4aaa9","sha1":"c2cd94610d12c5c36ebf970471d50fa02f69e7cd","sha256":"5f8248032caa8efee949eccf8ff936ceb6521839a36cea120c8a9888b02a5215","sha512":"bca9792e404ce6a09901092bd1be7a32ed1e5e6a65d5e5846417ec8b73ba7def81b737c032edd9c9e0a802afcfa7880da1758f36f079918cfd8bf0a6be791204","ssdeep":"96:jYTI90v6XS4rRuDa4QozvhlDYdcLJSjYQ0n2G871fD7OYLmoB1D160uu:390v8SuJ4BvnvSR2X257lRb9","tlshash":"e1c1d8f16b01253923dec39bf070a283376a56e59916009e523dffd9192b8c222dff64","first_seen":"2026-09-04T18:59:02.340596Z","last_seen":"2026-09-18T01:12:06.345459Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/image?url=https%3A%2F%2Fapi.dalyanolta.com%2Fuploads%2Ff9a6c005_6438_4a1b_83a4_6b8dbf81e51c_1766483841_d6cf5e86c2.jpg\u0026w=640\u0026q=75","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.421Z","timestamp":1788550226421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fapi.dalyanolta.com%2Fuploads%2Ff9a6c005_6438_4a1b_83a4_6b8dbf81e51c_1766483841_d6cf5e86c2.jpg\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nCookie: _ga_THBZ7WJKC3=GS2.1.s1788550226$o1$g0$t1788550226$j60$l0$h0; _ga=GA1.1.238040794.1788550226\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"f9a6c005_6438_4a1b_83a4_6b8dbf81e51c_1766483841_d6cf5e86c2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\netag: 3Ml1crf-UpDGSIj2PMU4uXN9i_ETSXoJWYXylH7O8ng\r\nvary: Accept\r\nx-nextjs-cache: STALE\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XCDdattc7Ad4hKfFYJ2kr479Zwamn1ItZEgNSkyzVfPBykHD%2FF5XUUanZMaU8T9s5PHJRLhI71FWCk7qCZ8s%2BJKn%2FgZx4ea%2BwddKvk2Z7TZZqnnpaVx0EIEQaH%2BTr7I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35f68a32d5076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21658\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21658,"size_decoded":22554,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"abdcc9d30c4c34a47f15c292cd6cfdef","sha1":"8b463d4326f4b377ab1bcbdede11e963152db3d9","sha256":"dcc97572b7fe5290c64888f63cc538b9737d8bf113497a095985f2947ecef278","sha512":"97253b8be1f2e3fc7cbbc312884d601ac158e0b9454e0c50fda80314613f16838dfec4b90a2452836b0355b4fdfd6ebdf82acbf4b8a6039ca00f53d2a6e93fe9","ssdeep":"384:+KDw8xM4U1UnngDBmerUcNOkIOiR577Zv2sO1zggeHJ37rbtgnI:twGJU+ngD4ewWVjKR7YdEcI","tlshash":"64a2e1ef029e07aa3fd46c2cf7240be9a0cb01c605a1a9d72994665d8b33bf4b127944","first_seen":"2026-09-04T19:31:01.596678Z","last_seen":"2026-09-04T19:31:01.596678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T19:30:24.979Z","timestamp":1788550224979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 04 Sep 2026 19:30:25 GMT\r\nlink: \u003c/_next/static/chunks/0ywe9~-g8bf.w.css\u003e; rel=preload; as=\"style\"\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-powered-by: Next.js\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1l5PABqvZoT0mj4uPclQFD48KU9dqnX%2F9q8OTTe%2FwmDse7pa8LQyCuLCL8KXpFY3KyncBqTQDlwc%2B3LyFDMndKYksFRW9UWqmkbXgVUsEsgCuY7OXnLyeYpmy2VBLhw%3D\"}]}\r\ncf-ray: a35f689a4b4476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":71681,"size_decoded":14581,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48524)","md5":"d92375807f85e8a010584548e834df9f","sha1":"f3710ac79d4add5d474d9ddcac5bdad50513cb01","sha256":"6696ec0094638211c7b7a8e2e23a5cf10a11807b5120f865d746753abd4bfb78","sha512":"0814bb447a706d0a216cc1bbdb15ff1fc7e75c5ad55ec903aa6fc920d6fac751c424fedb77c26b54b33a5338f8af852a25cf5bae149a170fcbf24444f6d8fcd0","ssdeep":"1536:L1vMVja1M1X131d151E1X1g3C1u1C191VTLTDQ1h6VZbOX101v1zyzQ:9wMJyzQ","tlshash":"b263e775a806cc9eec573d4e647e9d3c108ea56bc655ceb9f2ccce1087c25795b82ac0","first_seen":"2026-09-04T19:31:01.597917Z","last_seen":"2026-09-04T19:31:01.597917Z","times_seen":1,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":0,"dns":6,"connect":16,"send":0,"wait":629,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0ywe9~-g8bf.w.css","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:25.831Z","timestamp":1788550225831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/0ywe9~-g8bf.w.css HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:25 GMT\r\netag: W/\"61a1-19fbd670a6b\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1923\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xgg6QXN2JgvXdo0eNMeeoB9wawNaEf04m7MkAmzsLNLI3BczPEiyJGoypxlQLWfngCO7JyNsfOeTjfVlSx5p2BgzQ%2BiYx3mHkxPsYb2Vl3f1TFTSGz5jN3bNvK8d9AY%3D\"}]}\r\ncf-ray: a35f689f7c6d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24993,"size_decoded":6398,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (24989)","md5":"2d971d9087e6973dd198aaf76c79396e","sha1":"242d5de599338257c785c98396d410737d91ae55","sha256":"d5d7c048930b5b8701e046d7d9ac255d1c50bf14186ccc1975ca7b24eaf6f6da","sha512":"1803587c1620789aaf75be74e318446a215bd0635cfc410551eb58ec3bcfb0f65778af207dfa9ee8a0f5722eedb2c3a255fde5fc66441d2ad1407e498921e134","ssdeep":"384:1rsYKgjLtXiGs6u7t88jHmzSuScjStjRksDc:dJjLtXiGs6u7t80GRjEjnDc","tlshash":"7eb2a751f336d97fec3358bae39cb41ca218a481cd3155dcfb42220399cbaf6195a719","first_seen":"2026-09-04T18:59:02.362759Z","last_seen":"2026-09-04T19:31:01.59892Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/012.030j4z2ri.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:25.833Z","timestamp":1788550225833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/012.030j4z2ri.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:25 GMT\r\netag: W/\"7278-19fbd670a74\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1923\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FgzzUz7XOMaWoTmA2jxsMAao9r%2B9aRhYwPJ4fdvLfmc8rAE%2F2yup1062rYMhT2HRgIwwCVM2NmfXUQ%2Bvknl43z53WyAzY%2B8MoOt%2FUfCdEZAlkG00LbNjhxdxAQ42SpM%3D\"}]}\r\ncf-ray: a35f689f7c6e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29304,"size_decoded":9711,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25870)","md5":"198352ad688b64351dacaa46810ea553","sha1":"b8f735c1d7a55d3f520c57689dc815818fbebc2e","sha256":"feefa0aeef14a61abbfb3a5da4a3dba3b18109308470129c5c672da6899e155f","sha512":"e314bcdaa6d3e3e603a6b0624b31688c01947aaa363e1eee073a3dd105dc02d1f9014e4175337c75f0952f985103773b064c7b951518718004e6a8ee231d83cc","ssdeep":"384:kBMo/733T8keFesBcAtmGYzYARjHB2QC6PxUw+6y0EM0IcT7N:do/733IJFnB5mGYzYARbVPrDYN","tlshash":"9cd2d4a971d5f4911b9314a9803f500bf2392c7a286de0b0a3e2ccf579e059de537fa9","first_seen":"2026-09-04T18:59:02.364223Z","last_seen":"2026-09-04T19:31:01.599526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0y2ukzqrefdw-.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:25.842Z","timestamp":1788550225842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/0y2ukzqrefdw-.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:25 GMT\r\netag: W/\"5419-19fbd670a7b\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1923\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8uWVA68Vukq3aJMmBQ6r2Aymp7Sw%2BStX9IgacJc6whmPnc7hZs%2Bhj79ObQGEd%2F9o9bop698SKEt9MmYhUs8j%2BR9IqIRpgNW5cSMxsk1vb5TKiGjwwiPg0%2BHdRchRBg%3D\"}]}\r\ncf-ray: a35f689f8c7976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21529,"size_decoded":8641,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9188)","md5":"e7e8ec30d1d4e80d80050a9cd93d0918","sha1":"b607ed292800b87da670cd649dba1790a502229f","sha256":"dc45444dde8dea41c067273aa2c61824296edb0a9d873590e7fbcc7ebe8f4d85","sha512":"62fd71de15cf65a7b072ebbd5d514bf31f9fcf9dad0c1c0c0da98f4df3a2915c94692ee1dd63c5f485299d5f81795353066876cae274921ae3f0bf199902dc49","ssdeep":"384:Kod0D8uGeac4l5zqT2HDZ4/1mJ3c2cGi513DrPOY3h:Ko6D8uMbYn1G3cuiDzfR","tlshash":"f1a20ba532e5fce6035b81c4943f000af3391d72655da058b7ed5c9a6f60989e0f2fb9","first_seen":"2026-09-04T18:59:02.366416Z","last_seen":"2026-09-04T19:31:01.600143Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"localhost:1337/uploads/small_prosurf_alarm_c301bfc30e.png","fqdn":"localhost","domain":"localhost","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.175Z","timestamp":1788550226175,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /uploads/small_prosurf_alarm_c301bfc30e.png HTTP/1.1\r\nHost: localhost:1337\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-18T08:41:52.422598Z","times_seen":18530418,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/image?url=https%3A%2F%2Fapi.dalyanolta.com%2Fuploads%2FD_kkan_Konum_Dis_Mekan_1766483587_f5fbc18c74.png\u0026w=640\u0026q=75","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.418Z","timestamp":1788550226418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fapi.dalyanolta.com%2Fuploads%2FD_kkan_Konum_Dis_Mekan_1766483587_f5fbc18c74.png\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nCookie: _ga_THBZ7WJKC3=GS2.1.s1788550226$o1$g0$t1788550226$j60$l0$h0; _ga=GA1.1.238040794.1788550226\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"D_kkan_Konum_Dis_Mekan_1766483587_f5fbc18c74.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\netag: 99kb0E6iJSEIECFmRBj1rxtDdIXrOrOaMm-l3KkSGBw\r\nvary: Accept\r\nx-nextjs-cache: STALE\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaClLldoqgW9qCbIHG3YLPddjzXJR%2F3mzgW1DXBv303GvyD38JHSEZ3P1R2rIbsmAFIL2TJAq3wK8kfYyEM0%2FAjvnfjyV%2FA9IMDjSPGxbcppHM%2BwX%2B0MK%2FEOY1B57HY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35f68a31d4c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40750\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40750,"size_decoded":41634,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x349, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a18058b430d298fd4b420022a02b3352","sha1":"23ea214fea5ab2274ffe5b010f88d32392bf230f","sha256":"f7d91bd04ea22521081021664418f5af1b437485eb3ab39a326fa5dca912181c","sha512":"4bae958a978df8d16df066b4082b77c9c70f72e2288997575b6a3cfa806c884c2c0cdc1913794c98bde430ac90450cffba51bc4dbe5496eafa9e6c3dc41c7794","ssdeep":"768:KJKmT6tzhP97NghpUJym+s0DIQAhTQUrOltwqgYFlFAHkSW6qand:wFT6tzJNSPm+FDIRdrOwvYFlF7S3D","tlshash":"5903f130c6e9e236015eb3a5802b384aa5a3d8781475e57ce425fbbd72b7d04371edd1","first_seen":"2026-09-04T19:31:01.600693Z","last_seen":"2026-09-04T19:31:01.600693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/image?url=https%3A%2F%2Fapi.dalyanolta.com%2Fuploads%2Ff9a6c005_6438_4a1b_83a4_6b8dbf81e51c_1766483744_f9e1da1a20.jpg\u0026w=640\u0026q=75","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:26.420Z","timestamp":1788550226420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/image?url=https%3A%2F%2Fapi.dalyanolta.com%2Fuploads%2Ff9a6c005_6438_4a1b_83a4_6b8dbf81e51c_1766483744_f9e1da1a20.jpg\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nCookie: _ga_THBZ7WJKC3=GS2.1.s1788550226$o1$g0$t1788550226$j60$l0$h0; _ga=GA1.1.238040794.1788550226\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: attachment; filename=\"f9a6c005_6438_4a1b_83a4_6b8dbf81e51c_1766483744_f9e1da1a20.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 04 Sep 2026 19:30:26 GMT\r\netag: 3Ml1crf-UpDGSIj2PMU4uXN9i_ETSXoJWYXylH7O8ng\r\nvary: Accept\r\nx-nextjs-cache: STALE\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iATh3PzU58tfXxrOW0FklpjE7kA1zjmnhD1h5oGHJ%2F4c2CuqQbZm0kJLkuK8QOcvcZELkJrjZV80LodP28NrXLjebzh1jNXNizGj%2BRWbR5wnZZ7jst9r5sStM0APiBs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a35f68a31d4d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21658\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21658,"size_decoded":22548,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"abdcc9d30c4c34a47f15c292cd6cfdef","sha1":"8b463d4326f4b377ab1bcbdede11e963152db3d9","sha256":"dcc97572b7fe5290c64888f63cc538b9737d8bf113497a095985f2947ecef278","sha512":"97253b8be1f2e3fc7cbbc312884d601ac158e0b9454e0c50fda80314613f16838dfec4b90a2452836b0355b4fdfd6ebdf82acbf4b8a6039ca00f53d2a6e93fe9","ssdeep":"384:+KDw8xM4U1UnngDBmerUcNOkIOiR577Zv2sO1zggeHJ37rbtgnI:twGJU+ngD4ewWVjKR7YdEcI","tlshash":"64a2e1ef029e07aa3fd46c2cf7240be9a0cb01c605a1a9d72994665d8b33bf4b127944","first_seen":"2026-09-04T19:31:01.596678Z","last_seen":"2026-09-04T19:31:01.596678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0yoi6g0rt32bk.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:25.839Z","timestamp":1788550225839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/0yoi6g0rt32bk.