{"report_id":"c78b74b6-47a4-425a-a3a2-da699881547f","version":6,"status":"done","tags":[],"date":"2026-04-14T17:20:38Z","url":{"schema":"http","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"172.67.139.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"title":"Deneme Bonusu Veren Siteler 2026 - Bonusrosem","dom":{"size":117015,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64735), with no line terminators","md5":"f1d4ac53a41bceca0f2928ee02a16b7c","sha1":"e0e48028262daf056d43e4a509017da757aef38d","sha256":"6ed7bcf51b95cdf7b7809a896f2ffb2d994a9bad13661ac3e311866d1b7c0960","sha512":"fcd6c82a57910071f177d4ee54eee992035f06917bec18e48cae24236b7dcc8a36c6d333a4d78a8ac541cef60bd72ac293aa01449804c63654e0ec795ee8d85d","ssdeep":"1536:0KrKKm+WGB3DGyzWuyep/0k5Ssc9oMp4a:HrwGBU2a","tlshash":"63b375245280cd1cad674aa9a1fabd34516ed3ddc257dd7ae26cc432030eabdda736c0","dom_hash":"domhashf8e121ea7b245961d19492c9a5c2abc3","first_seen":"2026-04-14T13:58:12.811005Z","last_seen":"2026-04-14T17:20:41.331246Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"172.67.139.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T17:20:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bonusrosem.com","ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-04-14T13:58:08.599741Z","last_seen":"2026-04-14T13:58:08.599742Z","alert_count":129,"request_count":43,"received_data":2166974,"sent_data":21011,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":2,"received_data":135126,"sent_data":1111,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":3241,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-08T12:42:42.467156Z","times_seen":217561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/242188bb71c223d6.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c11b34950af12f4b6f2944a0aabdf96","sha1":"f5325c0bce9f2d02071484df45bec32d106468f1","sha256":"bad749b101ca3790e5d18b2b1ea4ab7990fbb2d5a98331c93f545b310acea7d7","sha512":"14b5e989777d795ecc38712ba410ef99e725a9adae7dc8e971c480a566c3f63ac8a6182d31581a04a52789fb8305169ef5096b12f449e156829ab9d8d2902781","ssdeep":"768:Sa+vuOGbenGrMD75m96gKFyrPVpfREHIO0JoNM+Mmui6Ei08w4+cY3d/U+yeZGrR:Tlxr075cKFmPVpfREHIOdNNUw4oO","tlshash":"6b83d5a571d5f99203a780f4c43f101bf23d0d7610ad64a0a3e5ccea79a498de2b7f99","size":86909,"data":"","first_seen":"2026-03-25T01:17:04.814047Z","last_seen":"2026-06-16T13:01:07.573916Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f4ce9b062aeb8f16a07f3693d2a09ec","sha1":"30136aeea6e4a351083f628f530dea9ac233f6f1","sha256":"2b733db52f81c035399b3fb3e2fded7ee1875a6bb201255d6934d49f5e796257","sha512":"8b72c3b7691c4d98293e395780eae0bc163b9846431fa12969b3bd5c0a3b0efc7cf49bd6e18072b4d338d468a3ce899e7615436a667814df5950e386bdbaefcb","ssdeep":"","tlshash":"1d01789bd08afc453831dd4f202a0f3b9dc9fc3b903412acb69ec9c94266e3a0788841","size":705,"data":"","first_seen":"2026-04-14T13:58:12.905794Z","last_seen":"2026-04-14T17:20:41.372442Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5f3a6e87c5487c39a688d2336396667","sha1":"713be48be7787393ab62effffdde831d05119cd5","sha256":"eb2815ea04aef59a17aa8a80d8095e09f93a8b95adaa450d935612ba0d28177b","sha512":"74d160fb16995ce18f3828a25b9553f1909a3ef758870c1d50b0003571cb56f2bb5b402143d1a502a9763f0e8702722c9a512b920e0038e7b63e3f2294d59a52","ssdeep":"96:LUISlHZC7cg1xqzc/xmWmOszE+/EJkLB8Fi7wn5KV:7S3Xgnqzcpm5/disQKV","tlshash":"f9b1ed3d7109cd4dec6a7d58113eac3a14cd867b47d6deb8c6c8de22468607a6b93ec0","size":5537,"data":"","first_seen":"2026-04-14T13:58:12.907072Z","last_seen":"2026-04-14T17:20:41.373803Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd3b88675b563525b30663cf8563fcda","sha1":"5ff49d61cad816ce083beb3111c42df1eb710fd4","sha256":"42340adb3b051f7b2ef8d974680641f6432d69c6310f4aba94851bfc0ff0efe0","sha512":"df99b49f08fc85c7dfa72d80549ba0bdb19745330c1971ad16f4bee6ca9d98caf0b4318b90805ed1705167c212bec9b93c77fbeb3d7e48d919edf4fe334f2475","ssdeep":"96:LtSIe7+IlX21G5c7pHoxK55TZH73lk7Z/S1GNXZoz:XY+I2EgdblZb3leToz","tlshash":"9991ef2db14acd5cec7bac58117f5c3665dec1b642abeeb9c64ddc320242039a7639c0","size":4465,"data":"","first_seen":"2026-04-14T13:58:12.908535Z","last_seen":"2026-04-14T17:20:41.375197Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9dc4934a71f6b8a4fd5f5d22cda96066","sha1":"13d4898f43d863843649980c323abb95c6dfc2ff","sha256":"709c7f6dd2831910a612351f16850e11f404fb12bcb7fe8ded23c4da72607296","sha512":"8501d1229e284cfc9bef41c1d1065b259b412229958c2c5e0f54d63aa0d1c571f2ae7b1f25709dc0f803abd3c755c9df74ab01865aba8f25e48303400ba5a57b","ssdeep":"96:LnCwZEViPkFGDhfzBSAiixMSA659SAslSAzlSAEBSAX1SAyVSAi5SAnVSAJlrSAY:TJP3D5Biixi65ds1z1EBXFyliJnlJlbY","tlshash":"08917f286281ce1cada70d6925be9c34111ae7fdc953deb7e268c532060e67deb539c0","size":4411,"data":"","first_seen":"2026-04-14T13:58:12.90985Z","last_seen":"2026-04-14T17:20:41.376376Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/turbopack-a71cbdf17100094d.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c80a98132843519508fa9156379e200","sha1":"391de9dae1dad8e0d48a616e3e2a2fd927f28ab1","sha256":"62f49149cd3d8b6e3df0eae5b4016af0bff5214d706994e5f37abf14fe545ab2","sha512":"3e5ec0a18a3d2fc144571098047e8741076cc6f031b45bcf076d616cd3fb91588dfe1837ca705ae53866bc050f95dceab2ec3050f08946399770186079ec2184","ssdeep":"192:NCSiHG+J8iEsuRnAEY8iaWkUmlGVhFd2mKKW9PZPKFXVqXmZ:NCSiHhylWkUmlQ8mKDZZyd","tlshash":"c312c6da37a6f073436fa1e7803f4144e1798869146d581c939ca8fa28794ae45e3f37","size":9909,"data":"","first_seen":"2026-04-14T13:58:12.881381Z","last_seen":"2026-04-14T17:20:41.354538Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/10c6bbbd9378ced3.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c60a6e594d32ef53aec7b1bb820d510","sha1":"7fd4f4dc1161b497aae68ceb9b7ac9020b9a4943","sha256":"6cecd0234c3dd4c5dee8089756a62187ba1471f57ade890a0d4d0606f332e81e","sha512":"218f6bac5a5151e1afc77ea6df165fc1912548df2d2c3a8229db7e8c5beb4833bdbd84aae14693b78956907cfda83dd6a80020ffc532f25755b421b1423dfd93","ssdeep":"192:AeRZagyExJZxYBHkss4jcTB0mcii5RvGTAaY515Eiyxy+9YldiJk/lcPifiy/TiV:Ae60xqBHZUa9rGTjHudpBVRv+5","tlshash":"7ca24244d289eeccba2716dda99fa01c611e4f58c73accbab5bd7432264409678737cc","size":22489,"data":"","first_seen":"2026-04-14T13:58:12.88272Z","last_seen":"2026-04-14T17:20:41.360427Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"acf7d44750b8a4bc661f198ece44d5af","sha1":"1a11aeba078c99c071a2ab1d29c6fb2a651ac3e6","sha256":"5129eb4e64cf161150e51598c1526ab8270c328c0be923bbfe79223483cd737a","sha512":"283b1ee16a5e5e982a0022d6c1e25c097b987791ebc2be79a07997af25f6fad1152572d1fd05e885bc9fcdbe0772db44804902e3b91070464298b3ee5c689118","ssdeep":"","tlshash":"49f07b30214ade1ced4b2929387ecc2d115ea249c45fce30a2d8cd1305864399fe29c4","size":646,"data":"","first_seen":"2026-04-14T13:58:12.911227Z","last_seen":"2026-04-14T17:20:41.377565Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca5ca324aae6946e7b54e3a9364d9306","sha1":"80ecb7098ca73c0e879804d1481a2d545e7b7b20","sha256":"ebe12174045ce32fbfe4831115098ab962dc30e61104a22912b29c172d67987b","sha512":"51b128da0012da189351cf4c42d615994925ad4b1310613ec253f017a871abe9ef407a329dde4155c1290c5d96d90ed10163780d648ece07089c952f35408a51","ssdeep":"","tlshash":"ca61bad15801dc95d6d76c4d22fb5d3b61738ac958d2c6fef444fd0224a71f88a91b44","size":3445,"data":"","first_seen":"2026-04-14T13:58:12.912453Z","last_seen":"2026-04-14T17:20:41.382005Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48950911b67ac78ff85bfa238a84dcfe","sha1":"d5f297638f95142f26d7efe363c87de08b5fd1d8","sha256":"754a840ab44867515614b8619add69e73db7f413a180ab551d8d8a32238be1b3","sha512":"3f855ba85d122ce20b0b9b2031cf367161e67c0952a2d380cd15c016ddeafb02d946f7a92fde234fb14c9d19fb14c8821c9b688819d4ce6b1dc3581aae402230","ssdeep":"","tlshash":"2cd0e239a004ee5bed5e3a85183dec3a288e018f0088eee492c0cd140a4293a3343fd2","size":285,"data":"","first_seen":"2026-04-14T13:58:12.913672Z","last_seen":"2026-04-14T17:20:41.383765Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c95dcb0c3ae84da71c840b78ef5ae3db","sha1":"43c0436fd85452f972ec34217001a9adbaa80c32","sha256":"b3453d5ae7465d4c9b4d81e5378146a7062bd46ab6c88cfbc5cf12d5231f1638","sha512":"2e63dd3148b67750ff2d322a47adc340a7ffa0f17ad7490f2ead2c9c4936dd513f70e4de44724844cec0d854b376aecc7b7e89eebdcca026539a38ff60582a10","ssdeep":"","tlshash":"185149296141ce3cec77092921be9c34556edbedc743de63d668c422260ea7cdb72ac4","size":3126,"data":"","first_seen":"2026-04-14T13:58:12.914861Z","last_seen":"2026-04-14T17:20:41.385666Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/ff1a16fafef87110.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","size":282,"data":"","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-08-08T12:05:46.083181Z","times_seen":26420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/247eb132b7f7b574.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"439b2fde6b7d501d63311a6b9d030c4f","sha1":"fccd28fcbed2236835220370ff4ada5ee2461ad4","sha256":"75b8ed049ee5d3ecc63ab1c7652fb1c5548c5b88528beb954538c9219d303d80","sha512":"66bf2b5a6d693dc04cec393e59a4049a6b21c451c5b4565e603aecab2ff2077366385a91ab150aac94337ed727f3231a53fa5e8a3426be37090eb34ac7b12baa","ssdeep":"384:fJ4IZDHYaarg98llBxDWMtQUV5s8oWDmuRRqE:x4IZDH+hrxrtvXbqE","tlshash":"53c2b6b27391fda212db85d9c0370005f2651c3521ae24b0b395ccef769dcd991bafa9","size":27854,"data":"","first_seen":"2025-10-25T00:04:48.606898Z","last_seen":"2026-08-08T12:05:46.064601Z","times_seen":4884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/8296bf97416a5ebf.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60870bd4dd28d07d1c7e00e5c5eeb809","sha1":"6d4cbf6b67230aa89c248a78615d8f3b1bcc3a68","sha256":"5ca60380096a29a841e04ded32e96e480b1e6818b951d449149997a4901ff752","sha512":"a5a88d2727b5e813040572e27a84d5a7d4dcc81140846383dbe233a1f5b9ac86553a4ca45faf43f1fda92008bf53b9a89470927148731a558cc3e6b060c0bfe2","ssdeep":"768:5KbJ+Nlc4to8JybDr8EU6QhwdDDLW/4eukPPWubgOv1qfVP8NW0Xim47q6FjP0CT:K+pgJXZguw920ohXuJr3oKvTfqR","tlshash":"fb83d6f936d0f8920bab45a6c07f0005f32c4d77245e78a4a3e5ddda316455ee0e2faa","size":84060,"data":"","first_seen":"2025-12-02T18:10:31.52288Z","last_seen":"2026-08-01T19:49:39.281707Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/023d923a37d494fc.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f1868feb0015b7815968b5b6d8b7418","sha1":"f995c1cefbebc51b9dc16e13f340b9a79da03b35","sha256":"2afe1c11e3fa149b52cee186a4c83e80a403e07ee3d1e6ba98a74c23f6043f39","sha512":"38aac06af3778b763629ebcda5eb0b8abdab3208a7b9b5e39f688a132e0e5329a691c2d1d870e092cdacf6277441e2c7be8a067ada47b066f17a8a9cef626b6c","ssdeep":"3072:wqyLpDnej23DKpwshv0e3jbpTm4/TBd5tE:wqIpDne2mFjVLLBd5tE","tlshash":"34240ae83d55f6626eb302b710af1803733c252b280d4d60a611fd9eb57845eb17bf9a","size":214812,"data":"","first_seen":"2025-12-13T18:55:59.683305Z","last_seen":"2026-08-08T12:05:46.089574Z","times_seen":1088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49017aabcf77dc0f0cccf89cf127426c","sha1":"ab130bd235885ee6bbda8e43b5a0b1e774b99cb7","sha256":"3db0a68388b0b4d80e4fcfd90d55b48a1dd3040083117972184fe8991e424fcd","sha512":"76ee2612758c07cf623dd659f741e87250d7b5032fa851f74f8816efb98e3df319d82668074ad2571171343704f61775f4317969340d5d80098a0fed3d282aad","ssdeep":"96:LurF9hfzZSA1N5SA7HNpSAqNSAI+NVSAlHNxSAKNtSA7ANzSAFHNDSA3HNVSAKB7:SX5pLJ55qtIklzxoN7WTTj9lKBzFPLdT","tlshash":"529139289290cd1cec6b0d6955ff9c34625ae3ddca47edb7d268c422060e6bde7636c0","size":4307,"data":"","first_seen":"2026-04-14T13:58:12.916181Z","last_seen":"2026-04-14T17:20:41.401597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81e3ec32e7625196e68c97f6c7c11e02","sha1":"cd06d3904500c719aeba08e772e777929d02b304","sha256":"b9a1c340b5d1c63ab2c5a827fd0558ecfc1ae6696d8c8b8264135cd5c20a425e","sha512":"7e7fada26094722cf2a78bac62f7963b025fd76ada7702bc68195e79e4bb65a72ecaf86a29f96ae4005daf3d711733dc0e578df71b5e2e848dcc49a367810535","ssdeep":"","tlshash":"6a516d285251ce1cada70c6925bedc34116ed7fdca93ee77d258c432020e67c9b63ac0","size":3063,"data":"","first_seen":"2026-04-14T13:58:12.917778Z","last_seen":"2026-04-14T17:20:41.404343Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1dc6f4cd4131787cc9bac23e283f632a","sha1":"dbd2e262c9e43df0d9452e05d43cebaca3dc2221","sha256":"922d1cea23a4f355576560b3d5b83c454afdc29ea4a64128a3bcaddcefba8042","sha512":"7cd9152f211c6450a0598e34a5f2044851d6e58a52b58d5ade5f4962143a32f9985268541222c964f92637ee16b1184e8664c2da583362228e28e49771385f9c","ssdeep":"","tlshash":"c14190286191ce1cadab4d6911be9c34115ed3fdcaa3ee76d258c832034d67ceb639c0","size":2433,"data":"","first_seen":"2026-04-14T13:58:12.919183Z","last_seen":"2026-04-14T17:20:41.407347Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8459fbbcdfa028cb9dfe0dbb42facd6c","sha1":"564657d8d4740119ed15944d855bce9d79073a9e","sha256":"659dc71dce607fc3cb2a9e4ccf36fa6a9889ce187d8c929004dbe1d6c2045d9c","sha512":"af139fb6512900865cce3feedbef7437d76a98257b49a9cc04435260a6b4038ef03c80ac0c2d38e0ff2600fb7c06b3aae7770a72df5a7aac901ded724d598fad","ssdeep":"96:LLTFPhfziEHSA6ODSAvNSA0RSA0DSAlq4LSAqzehuSAIYjSA6tSA6jXSAT/SAtbt:nJ5iEX6Ojvt0R0jlVqzNIYD6N6jnTftZ","tlshash":"7b912728a291cd1c9c6b0d6965fe9c34515ed7edca57de77d268c432020e2bcdba3ac0","size":4294,"data":"","first_seen":"2026-04-14T13:58:12.920602Z","last_seen":"2026-04-14T17:20:41.409521Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f9d8bd8219ef88e37c6143e95d905ab","sha1":"849c1a0717983a5969bef872d849dfd48a23ea6b","sha256":"f6c3b2db34405a85a5b5a6dd3720d53ac9de6b3e0a5fc091826260559b4485c6","sha512":"b8d7c2ad81e2e9de4d50059f9cd0b59aae0682a75b30ec3f7c3c369027ce5e03821d097b89cebb2f40bde90ef418683728c7077f9cd10334efc6a58ea20abeda","ssdeep":"96:LViFchfz7SAVdSAje54SAaiP8SAUWsLSA/q22cSArVSAotSAyfeL2SAWUDSAFNUa:hf5rV9je5+adUH/q2prloNyfeLcWUjb3","tlshash":"f3916928a251cd1c9c67096951be9c34a12fd7edc653ee73d268c433020e6bdeb63ac0","size":4265,"data":"","first_seen":"2026-04-14T13:58:12.922374Z","last_seen":"2026-04-14T17:20:41.423483Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/e97bb96cb3c593c6.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bb320829dd83763cc7c53a529f283c6","sha1":"e7d922983295ebac8ef3eff1b4bb1a4bac2f6915","sha256":"717c2a46a3e2c1061841fef02f92b3665619f1e8b7e15c528dcdd90738f2e9f7","sha512":"51a2c072dc1d068140a41bdf5b67c677162cd72538438aa31f7c7f8dced1b788687635e20146e5ed4f6b1a687b41c6017899cba3238c1d1da145d3ff7943de57","ssdeep":"192:TUQB9k84OONbcjEhPk2ktHAwiKiEXKwCTi5Lm1FZMeiXQ62hUNjVprO:T27vBKT2k8RwFCsm1FZJity","tlshash":"6e82c4ad7195f4911fa364a5803f500bb23929b6286dd0b0e3a2dcf5b8f415ed233f5a","size":17778,"data":"","first_seen":"2026-01-06T07:07:24.458831Z","last_seen":"2026-07-28T14:47:09.566919Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/6b35b6bf2c9f7dd3.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1467498bb54f0436282cc65da9f14e42","sha1":"f0ed4f9a834bb66a5c1b4b444a74097f526b2a7e","sha256":"4331b1aaa34902d73794967648860583053b3e069dde81f1199ab1255223a344","sha512":"5c7c491b8e47deed324884a61047c3ed60f5c3d180a3aca0571f196ab524416804da28bbc370a28a362dad342baf1078fe0d08d9b36379712edd42114b130892","ssdeep":"192:xvzNNOFLvpg92HbTQHC5VNMA00c6AaztG7HQ02k1Fegz+RYKDco0+I2lZej:FwFgU7uCTEbCztG7H0kIvlZej","tlshash":"6f62199972d5f4dd92978288802f500df27f1e7c985f54a4f3ed98bb6a2004da1b3f98","size":15634,"data":"","first_seen":"2026-04-14T13:58:12.877144Z","last_seen":"2026-04-14T17:20:41.348204Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc73c73c476d06a84ac35dd6c49626b1","sha1":"179f38dbe9e17d31e83df375afde6e86423cee32","sha256":"d658636645369c7c0fa5f703dfdcab6dfebdc00c1a511d080e95ee1f22f69f79","sha512":"71737ff1886d89868ead338cd56254fcb312ccf75e11150827f2347baa93f520d6c29a5e3874ff751cabcf1ceaaa781a705f90f7dd46046ee5015e0b2112c72f","ssdeep":"","tlshash":"2e318a2c7180cd1cec6b0d5925bfac35515fd6ea8a87de76d658d832020a57caba3ec0","size":1723,"data":"","first_seen":"2026-04-14T13:58:12.923715Z","last_seen":"2026-04-14T17:20:41.429032Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c31f405eb2a552300d93e75574f48a5","sha1":"44b0c6b05336c255caf4719b82578dc193df9096","sha256":"f256eb3b934f1a459e27664881ac221dc62b8336cf773d466febb001ab5452e3","sha512":"b9d18868828c772d8756384f1ce1a135f3477793298bb853d1ec8b1ae1517517ef83a470cf438885f74a70caf328c3de0b0ef5ee217b6200a78b06af5755fc65","ssdeep":"","tlshash":"20316d2c6141cd1cad6b9d5920beac38119ed2ee8a83de76d298d932074917ceb639c0","size":1472,"data":"","first_seen":"2026-04-14T13:58:12.92507Z","last_seen":"2026-04-14T17:20:41.431567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cccb9faccf057b0869c013ba1df5185","sha1":"21df6a73408b6f1e29f8fb0e03d296d7890e93c9","sha256":"fceaaa7b4513785c1da2f52f48f489d24090b72273708a67b0938b405c65a004","sha512":"bc44aabb48a7266948e6fa050bddafb0080d3a9a57664f8c3749dc454178224b3a7a5af247247c26660054b6d27e5abc46dc81ceae934c7ffb5973c7d503a363","ssdeep":"","tlshash":"304126189290cd0c9c6b097a55fe9c70526e93ecc957ee77e298c122020d7fddb626c0","size":2366,"data":"","first_seen":"2026-04-14T13:58:12.92643Z","last_seen":"2026-04-14T17:20:41.433913Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f021b490d3d85caa80c4c711dc5b3e42","sha1":"15b34d1efa741d9204873613d5912152ffc4314d","sha256":"b1e9831e05e8e016d217925a498dc45616b294251ee8482892a65b471b34eb09","sha512":"74fc5eaa5da7df92e50854082d3e04c2e58477af96f79d27cf485024