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:25 GMT\r\netag: W/\"377f2-19fbd670a7a\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1923\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1lLyq4lEncJeywQ7nf6MrBpSjbTRkhD0%2B8hIQO9JpMPNFIVRinsKk16xQOBaTmD8ZyDdS9gEgcRxeQXfTNyncQp6BCFV6obEUQoOZfMEIqh7KR5Uy9lR1DgQ4w45Zk%3D\"}]}\r\ncf-ray: a35f689f7c7576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227314,"size_decoded":71755,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"39e13f9db37abeff215aa36e19bb2405","sha1":"e0af097e02afddd93216c7ef347137d0e8707af0","sha256":"65fdff012ec77033567147aea9a2843f9574cc7c808d9a879844f745609059df","sha512":"e36cab58f3e66f6b1421d6257a1e431ed29e3ea9118ba7bc4f7ee216cdaf6218be0285abc2ee84fedc1e6b8f83ab7614af0039636cc983d1765d917d31a38d02","ssdeep":"3072:aFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwd0++z:aFLtKOfGWYpyI9vGzD58nwd0++z","tlshash":"7524fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-04-11T04:27:15.564022Z","last_seen":"2026-09-09T16:54:57.241684Z","times_seen":355,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/turbopack-08fdecb38l0cr.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:25.841Z","timestamp":1788550225841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-08fdecb38l0cr.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:25 GMT\r\netag: W/\"2954-19fbd670a79\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1923\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5GhqW%2F8UgKLOvArfMpPR0K772ZoZGWPhEI1PwRx6lyJz%2FifOeAH51FC4xtyT2UYLz35ELEKAPvVGu8zMhftSwFWyJaIgoj9qv6bEXoa7OygRTQd%2BDBR3KtF%2BlR6j9o%3D\"}]}\r\ncf-ray: a35f689f8c7776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10580,"size_decoded":4928,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10580), with no line terminators","md5":"3a5a8bdd731807653f51d771b07b1be0","sha1":"7d2e2797b6bae403ee8d626b03a7f2efc537456d","sha256":"62de899b7436f3e9934185a25f49da260244155afb6475b86875fba10b665f53","sha512":"73c2b3e593ee76d2099a9fcba29daa44a00dec43a20c5d39747a17baa6e45208b17bc9bcb32345a41ef009315a70240120e1a230d68465fd03b1b17358e05730","ssdeep":"192:w4gM9BC83EsgdLUEohxOklFETND+S3sBT4fCT3cXX6hfH2:w4gM9tNoklSyssqCTMD","tlshash":"c122c6da37a6f07343afa1eb806f4004f17984a9145d541cd3aca8eb28354ae85e7f76","first_seen":"2026-09-04T18:59:02.343649Z","last_seen":"2026-09-04T19:31:01.602386Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"denoolta.com/_next/static/chunks/0d3shmwh5_nmn.js","fqdn":"denoolta.com","domain":"denoolta.com","tld":"com"},"ip":{"addr":"172.67.182.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://denoolta.com/","date":"2026-09-04T19:30:25.844Z","timestamp":1788550225844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"denoolta.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Jul 2026 14:36:54 GMT","end":"Wed, 28 Oct 2026 15:35:22 GMT"},"fingerprint":{"sha1":"0A:4F:86:C3:13:B0:D1:BE:A0:27:40:AC:8B:91:4B:47:20:6D:FA:43","sha256":"1A:82:B7:E9:6A:21:EE:E7:81:E7:76:60:C0:7D:4C:31:C4:87:DF:AF:F4:D2:C8:BE:A0:99:8D:65:7D:95:ED:91"}}},"request":{"raw":"GET /_next/static/chunks/0d3shmwh5_nmn.js HTTP/1.1\r\nHost: denoolta.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://denoolta.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 04 Sep 2026 19:30:25 GMT\r\netag: W/\"d576-19fbd670a6b\"\r\nlast-modified: Sat, 01 Aug 2026 12:57:54 GMT\r\nvary: Accept-Encoding\r\nage: 1923\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JdqTNRiVTuwo1QhZpnrQKv0t9aTn8tOK0sMqbEXXVbtu35AgJXPP%2FBcDQMYr984byfFFemLcsKz0iRQqXWLMxeB%2FTaoQ%2FgW4%2Bqytb%2BxzHKKlAXy7AABVwrAH6lmMtbc%3D\"}]}\r\ncf-ray: a35f689f8c7a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54646,"size_decoded":13656,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54644), with no line terminators","md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-09-18T08:09:32.908263Z","times_seen":16782,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"denoolta.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"denoolta.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}