eab79990055c8f5a3f7a9dbbe6ce7dcfbdc16feff9ee1cd096d417fa3fe582c1253ff05b","ssdeep":"","tlshash":"12c080a1dc42cc1dc6674f261c3a1c3521dcc574074555479dd5d9291985b3105b5d8a","size":178,"data":"","first_seen":"2025-09-30T10:59:21.66596Z","last_seen":"2026-08-08T10:24:07.994575Z","times_seen":533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae7df61cb6d03a03c690364c66a2d23f","sha1":"aad9bf488e5e4743c4d34c397c3a6b6f34ab5164","sha256":"215bedbe76294f6372bb5bdc17d17f93c5743ea404fe4347ac5559c659497da4","sha512":"e92a112247931dbcce46f73b310306caf6a8e1c05323d34b5397ff15fcca89ea2042b9b7231dcac5d73d8307ebea4a27f85f0f0f0fbb68b9e309edaaa2953a24","ssdeep":"","tlshash":"aec02b66c44bfc0060318c4e00141e6787dcd83940340e04725dc0c88031d13074cc45","size":144,"data":"","first_seen":"2025-11-19T01:00:41.055887Z","last_seen":"2026-04-14T17:20:41.438126Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a88c2d3c72d814b3d6ab0e92b75da846","sha1":"126111ea80abb29577965f4a8267610f88d55d03","sha256":"e9ef6c04e40f6110a65a706652b077970a67dfacde14b5ceb7059887984fad24","sha512":"201cdc3ff3fb0786cac1b7ed60766bc3806ed913906f4268d932f546aadf6f137a1b155a28b169a12f697a312a1a69d771603f29c6eb80cca7985aace6cff879","ssdeep":"","tlshash":"694100a2ad17ec0dc7877e0818bf3cb632cc83668145e49fb1e4c92549d7e346ee4661","size":2404,"data":"","first_seen":"2026-04-14T13:58:12.929947Z","last_seen":"2026-04-14T17:20:41.439463Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78dbc79fa0f7cb5dd2e1440c69c9ac8d","sha1":"8cdc2fbced45f3be400d36e1bd0d9004ac7cc6d7","sha256":"1472864dadc1f9599f55c133435fbdcdaec227596b785320ea3536f7a0b3c144","sha512":"bc8d4ce91fc7db10497a5daf8d3ac790fe61ad0f9025dd718c6ce201419b98cb01430fa69dbe1a1770b71aa7007ab365cb9e705d11744ea512408837ba5c359c","ssdeep":"","tlshash":"59800470c4401c15c03740531434110d055dc41f000007405351554c70111055505dcd","size":35,"data":"","first_seen":"2023-11-15T19:33:25Z","last_seen":"2026-08-06T14:50:48.386824Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bonusrosem.com/gizlilik/__next.gizlilik.__PAGE__.txt?_rsc=1nty8","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /gizlilik/__next.gizlilik.__PAGE__.txt?_rsc=1nty8 HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /gizlilik/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ksrs5WJmkVHtj%2BOh0sqcxMIz%2Bd9iSsDGabce8o0T15Gb5sCf4sLp5Vw6hjzZBGkrUOoO2%2B8KVcTc%2B1W7%2BNPca8Y0sWWx%2F2uPjtstyRDxR%2FqJtGQ2cYR4znyBAsV6ufOZ3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613e2a8eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65193), with no line terminators","md5":"234450fd943ca3f84b1362d110dd1fef","sha1":"ff6d7d5f421bae3150ff7800832a62e40ed7f527","sha256":"085eb3a54ff41cdc2ac1b91be4d6152947795ed33289239e37aba1bac6a5e8eb","sha512":"cf54392499305dfcd0e4d9f9e828e57517d010edb1788ccf220156c752e44efe8a2ed761df2e834a6802844cfe7760ae5b07e52333218b238ef177f40882649c","ssdeep":"768:3gOEDl+4BueoxFRohd8Dzp0KcNelGfbpuXLYyVovnoffoKvjW7I0m3uVd8lHPK0N:6l+/DGyzWuyep/0k5Ssc9CTp4y","tlshash":"fd8322285280cd1c9d770a6961beec34516ed3edc657dd76e2acc522030eabddb63ac0","first_seen":"2026-04-14T13:58:12.818645Z","last_seen":"2026-04-14T17:20:41.336869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/sss/__next.sss.txt?_rsc=2skqm","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /sss/__next.sss.txt?_rsc=2skqm HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /sss\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nAp%2Bw3D9%2FWRgs0W%2B0UpLU3G4F7jOYa8o8gTWiG7oxjk6fnBGZXZyLe9UA%2FllMIbdxYGHmIqygHJFUMCQxmpsaezsfocFjpqFDxty9G4C%2BfeZIKk2M1g6q0jE4dBj1LKNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b39d8c8ef082648948fd4326bf34ae96\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613e3a91b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f7f8e4fd092e43229044ff1757ec8b65","sha1":"9e64553dafdc9c2c962d18b03e5209cf7874359b","sha256":"a42ebe6c62ed32cc565d3edfa24096a5008ae99ae68f84370cdf96b30b4f5832","sha512":"f97eb908a23c70032395bba795c088ba5b9d78d3eca737e768034f3136a4061ef00db7b2a976f506bdfd167474fe13fcabd9e1bbee794144b2a853f651e42c8b","ssdeep":"","tlshash":"4fe02bb7d15aee1e3e368c4c0419935b514e983ba1352ab0d29ecd9c43905360bc9190","first_seen":"2026-04-14T13:58:12.821602Z","last_seen":"2026-04-14T17:20:41.340143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/bonus-rehberi/__next._head.txt?_rsc=1pn8p","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /bonus-rehberi/__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2BUkpOeuyeKJ6W%2F1xBICGO9c5q38P%2F6dqpmz0UpDu0hwpQ1vT5rWZhVauycbBfkaqU1s0HsPonsXZaL3alOh2AFRFawzZyH%2Fc%2BVCAgVf6az1XbXCZIaWXOYcVSDIzZkdPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"69fd65bf739f82ba66dabc18c96ecdc7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613eaaafb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2853,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2011)","md5":"ed4bda4628639c6c86c544ca12fae70d","sha1":"a852a23a145bc0956ce9112bdd3e74a56047aa3d","sha256":"6229cf3b0f170ec3724604bca60482faf1c1873de0e8e9081629732a988b36b2","sha512":"955a6945884f07cf231896ad0f6e1b836f5bc79d836103e7126a40d9f8641f67bc4b7957a098bdc1b91a62585b829b8edd8b33405dde10244d0fe79ba66dbe9f","ssdeep":"","tlshash":"7751017fda01ec2d679346c808cb770bb38d033797245c6ad54ecd5a06c171b2e842b2","first_seen":"2026-04-14T13:58:12.858852Z","last_seen":"2026-04-14T17:20:41.341876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bonusrosem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 21:23:35 GMT\r\nexpires: Sat, 10 Apr 2027 21:23:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 330997\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-08-08T12:39:44.449453Z","times_seen":19902,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":104,"dns":6,"connect":24,"send":0,"wait":54,"receive":26,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/sss","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /sss HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br, identity\r\nReferer: https://bonusrosem.com/\r\nRange: bytes=0-63\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nlink: \u003chttps://fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026amp;display=swap\u003e; rel=\"preload\"; as=style, \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7M6EAxynrgGCZOg%2Fl3eCAi%2BbywbdQZ2BY74%2FqBNZId8VJnphT4zQNq1Q4LMeDa17INjd7IDH%2FNsY6JIsnZ%2Fbn2sZ3o1NZ1XhMpcUkrj6x5vCigiVZziXN8C43n16g2btOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613cda12b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135262,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64794), with no line terminators","md5":"6578873bc9d7d63d2cc6626ed5bd2290","sha1":"6e533594eb7ca7792859df770ebb602c0a9d9c90","sha256":"bbc450560c33e973b88308130fdc73542760b4d857552dc5c020df9e9c142133","sha512":"42cb725f8c86bd96ffdbc83191c8bc4a9bc9f858d985b25d437af822ed3a2d5761a9fbb06cb16025586a90c7b349164291a668c88b11bc75eca0a6e67679c51b","ssdeep":"1536:91+5dS1fdeLDGyzWuyep/0k5Ssc9lydKDk2dQ6p4Z:j+5dSVdefdKDHdQ62Z","tlshash":"ffd364286280cd2cdd674aa961feac38506ed399c557ddaae39cc533030d67d9b73ac0","first_seen":"2026-04-14T13:58:12.866463Z","last_seen":"2026-04-14T17:20:41.34444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/hakkimizda","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /hakkimizda HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br, identity\r\nReferer: https://bonusrosem.com/\r\nRange: bytes=0-63\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nlink: \u003chttps://fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026amp;display=swap\u003e; rel=\"preload\"; as=style, \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIs8f4bHnqYPpUsVQ3JTJH0A1fBItO0o3fuh%2F2VqdIQ73hZlI7SJCMjexbOUeyNiPum4boqmxOV3E1bTElu%2BkV1NtefMvtEcPVrKQJW780oQsKW3Y%2FeCzKN0yQe8Ghi95Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613cea15b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98896,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64966), with no line terminators","md5":"069e7dc829197923865c601b7cb6c13a","sha1":"b27f66eba3dfb0c3bd8f8f2fd7cae56832223024","sha256":"f25e85c4da232a61205d9b492cf9f31aaab61a28c0f64471105a9acfda962add","sha512":"75e0cfdef5fe569f2b24aed56056dfdb749f91dddac966402193748762c84fd15c1a98f55d716ac7a13d0f61a3ffa49b631a9715d4d3854ccd2fb63f34d155fc","ssdeep":"768:3gOE5H+4Zu6z4BQJoxFRohd8Dzp0KcNelGfbpuXLYyVovnoffoKvjW7I0m3uVd8Q:kH+hB5DGyzWuyep/0k5Ssc9TZsBPpOP","tlshash":"eda343245280cd1cad7b4a6961beac34516ed3edc657dd7ae2acc433030da7d9b63ac0","first_seen":"2026-04-14T13:58:12.879286Z","last_seen":"2026-04-14T17:20:41.3455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/gizlilik/__next._head.txt?_rsc=1pn8p","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /gizlilik/__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mAHD4kCqzKo3UJlZaUkYu11Ot4gj86Tkr7vPqXpx68wQCEADvKbDw6ekWgSdueEJq5nR%2BIhieUFRL%2F7bkxA3b5IRYU3blKWhBRiKMWuqu2jrYo2koX6ppaUHGbYWeMpiMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fdccc4553d41b9ae42f5e7cd4b8d5c5c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613dca4eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2770,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1937)","md5":"35a04270c96ab06f06f9cd55c6935c59","sha1":"59a424430b6990d44f37ae756e87abb9ce16c26e","sha256":"d65b6dff5b5a52fb362aa363165a084b7451644af0613624cb28ee0292d5e67c","sha512":"4a73f85e2fbebf6656a6d512aa8f11d852485cb1fc904e3dd28cbdc127550fd463a9a1ae161852a3762da3361c30308d80c9112666e645507b20fb741baf30d4","ssdeep":"","tlshash":"3b510e7fda05dc2e67578988088b660b739d133bd6109c6be84ecd1a06c572b2e842b1","first_seen":"2026-04-14T13:58:12.856082Z","last_seen":"2026-04-14T17:20:41.346653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/8296bf97416a5ebf.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /_next/static/chunks/8296bf97416a5ebf.js HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"7cd8b2ca180b1aec4885f34d136b22e2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mlm5w4OyFjHQIKATKS4fgRgo7xqIWaQKJr123sCytMJKjVJkPGRM8GoXk4Nt%2F%2Fvs0%2Fo9LY29NqXTyIgTav3xJ5CZ3pSZQ58td5ODtChhVBCHjLzvPDGVEy156I2HM8msg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec4613b09c8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84060,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"60870bd4dd28d07d1c7e00e5c5eeb809","sha1":"6d4cbf6b67230aa89c248a78615d8f3b1bcc3a68","sha256":"5ca60380096a29a841e04ded32e96e480b1e6818b951d449149997a4901ff752","sha512":"a5a88d2727b5e813040572e27a84d5a7d4dcc81140846383dbe233a1f5b9ac86553a4ca45faf43f1fda92008bf53b9a89470927148731a558cc3e6b060c0bfe2","ssdeep":"768:5KbJ+Nlc4to8JybDr8EU6QhwdDDLW/4eukPPWubgOv1qfVP8NW0Xim47q6FjP0CT:K+pgJXZguw920ohXuJr3oKvTfqR","tlshash":"fb83d6f936d0f8920bab45a6c07f0005f32c4d77245e78a4a3e5ddda316455ee0e2faa","first_seen":"2025-12-02T18:10:31.52288Z","last_seen":"2026-08-01T19:49:39.281707Z","times_seen":33,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/6b35b6bf2c9f7dd3.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /_next/static/chunks/6b35b6bf2c9f7dd3.js HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"e9c1fd1c9f93a53d43554b02971c2a30\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XIcWQ%2F2FStY63CxCU4wd%2F5y8KC%2FgxASPTsNg10tPtzV05%2F1lXWWrSDLi9OZ%2FcHGff7u3TSnf4CNXgdxqbagZtN84mjOaSVFWTNefMig2E%2BBke%2BpV7f3IaK9sMXn7qyMiZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec4613b09cbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15634,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15627), with no line terminators","md5":"1467498bb54f0436282cc65da9f14e42","sha1":"f0ed4f9a834bb66a5c1b4b444a74097f526b2a7e","sha256":"4331b1aaa34902d73794967648860583053b3e069dde81f1199ab1255223a344","sha512":"5c7c491b8e47deed324884a61047c3ed60f5c3d180a3aca0571f196ab524416804da28bbc370a28a362dad342baf1078fe0d08d9b36379712edd42114b130892","ssdeep":"192:xvzNNOFLvpg92HbTQHC5VNMA00c6AaztG7HQ02k1Fegz+RYKDco0+I2lZej:FwFgU7uCTEbCztG7H0kIvlZej","tlshash":"6f62199972d5f4dd92978288802f500df27f1e7c985f54a4f3ed98bb6a2004da1b3f98","first_seen":"2026-04-14T13:58:12.877144Z","last_seen":"2026-04-14T17:20:41.348204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/ff1a16fafef87110.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /_next/static/chunks/ff1a16fafef87110.js HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"2038ef7fdff6285995df4060ca9711ac\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2BCoYkvTWjFVA0B4JdrCuAWl4%2FQrCLyWsgmNC%2FWF%2FjSPqOP6CZ5wafA7vS%2FUachrF4pUOJ2H0GQZ30YjVdtnKYQR9SDp1hq1%2FrPfXCRuSRt7H%2FJiLLxnMi0zktSaboXOqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec4613b09d2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-08-08T12:05:46.083181Z","times_seen":26420,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/247eb132b7f7b574.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /_next/static/chunks/247eb132b7f7b574.js HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"f42808861011dea1003e21be0947c2a8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwtbJ1C8rPIUvguBkXaj8df%2BK0V44SazzZCCFulwv%2BX%2FRksJJHPfCAOt2Bttlu6mK3S9T%2FzQU%2BTLBV0xKyVHQLaJIRIbTbT1tPiGDDrI41F92zdmyUwy3GQsH8%2FPjwEgjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec4613b09d3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27854,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27852), with no line terminators","md5":"439b2fde6b7d501d63311a6b9d030c4f","sha1":"fccd28fcbed2236835220370ff4ada5ee2461ad4","sha256":"75b8ed049ee5d3ecc63ab1c7652fb1c5548c5b88528beb954538c9219d303d80","sha512":"66bf2b5a6d693dc04cec393e59a4049a6b21c451c5b4565e603aecab2ff2077366385a91ab150aac94337ed727f3231a53fa5e8a3426be37090eb34ac7b12baa","ssdeep":"384:fJ4IZDHYaarg98llBxDWMtQUV5s8oWDmuRRqE:x4IZDH+hrxrtvXbqE","tlshash":"53c2b6b27391fda212db85d9c0370005f2651c3521ae24b0b395ccef769dcd991bafa9","first_seen":"2025-10-25T00:04:48.606898Z","last_seen":"2026-08-08T12:05:46.064601Z","times_seen":4884,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bonusrosem.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 09 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 464060\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-08T12:41:13.121419Z","times_seen":254862,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":105,"dns":9,"connect":21,"send":0,"wait":23,"receive":30,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/gizlilik","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /gizlilik HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br, identity\r\nReferer: https://bonusrosem.com/\r\nRange: bytes=0-63\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nlink: \u003chttps://fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026amp;display=swap\u003e; rel=\"preload\"; as=style, \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCpBO4CYPvHd6NepC0SnKHN8y5IgwnXTNbId6ToYrHm2cqxl%2BWEQrXUzGvYR7wZgEPsJl8PipvYcZOvFUAS8lzi2AVyKoyGNRIS8rVexHxQ%2FhWMW9LzZzptQWvhs7qPvDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613cda11b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99082,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65026), with no line terminators","md5":"7d9597a714662ea2d8ba6f9eaea85d20","sha1":"86b7411b0c6b26d97e868d66d8813ab28988571f","sha256":"0fffee04534762acd94d4fe7f6c271a39af99280278ecdd432c43d04975f5b60","sha512":"dc007d49ef86dbe71750040410bfc71c8995019de4962dc8cedb95fd9623411ed437f1678304894ccd7b73e5916a87058c73711997d2062da2ba3f8a1012ac12","ssdeep":"1536:7n+I8BloLTDGyzWuyep/0k5Ssc9HjgkBWSIw5pu5:r+nBlNRBWSrA5","tlshash":"eca323245280cd1c9d7b4a6961beec34516ed3edc657debad29cc432030ea7d9b63ac0","first_seen":"2026-04-14T13:58:12.828847Z","last_seen":"2026-04-14T17:20:41.351442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/242188bb71c223d6.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /_next/static/chunks/242188bb71c223d6.js HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"5e15a92afd315f6582cbe5f1c37e163e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ph5sEpSitC%2BpNZ2OLoOxxNokTClryK4jlYGnYOV%2FOzGvFf50f2uw5buM4%2ByOiX1b38lJSZsaAy9%2Fo7QXZCBB%2BRUsbrDkxMduUGsJSx%2FDsx7BxnyWeG8Yz54CD%2Fq2vwtqjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec4613b09c7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86909,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1c11b34950af12f4b6f2944a0aabdf96","sha1":"f5325c0bce9f2d02071484df45bec32d106468f1","sha256":"bad749b101ca3790e5d18b2b1ea4ab7990fbb2d5a98331c93f545b310acea7d7","sha512":"14b5e989777d795ecc38712ba410ef99e725a9adae7dc8e971c480a566c3f63ac8a6182d31581a04a52789fb8305169ef5096b12f449e156829ab9d8d2902781","ssdeep":"768:Sa+vuOGbenGrMD75m96gKFyrPVpfREHIO0JoNM+Mmui6Ei08w4+cY3d/U+yeZGrR:Tlxr075cKFmPVpfREHIOdNNUw4oO","tlshash":"6b83d5a571d5f99203a780f4c43f101bf23d0d7610ad64a0a3e5ccea79a498de2b7f99","first_seen":"2026-03-25T01:17:04.814047Z","last_seen":"2026-06-16T13:01:07.573916Z","times_seen":14,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Inter:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Apr 2026 17:20:12 GMT\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2555,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fcf63d91b46adf99bd3db1a56530254","sha1":"62f7d93d0b191e1e8464958268f225f51dd1752d","sha256":"63867a7c4bb197935b85ada1c4bcbc95951598dfb736b24132f0a43e5e5e365c","sha512":"16d25c5cc841006ca8e86ef334efb051054257e6990275a3a0d1e25f9adc6c665b65ff9083dfc9c409d84b69365a26eb9ba875431ca75765743b70902e684d14","ssdeep":"","tlshash":"0451ab92002ba404ab931dc233cf7f3aaece50856085d2b96ffd1dc65cead66436875d","first_seen":"2025-09-10T17:57:06.167004Z","last_seen":"2026-08-08T12:43:31.981777Z","times_seen":30370,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/bonus-rehberi/__next._tree.txt?_rsc=1r34m","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /bonus-rehberi/__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yA9qlKyFO8v2VeQ3OxIctbbfF77aB1VPUe%2F%2BgxHVndSjvh92qHTqWFOUmjUNgjV%2FEgBJMYFffj%2B%2FhK%2BUXM7LthIwiulatWECdbpg19ZTnx%2BVlemEvMZKpY3dl0h4vB0nhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3842dcfd7501189d1310d25446a37b87\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613e0a70b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (429)","md5":"f961dc1c3d1f19c13650535f33e3e51f","sha1":"4357c251a4afcd479a3f785aea37e286acb1c73e","sha256":"5d887431dec7a5fab033b1fee527858787106730360ff77dbf33acd7f0328d2d","sha512":"befba54d24f61a1eb90c5c4b55eed8e4635c66a6f31caf484f9bfee080902458ae867274bf9cd61f0d3a84198a70f031c7d4da63e2c39d3690dbd622c591c640","ssdeep":"","tlshash":"7bf02b6f48acbd9d5485848812d8bf071b2c852f74958db948c95c1563bf0341697743","first_seen":"2026-04-14T13:58:12.903843Z","last_seen":"2026-04-14T17:20:41.353597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/hakkimizda/__next.hakkimizda.__PAGE__.txt?_rsc=mggwj","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /hakkimizda/__next.hakkimizda.__PAGE__.txt?_rsc=mggwj HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /hakkimizda/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MeGAYRIbn36V4j9NcgGOSDIhX4OV0shu1ZBbbcpKmND8ldyGYa2vwqHoIouQBnoqciucG964Qfp%2ByjQ2A76UaGfifJQEWGKQS4rfKfstl50rPZ8Ofpu%2FgLOqSUMOxOoxiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613e8aacb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65193), with no line terminators","md5":"234450fd943ca3f84b1362d110dd1fef","sha1":"ff6d7d5f421bae3150ff7800832a62e40ed7f527","sha256":"085eb3a54ff41cdc2ac1b91be4d6152947795ed33289239e37aba1bac6a5e8eb","sha512":"cf54392499305dfcd0e4d9f9e828e57517d010edb1788ccf220156c752e44efe8a2ed761df2e834a6802844cfe7760ae5b07e52333218b238ef177f40882649c","ssdeep":"768:3gOEDl+4BueoxFRohd8Dzp0KcNelGfbpuXLYyVovnoffoKvjW7I0m3uVd8lHPK0N:6l+/DGyzWuyep/0k5Ssc9CTp4y","tlshash":"fd8322285280cd1c9d770a6961beec34516ed3edc657dd76e2acc522030eabddb63ac0","first_seen":"2026-04-14T13:58:12.818645Z","last_seen":"2026-04-14T17:20:41.336869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/turbopack-a71cbdf17100094d.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-a71cbdf17100094d.js HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"f98fa96df1ecdfde5a417260cb53e648\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBaeNR7WG191ZXRE89YSSHdycD%2FHlVhZ2JVhkvPlxsTqJjkVfaxl59%2BbGaAigsCpJxuw1KBsd7IYIIP7HYW0fadBBNKd5pKZ0MsBLRzZ4N0bjZMXeeqCGCLs%2BD%2FzYib2jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec4613b09cab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9909,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6122)","md5":"3c80a98132843519508fa9156379e200","sha1":"391de9dae1dad8e0d48a616e3e2a2fd927f28ab1","sha256":"62f49149cd3d8b6e3df0eae5b4016af0bff5214d706994e5f37abf14fe545ab2","sha512":"3e5ec0a18a3d2fc144571098047e8741076cc6f031b45bcf076d616cd3fb91588dfe1837ca705ae53866bc050f95dceab2ec3050f08946399770186079ec2184","ssdeep":"192:NCSiHG+J8iEsuRnAEY8iaWkUmlGVhFd2mKKW9PZPKFXVqXmZ:NCSiHhylWkUmlQ8mKDZZyd","tlshash":"c312c6da37a6f073436fa1e7803f4144e1798869146d581c939ca8fa28794ae45e3f37","first_seen":"2026-04-14T13:58:12.881381Z","last_seen":"2026-04-14T17:20:41.354538Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/favicon.ico","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fs42g0OlIYJGeeVrcXh5XQIVrLJL2BU48bfPRder5mA2GSsWMMhSXvHQ%2B6mTVVYwvuD8zGrnYOPv0nTq6xfXFadJ5g4F6eRoixz%2FH%2Bx%2BlHGWCwWYvBqHp0qnCjG3Ewj0zA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613d3a1cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65193), with no line terminators","md5":"234450fd943ca3f84b1362d110dd1fef","sha1":"ff6d7d5f421bae3150ff7800832a62e40ed7f527","sha256":"085eb3a54ff41cdc2ac1b91be4d6152947795ed33289239e37aba1bac6a5e8eb","sha512":"cf54392499305dfcd0e4d9f9e828e57517d010edb1788ccf220156c752e44efe8a2ed761df2e834a6802844cfe7760ae5b07e52333218b238ef177f40882649c","ssdeep":"768:3gOEDl+4BueoxFRohd8Dzp0KcNelGfbpuXLYyVovnoffoKvjW7I0m3uVd8lHPK0N:6l+/DGyzWuyep/0k5Ssc9CTp4y","tlshash":"fd8322285280cd1c9d770a6961beec34516ed3edc657dd76e2acc522030eabddb63ac0","first_seen":"2026-04-14T13:58:12.818645Z","last_seen":"2026-04-14T17:20:41.336869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/bonuslar/__next.bonuslar.txt?_rsc=1bcic","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /bonuslar/__next.bonuslar.txt?_rsc=1bcic HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /bonuslar\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDv2phTFq9bdhMA7E6CiXrGHFZV8tlaYWojUSSvmk3tAKckOHiUb1ec8AV4S8aYtAgtbULl7HiiYGEGvhaD8h7WlyoIh%2ByFqqon01fg4zvtcc2m6rJq6sKOyqB0aDq88Xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9f4c48f5def3fbb4345a9927ff008c72\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613dfa58b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4736,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (4284)","md5":"2c0ea510f5b1f6efda956f4611cb27b3","sha1":"e5366746f2aa05f1ddf2118d195800ed3f8cc586","sha256":"dfeab8e60e5ae20ab5fa7f29316268128ada7bfb7d6b66977b0e4048d3304254","sha512":"bf4ca49767a7a8bed6aff39df7c0be24cd92f1af23fb5eb230c5b0d277f09265996c0c8b1fa28159348df2511ad4adf6f188a416bc6618d50d9ed630aee3570b","ssdeep":"96:8kH5sNi6nOe7mVbnB7mVbnC7mVbnj7mVbnU7mVbnt7mVbne7mVbnP7mKciV:f5sNikD7mVbnB7mVbnC7mVbnj7mVbnUZ","tlshash":"7ba1e42caa679c1df6a32021491f8568532e4bb756a45f7af3fcaf231f0a4725c4c384","first_seen":"2026-04-14T13:58:12.885691Z","last_seen":"2026-04-14T17:20:41.355547Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/__next._tree.txt?_rsc=1r34m","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cln%2B8I2bG0i59SoQlZo%2F7OWgwZGOsMYKTTsJ00DcoZ%2Bs4UrNKfFT8iT%2BapPbNfE%2BS26JdOFPMxs1JOsxgSDcS8n%2Bgefs5TlzdgtTVTwUSUTvpjzAhmXof84le8cQkuWmuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"755cd6459d089ead8acd048241ac7517\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613e0a73b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":438,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5ea0e949a95dc3529dd5264714d6ade8","sha1":"567c020fe448ccf1423fe4439233364919b2e82d","sha256":"65beb45d0f9449e9628f49a84a64c75ecd47c025ba70f0d4645b004a5fbf6f39","sha512":"f2cf6d66b42d7f46ff4cce6db524ac10395bc1aa6a8eb709758570ca9710221aa1af72bdb4648bc2cffe0d179b14943bd6e8610aa5d44dbb45c5ffffc30796fe","ssdeep":"","tlshash":"c3f0f1bf08ecbd4d5445c4482198bf07072c812fb4e54ef54cca8c6462ff0301686b03","first_seen":"2026-04-14T13:58:12.899835Z","last_seen":"2026-04-14T17:20:41.356492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/sss/__next._head.txt?_rsc=1pn8p","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /sss/__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVUlWiS3TM5HBo1AGNKkYb84tKNtXmipl7xAZTAy72qe9mwXrPDVjC0J9KEf7Y8vNkZ9JwMrj%2Bi5EUjOjxEjLdqG54Pa1Lh7c%2BYsfGWL2%2FHn1ch8roae%2FC3syJPm1bv5fA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3ac347ef934076f0f27add271a6fcc9e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613e2a8fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2846,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2004)","md5":"142f7dfc78b79a3ddfe13f34215b3fa6","sha1":"47a08905f940f9b624d80249543b12cc764412bb","sha256":"0d41ff84378d30beda103e35a8b8f67d985cccf589d4cba394e944bc3d82d8f0","sha512":"4fb61046d2bfdfe4820b7910be69181c750020868958faeecf60e89301f8b69525702d1a747e3761e117e7586f18ed176fcd1f46e5728e52cb35cf79cad52056","ssdeep":"","tlshash":"b951f07fea05ec2e6753498508cb770b735d033b86149cabd95ecd1a06d572b2e842b1","first_seen":"2026-04-14T13:58:12.87024Z","last_seen":"2026-04-14T17:20:41.357305Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/hakkimizda/__next._head.txt?_rsc=1pn8p","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /hakkimizda/__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EgR6StWCGEXoqAQECnkNpskbcFk6u1x4TdzmXg0ErYFpj4JqCDg%2FOfdpZFKGFmEUZRUs0Urh3Pgd2aDlBWTKkWmF%2BEM7tVlZaZvqyvvPHJ0AkXFL4L6Bw%2FA6ZpOUpv37EQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c2f2c28dbcba75defae20d6a329c37a2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613e7aa9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (1996)","md5":"bb8755240424f9c5eae7e1f7785d7173","sha1":"2b99b89a97a1f957e3c3b060313a4b5042a80987","sha256":"63be780456ccdf6c6430382688848d0230292c5d96b04c5e21cbd1d50b4fb1cd","sha512":"951033ba086b6c8b4c9bf8b7b6dd4a5be47aa744b5db1e3624b8bc688e9386055a574519e7c05f2424998af6bfd0d25408f0bcb0ae710d08b1f517063a9dbfdf","ssdeep":"","tlshash":"1651f17fea05ec2e6793898908cb660b734d533bd6149c67e84ecd1e06d572b2e843b1","first_seen":"2026-04-14T13:58:12.887084Z","last_seen":"2026-04-14T17:20:41.358122Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/bonus-rehberi/__next.bonus-rehberi.__PAGE__.txt?_rsc=7d4s8","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /bonus-rehberi/__next.bonus-rehberi.__PAGE__.txt?_rsc=7d4s8 HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /bonus-rehberi/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLWYnuaCKudoSqqbt8%2FDprNxJf7tQLHthrGa7tbbjuV4eHHkk%2Ba9vsiQ1nk0DuxPkFsQU68g0bIumDS2efWW4XT6k%2F5W%2FOcyWsG4hBx63yyWt8uEyZsqLhr0US1cbsepiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613ebab2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65193), with no line terminators","md5":"234450fd943ca3f84b1362d110dd1fef","sha1":"ff6d7d5f421bae3150ff7800832a62e40ed7f527","sha256":"085eb3a54ff41cdc2ac1b91be4d6152947795ed33289239e37aba1bac6a5e8eb","sha512":"cf54392499305dfcd0e4d9f9e828e57517d010edb1788ccf220156c752e44efe8a2ed761df2e834a6802844cfe7760ae5b07e52333218b238ef177f40882649c","ssdeep":"768:3gOEDl+4BueoxFRohd8Dzp0KcNelGfbpuXLYyVovnoffoKvjW7I0m3uVd8lHPK0N:6l+/DGyzWuyep/0k5Ssc9CTp4y","tlshash":"fd8322285280cd1c9d770a6961beec34516ed3edc657dd76e2acc522030eabddb63ac0","first_seen":"2026-04-14T13:58:12.818645Z","last_seen":"2026-04-14T17:20:41.336869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/gizlilik/__next._index.txt?_rsc=nn07o","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /gizlilik/__next._index.txt?_rsc=nn07o HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqjV4yxZ%2FcYsFUicDu%2BmNUR0aShr8X%2FHCASKTdvtxwmC4HAAzihCXq6DIMGOd9dBa1x0Did%2FR7RekurzVcPdwlWfwWeA2CURT1zfWQvDRksKtDubYDhGGC878Vkc1R3U3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5fb29f8a030504aa9ca1c902e4e21ddc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613dca4fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37063,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (4423)","md5":"1709d90810279d9865feef09bc85134b","sha1":"632d7cce9592f04fe4b5deddc5f52c2dd56f1123","sha256":"fcd9459ab1e7a143e3c2be0e552830232ece854c1229b86dd681bfd345ad67ea","sha512":"fbfb6df8cf8e746da272189ece211b84106c0897ba0ad4386876dd7a77d7efc8ae78ed3193870281cd6398c5a024f9f9560fff86c7aab9b8e41388cfffe17f79","ssdeep":"768:bFxUFhFJ7FL3FGFswcvvWeUdTkxmaxviytCNms+oVyMi+2Fjm9hU8DTy1b79yuv5:bFxgnrJSsX/","tlshash":"99f2cd3953405e6c6e7b01a961dfd115622e97bcca97eebbd6bc5c22030d2689e233c0","first_seen":"2026-04-14T13:58:12.868449Z","last_seen":"2026-04-14T17:20:41.358951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/023d923a37d494fc.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /_next/static/chunks/023d923a37d494fc.js HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"15552917118deba2b5d72688ac78a49e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bACzZ0sPmOhh2hXkwzBEnR5w8xS4hlaoNmNcZ42QefBlH4Bm46eRB%2B51j3seHcYVD5Tb3MkaoPl9XM8%2Bx23ofARQ%2BwhjJXwAu02zWU2TFpDJNaQuM1XJOULVc8gCORIPVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec4613b09c9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214812,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5f1868feb0015b7815968b5b6d8b7418","sha1":"f995c1cefbebc51b9dc16e13f340b9a79da03b35","sha256":"2afe1c11e3fa149b52cee186a4c83e80a403e07ee3d1e6ba98a74c23f6043f39","sha512":"38aac06af3778b763629ebcda5eb0b8abdab3208a7b9b5e39f688a132e0e5329a691c2d1d870e092cdacf6277441e2c7be8a067ada47b066f17a8a9cef626b6c","ssdeep":"3072:wqyLpDnej23DKpwshv0e3jbpTm4/TBd5tE:wqIpDne2mFjVLLBd5tE","tlshash":"34240ae83d55f6626eb302b710af1803733c252b280d4d60a611fd9eb57845eb17bf9a","first_seen":"2025-12-13T18:55:59.683305Z","last_seen":"2026-08-08T12:05:46.089574Z","times_seen":1088,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/10c6bbbd9378ced3.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /_next/static/chunks/10c6bbbd9378ced3.js HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"9112123c53fe1a9b85c7f89619af0613\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VedHjLcpmia1XPoFuDHKUI%2F8EXrECTn1zegBuIe92O%2F7%2BaNW6iFRV8VA53YPa%2F94KSyRkaMLWdR50lc1yA%2BqTPNWoCE1nEfc5M8Kj5PkbU0S85ea6f%2BEIqCMx6aKRuPM0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec4613b09d4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21967), with no line terminators","md5":"9c60a6e594d32ef53aec7b1bb820d510","sha1":"7fd4f4dc1161b497aae68ceb9b7ac9020b9a4943","sha256":"6cecd0234c3dd4c5dee8089756a62187ba1471f57ade890a0d4d0606f332e81e","sha512":"218f6bac5a5151e1afc77ea6df165fc1912548df2d2c3a8229db7e8c5beb4833bdbd84aae14693b78956907cfda83dd6a80020ffc532f25755b421b1423dfd93","ssdeep":"192:AeRZagyExJZxYBHkss4jcTB0mcii5RvGTAaY515Eiyxy+9YldiJk/lcPifiy/TiV:Ae60xqBHZUa9rGTjHudpBVRv+5","tlshash":"7ca24244d289eeccba2716dda99fa01c611e4f58c73accbab5bd7432264409678737cc","first_seen":"2026-04-14T13:58:12.88272Z","last_seen":"2026-04-14T17:20:41.360427Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/gizlilik/__next._tree.txt?_rsc=1r34m","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /gizlilik/__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4O8TtSXisAoEc8CEBKU%2B22oa6pkrwe49zG0rf9gA1qeR09r0IFUivl2rZ5EQqNAuDwJubtZkbP6rXFsJxg1gAGzWBJm6QK5mGZCdDImxAiHOCZW5h0v42xxcEs%2FdQjMZJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a27760b98c56d55a56ad685511362e03\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613d7a32b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (419)","md5":"1fbc3ae5d275571a2c0c473ccc76066b","sha1":"69829a8f45eb1c5e20855b3a906208a8048fa078","sha256":"6490e67f0a92c793463e94b9ba3e299e824641d70a044cf0be3e32a08ad3f8f4","sha512":"0a871b39e688a31d4223fcbe80b64be1dbe13e13ab388682d5818a3da5b4fd705fa3621a108ed490708325c35bb88ed196c6a21be09b4438cbcb9740b4b12328","ssdeep":"","tlshash":"ccf0c07f0898be8d5845c8482298bf07176c811fb4a54df94c8a5c6022ff035094b703","first_seen":"2026-04-14T13:58:12.871759Z","last_seen":"2026-04-14T17:20:41.361205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/sss/__next._tree.txt?_rsc=1r34m","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /sss/__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUMreW13dUJ88MGXLVUyMXCEEhyt1Th7TWi6dhwHeg42GlZnlfEjaEXH295SjHWSToDusvKZSxAyYZY0lBAjZD0VqucrmISSnH0ykpBfSp89qWzqrSCeOzS1b3bsA4zOTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f543897a7aaa45449bd393be2af6e010\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613d8a36b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (409)","md5":"fb0e54c58970d2bc36e69e877de6021e","sha1":"d1388d326ad2c7c2c900afebd8552208b5fc7d1c","sha256":"b265dd34da9ae6b074561a638f14c1421aa5c2c82f00586bb885b5c799e29e3b","sha512":"64b631104a859318f3cea6251093629dec8841ac88c716b7ea6316426ece4da2b127aafef6d5bbb7a014ee1affcc7b05099998a25d06dbf63fc370f9cda78cc6","ssdeep":"","tlshash":"31f059bf48a8bd9da449c4482298bf0717acc51fb4a58ef9488a5c2462ff0741a8b743","first_seen":"2026-04-14T13:58:12.831733Z","last_seen":"2026-04-14T17:20:41.362422Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/bonuslar/__next._tree.txt?_rsc=1r34m","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /bonuslar/__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYw7baK1W57pT8cbw2mubmAZRE4n34puWFt8O16xi1Li7dfD%2BXQxqjieNJFSPmjjkC3m%2FXCKZ8xFhGbexGZaDvmw7EWG%2BF9gIgq8VfI%2FDjdkGq5EXpnVL6JAoC0EU%2BVvMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"710f752d7bcfbd8ca144ccd5ec7fdea1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613d8a3bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (419)","md5":"3948efc358c018c47fdf1e8ad32976ae","sha1":"0a2bf11912dc82b3b5e847a6747831dc76113e58","sha256":"61cbd825236b5b9cf8e3b5a1906b5fd08a3960f418db43fdf19634f665214571","sha512":"3b49c99d730934e56500c3d263c1536a8730c058fcd44b0311a7e0363b1fd35d212f64ac98732cc31967278ff7ba0a421b4ac71fe342d875f4ac66d30bc4c9e9","ssdeep":"","tlshash":"62f059bf48ecbd9da445c48822a4bf071b6c851fb4a54efa4c8a5c2466ff0351a8b743","first_seen":"2026-04-14T13:58:12.892479Z","last_seen":"2026-04-14T17:20:41.363336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/gizlilik/__next.gizlilik.txt?_rsc=us50p","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /gizlilik/__next.gizlilik.txt?_rsc=us50p HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /gizlilik\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dx0XgTEWzaf68Pz1vda7qq5qeAFLIHuE7SMPjh%2Fgtzj7l8qFoIuZRfXFBiAK0JQ8F1KTJf33ISMlO%2FuokcLSLbIh3FnHbIpSyWLG8aVf0VXsgYvdlu%2FWTRagCSXs2fZIZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b39d8c8ef082648948fd4326bf34ae96\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613e2a8cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f7f8e4fd092e43229044ff1757ec8b65","sha1":"9e64553dafdc9c2c962d18b03e5209cf7874359b","sha256":"a42ebe6c62ed32cc565d3edfa24096a5008ae99ae68f84370cdf96b30b4f5832","sha512":"f97eb908a23c70032395bba795c088ba5b9d78d3eca737e768034f3136a4061ef00db7b2a976f506bdfd167474fe13fcabd9e1bbee794144b2a853f651e42c8b","ssdeep":"","tlshash":"4fe02bb7d15aee1e3e368c4c0419935b514e983ba1352ab0d29ecd9c43905360bc9190","first_seen":"2026-04-14T13:58:12.821602Z","last_seen":"2026-04-14T17:20:41.340143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/sss/__next.sss.__PAGE__.txt?_rsc=17lye","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /sss/__next.sss.__PAGE__.txt?_rsc=17lye HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /sss/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fp8mo2mrypJ15FomO9x3Ri89i1%2BNBPvwlk4h593IqYZGE7MlP9rxtNXqytTxT1kSfPkeye62T6O1vNcIhEweyUwF2Jfahy%2F%2BgV9UFzFyqlwm0bCsa8ibxK8rjJ%2BVVvCaZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613e5aa6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65193), with no line terminators","md5":"234450fd943ca3f84b1362d110dd1fef","sha1":"ff6d7d5f421bae3150ff7800832a62e40ed7f527","sha256":"085eb3a54ff41cdc2ac1b91be4d6152947795ed33289239e37aba1bac6a5e8eb","sha512":"cf54392499305dfcd0e4d9f9e828e57517d010edb1788ccf220156c752e44efe8a2ed761df2e834a6802844cfe7760ae5b07e52333218b238ef177f40882649c","ssdeep":"768:3gOEDl+4BueoxFRohd8Dzp0KcNelGfbpuXLYyVovnoffoKvjW7I0m3uVd8lHPK0N:6l+/DGyzWuyep/0k5Ssc9CTp4y","tlshash":"fd8322285280cd1c9d770a6961beec34516ed3edc657dd76e2acc522030eabddb63ac0","first_seen":"2026-04-14T13:58:12.818645Z","last_seen":"2026-04-14T17:20:41.336869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/hakkimizda/__next._tree.txt?_rsc=1r34m","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /hakkimizda/__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHVm6auep5POSbz3T%2F1sH384QjObkqmySHFGOHaZgt9E7qRWI9eC3eVzsiQHJZV0F2Xb2MkwsXVaoDL%2BvDEKOcOX5DTLalEgk1r3y5hIpSDcp27OjlEWK6UfJldITGNxWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2d4326386ecc86a2f5de6f9a65b12a83\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613d8a33b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":570,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (423)","md5":"825393641840a3af8ab8a4659221f85a","sha1":"ee123747eaecb29a4008931d5aebc22f4051d348","sha256":"51b654f1043ad15f8dd74e87f433d7fca98d5c314598755825cf1eec0e3d5219","sha512":"e46b8fbc1dde7e496784e627ad3fd0d93783f39937a861aa9d3bfa7ba679df6de681934fcba96c8a8f477596442c8aecd32fc5abb376bee4f6961fb8f89375e5","ssdeep":"","tlshash":"2df0c07f4ce8bd8d5885d5481298bf07172dc11f74a45df588895c2023ff0381547703","first_seen":"2026-04-14T13:58:12.884211Z","last_seen":"2026-04-14T17:20:41.364141Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br, identity\r\nReferer: https://bonusrosem.com/\r\nRange: bytes=0-63\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nlink: \u003chttps://fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026amp;display=swap\u003e; rel=\"preload\"; as=style, \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hf40r%2B%2BlwKK7fctw5JWLZESQBAnqmHhmrq9NfPK9lMfyj8SOL3qzNzw7LWjC3Wm8nvdfnJNrjkUxDwydIQiaoRsFvEVBQDMoA6dmzKMdTRDA3KV6QEBfYCoKM%2BJ0z5jjRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613dca4db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117103,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64736), with no line terminators","md5":"49d9094dde2a56dff72e7b3c3960d20f","sha1":"6fb8337abc9a19095f04ebce808fd44d1f443d09","sha256":"47ad353211674fbd1e9661d73e790f073cc2381e8947f18cfd7e8bc5b6cd6a5a","sha512":"182dbaac59a59619085cf54fb297d65524f44d235fff853e6ae4f6bb3fb45e55f320ef6b362d84c18297a58ad638b4821a99974207e348c9a556799241daa715","ssdeep":"1536:ll+cci++GBzDGyzWuyep/0k5Ssc9oMp42:z+OGBw22","tlshash":"55b365245280cd1cad674aa9a1fabd34516ed3ddc257dd7ae26cc432030eabdda736c0","first_seen":"2026-04-14T13:58:12.873276Z","last_seen":"2026-04-14T17:20:41.364905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/bonuslar","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /bonuslar HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br, identity\r\nReferer: https://bonusrosem.com/\r\nRange: bytes=0-63\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nlink: \u003chttps://fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026amp;display=swap\u003e; rel=\"preload\"; as=style, \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q47xtNBiJli4y5Medwka%2BqKKUP%2FySBO7vQIupN%2Fzi9v%2FZey2vjShHaEOr3zQvpLXeUL9Hdn6H8syBDe0sraZ%2Bf0xvtTpVhHyNmn9jLwdSVJ6NlLZ8gJeQoC3BqWHkY%2F3GA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613cda10b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172447,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65310), with no line terminators","md5":"17c0e031df8a957ddc984f742201ef5b","sha1":"5a67ad2a572cbb6bb3301e06050ffd8327e29473","sha256":"e0db83643af1cd5fabe8a636c5a2e12e224d88d82060ecacd236b86a8ecc1507","sha512":"6418e9765ab4aaea3dc024a9ea4806a0d94de5770b90cea0b1d055682c777c709a4ed26291c7b6cabf4b21fe0ed8518e2b4d94c3fce708960eb74d66e68f1cba","ssdeep":"1536:N5yuIcDGyzWuyep/0k5Ssc98EForVEOzTprAl:apCFM","tlshash":"15f387285285dd2ca91707a8a2babd38916ad3ddc61bdd69e36cc133034ddb8de735c0","first_seen":"2026-04-14T13:58:12.896105Z","last_seen":"2026-04-14T17:20:41.365744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/favicon.ico","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3j%2BOciBWFvpAdQzghLoOrywYwA0LiQKy9hr21g8N8r8HWJsnAE3cM1bG8gQg32fIEcu%2By3Yv0ix2evfpfPL0pxklSCmddfGyT3oYV7Afs7J4DBvF2MwulaVjOT8KgLRFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613d3a1bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65193), with no line terminators","md5":"234450fd943ca3f84b1362d110dd1fef","sha1":"ff6d7d5f421bae3150ff7800832a62e40ed7f527","sha256":"085eb3a54ff41cdc2ac1b91be4d6152947795ed33289239e37aba1bac6a5e8eb","sha512":"cf54392499305dfcd0e4d9f9e828e57517d010edb1788ccf220156c752e44efe8a2ed761df2e834a6802844cfe7760ae5b07e52333218b238ef177f40882649c","ssdeep":"768:3gOEDl+4BueoxFRohd8Dzp0KcNelGfbpuXLYyVovnoffoKvjW7I0m3uVd8lHPK0N:6l+/DGyzWuyep/0k5Ssc9CTp4y","tlshash":"fd8322285280cd1c9d770a6961beec34516ed3edc657dd76e2acc522030eabddb63ac0","first_seen":"2026-04-14T13:58:12.818645Z","last_seen":"2026-04-14T17:20:41.336869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/bonuslar/__next._head.txt?_rsc=1pn8p","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /bonuslar/__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Em%2BEo7VfEJQxXIcsez8SPtBaUb4DtSneflp3NA3XkwHYS1uQQIzzvbe%2BXQtFmoAHamLdbXjAXtz8NnJ0FlL34PGTantyHm6mhKIsCZCRe2sED9xi6aceoiyuYbmSRi39Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ffc9da5245e74444da26c02cd44a2137\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613dea55b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2864,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2049)","md5":"3a583a3242442fef9fa239a3906b99e8","sha1":"b6700cea963196195fb263a0df2317bc32e5ae18","sha256":"c66dffbb0868c64aa74de764e9bba6bc212cb889b5e79edd2244107a61bb747e","sha512":"b7ccdc495cac29bab0963bd74ad843fa45240629638ca4db2910a8efcb1ae7421d802a1b4768d3948c00d4d8b97b077d8c05fdefd9108936d4112199feb5ccb2","ssdeep":"","tlshash":"62511e7fda02ec2e6b97498508cb660bb35d433bc6105c67d45ecd1a06c576b6e842b1","first_seen":"2026-04-14T13:58:12.850215Z","last_seen":"2026-04-14T17:20:41.366677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/hakkimizda/__next.hakkimizda.txt?_rsc=1j38e","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /hakkimizda/__next.hakkimizda.txt?_rsc=1j38e HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /hakkimizda\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SN2L64BDUnLRdPhz4ZZ3QNzO0XwFJMtvf8A%2Bk7nIG5KDPaEKU%2Be8VqwrzcIh1OMlh%2FmycjbL5HZ9PJnxbgWxp3G%2Bt87G2E%2FbYO%2Bst9DmiDDdr4Q25m%2F8mDRexa3Rxc09MA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b39d8c8ef082648948fd4326bf34ae96\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613e8aaab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f7f8e4fd092e43229044ff1757ec8b65","sha1":"9e64553dafdc9c2c962d18b03e5209cf7874359b","sha256":"a42ebe6c62ed32cc565d3edfa24096a5008ae99ae68f84370cdf96b30b4f5832","sha512":"f97eb908a23c70032395bba795c088ba5b9d78d3eca737e768034f3136a4061ef00db7b2a976f506bdfd167474fe13fcabd9e1bbee794144b2a853f651e42c8b","ssdeep":"","tlshash":"4fe02bb7d15aee1e3e368c4c0419935b514e983ba1352ab0d29ecd9c43905360bc9190","first_seen":"2026-04-14T13:58:12.821602Z","last_seen":"2026-04-14T17:20:41.340143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T17:20:11.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026amp;display=swap\u003e; rel=\"preload\"; as=style, \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fs2fJXml1hG8Z%2BdgpYI7dLjowTHO%2FaZEglE9jLTOqmsQur1kgxd72tCSh7Mi3VsnsKue%2Fw6G5KPsgOPGXHWHyXAhQfhFVNyVkxFEKzhWKkosKw2G4GDl1LOyVmdmiVhM8A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ec461399a4a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117103,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64736), with no line terminators","md5":"49d9094dde2a56dff72e7b3c3960d20f","sha1":"6fb8337abc9a19095f04ebce808fd44d1f443d09","sha256":"47ad353211674fbd1e9661d73e790f073cc2381e8947f18cfd7e8bc5b6cd6a5a","sha512":"182dbaac59a59619085cf54fb297d65524f44d235fff853e6ae4f6bb3fb45e55f320ef6b362d84c18297a58ad638b4821a99974207e348c9a556799241daa715","ssdeep":"1536:ll+cci++GBzDGyzWuyep/0k5Ssc9oMp42:z+OGBw22","tlshash":"55b365245280cd1cad674aa9a1fabd34516ed3ddc257dd7ae26cc432030eabdda736c0","first_seen":"2026-04-14T13:58:12.873276Z","last_seen":"2026-04-14T17:20:41.364905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/bonus-rehberi","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /bonus-rehberi HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br, identity\r\nReferer: https://bonusrosem.com/\r\nRange: bytes=0-63\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nlink: \u003chttps://fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026amp;display=swap\u003e; rel=\"preload\"; as=style, \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8qJ%2BZNNPOi9GkNmwMlM6TsMQ32f9%2FK%2BhnV%2FgxkdoW8CcIpwJFPDc3O9wq56qaEjLcgMHdpL9A4vWLbQc2Idlo%2FhiM0WKMINKgcRLuVv%2Fuvv%2B906YiSrZA0MZ4ztfGiv9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613dca4ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108058,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64986), with no line terminators","md5":"6dd64008be45abe3d99f6e062e230c71","sha1":"8274938cf954fe4f1389aedc906c6ff13ae7038f","sha256":"9a66fdc13b79e3d8346504eb2c882d0995f3439c7f048500fa8180fe450c1514","sha512":"2b59332bc278951492de47bbba587045071cb20ee32721c80feda6691c5861ecc95b2a927d7203d4c80efbb1c1b418fe2869c393725452d74a6744731e6f121d","ssdeep":"1536:IwY+m1YWV8FtFwvnvwcdDGyzWuyep/0k5Ssc9RCa5p+T:4f0ET","tlshash":"f2b344245240cd1c9d674aa9a1befd34516ed3edc617dd7ae2acc533030eabc9a636c0","first_seen":"2026-04-14T13:58:12.898286Z","last_seen":"2026-04-14T17:20:41.367524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/bonuslar/__next.bonuslar.__PAGE__.txt?_rsc=qvp1g","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /bonuslar/__next.bonuslar.__PAGE__.txt?_rsc=qvp1g HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /bonuslar/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FaZZ5AIThb0k8%2BlDzas8pmnSBvi9L27vIYBt4FV0iICnDqxNNAblWYdY8U%2FnARPmuZhvO%2Bs0k6tjJfwDaVaTlIhabWUFwICPZ4duzlERG7QzgJ70lMDAg9IEuPWCgzvNMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec4613e1a86b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65193), with no line terminators","md5":"234450fd943ca3f84b1362d110dd1fef","sha1":"ff6d7d5f421bae3150ff7800832a62e40ed7f527","sha256":"085eb3a54ff41cdc2ac1b91be4d6152947795ed33289239e37aba1bac6a5e8eb","sha512":"cf54392499305dfcd0e4d9f9e828e57517d010edb1788ccf220156c752e44efe8a2ed761df2e834a6802844cfe7760ae5b07e52333218b238ef177f40882649c","ssdeep":"768:3gOEDl+4BueoxFRohd8Dzp0KcNelGfbpuXLYyVovnoffoKvjW7I0m3uVd8lHPK0N:6l+/DGyzWuyep/0k5Ssc9CTp4y","tlshash":"fd8322285280cd1c9d770a6961beec34516ed3edc657dd76e2acc522030eabddb63ac0","first_seen":"2026-04-14T13:58:12.818645Z","last_seen":"2026-04-14T17:20:41.336869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/bonus-rehberi/__next.bonus-rehberi.txt?_rsc=1qf3y","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /bonus-rehberi/__next.bonus-rehberi.txt?_rsc=1qf3y HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /bonus-rehberi\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4rrrMTmofqBzNq1eFRka5%2B68XAAxEbuLfSNj0U5sq8ezHE%2BMLMYZsYGn%2F%2BoGZvWlz7G87shYoy1xfxZihAVnTecx5DYxmI%2B7%2BW6jEvZBGgqhu4LUm3qee6G2B0KyiSXUlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b39d8c8ef082648948fd4326bf34ae96\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613ebab1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f7f8e4fd092e43229044ff1757ec8b65","sha1":"9e64553dafdc9c2c962d18b03e5209cf7874359b","sha256":"a42ebe6c62ed32cc565d3edfa24096a5008ae99ae68f84370cdf96b30b4f5832","sha512":"f97eb908a23c70032395bba795c088ba5b9d78d3eca737e768034f3136a4061ef00db7b2a976f506bdfd167474fe13fcabd9e1bbee794144b2a853f651e42c8b","ssdeep":"","tlshash":"4fe02bb7d15aee1e3e368c4c0419935b514e983ba1352ab0d29ecd9c43905360bc9190","first_seen":"2026-04-14T13:58:12.821602Z","last_seen":"2026-04-14T17:20:41.340143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/__next._head.txt?_rsc=1pn8p","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4C3noau1SyXXaLeOBjPCljbBMF%2FaojzooLCNcD3n%2BwPIoTyFV%2FgA8DDliahEcvUuQCYlBDmbLnp%2BLVi2YSzZOqS3fuzTj0kCnPh5wUwaKNWmXt4x2IRXHRLDW%2FSAYtzq%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2e6293adc8db9035b9c5508ac5535bbe\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613edabfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2847,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2008)","md5":"40323938858c11b8220002ba1d16e733","sha1":"7c25f3288e452f60d7fe6c91f05435eab1d621bf","sha256":"f30f3650dc5090f0fe3c9ee25cae2326ac91911b50f4916c2c2504deecbefe55","sha512":"342f9ebf6178b3fe7e2b853659f43e5b3860beade7b696fb1c6395d6d93d53926d355d0b7f46940c1d487197c2b175fe34322cb42a8279688d958645c021d96e","ssdeep":"","tlshash":"96510e7fea06ec2e6753598408cb760b734d033bd6149c6ba85ecd1e0ac572b7e842b1","first_seen":"2026-04-14T13:58:12.894006Z","last_seen":"2026-04-14T17:20:41.368388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/__next.__PAGE__.txt?_rsc=ivliq","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /__next.__PAGE__.txt?_rsc=ivliq HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: text/plain; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W4B23r9hUVZNPEqeOWCydz4c5p7us%2FW%2BPH91APUxxiSEWmM99qBnVNo7Hu4eYbxlPBFl3rfravrlwKeHInCZ9hciKPgqnkAj96nSigX4nyKCaJCr4ENaQUBc0M%2BI%2BliPhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d0b354dcd224e190bae2df5d6858f4a9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ec4613eeacab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2924)","md5":"775d3341b5acff0a819b272133ed2424","sha1":"e023c9d629768fc2fb68774d662de83697635074","sha256":"3aa32ed27d66d137d912ea37dc3957a5ca478a6a1a04479f6a2c0e68d01e3468","sha512":"a1db20e9187fb1ba31192fe47ce8b5d3b8c7038b83ea624fee4a1145bdb4ca84b409b90b1e730a53069cdb023113a236b639d897a4abc8299dfc7f70688a0a7b","ssdeep":"","tlshash":"936153e3dd00dc0d86535cce1af76d3aa217ca2a40b5dcedad8adc1722940f99ad1348","first_seen":"2026-04-14T13:58:12.901218Z","last_seen":"2026-04-14T17:20:41.369519Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/88ba645f54b22220.css","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /_next/static/chunks/88ba645f54b22220.css HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: W/\"07aa08925c212e6cc8bed081c31699e8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b16I71ZG4Y%2Bve5Nzw4l5u%2BrX2D6d81t1oeRPKrTZHB1ZwL%2F8K1dugCcYsFqTJIfPyxZdh%2F8S92nMGTsGE8bHu25NCEpyNe3pg2Es%2FXzEMakhjtrRKBbkbNFOglurEuJAEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncf-ray: 9ec4613b09c5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142881,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"29d0a050a0341eda576447dc72e15ed9","sha1":"8c8072b8c05a3aeb300fd6df1e4a7a3a958918d3","sha256":"61d71b12f73e979038e5c92df809e210eebde339fd84c2240cbad25b508abf53","sha512":"798f994c6019b4ec9e64f344152eee6317c7e3ebc511579891d2fa6cb0c618c4e8c9324975f74f0112ec6d57bee8ee35c7a81120821a7f8b27b9203f7f834be4","ssdeep":"1536:C5hm2E1NE4tAy4UKrfAL0Mno+WDAmFABVK9zcvK3eA6JF988R988q:WhmLa4Sy4UKrfAYMno+WDAmFAPGzjH","tlshash":"fcd3c390b139e53fbc37b4f9938cf88c9109b090dd6946edfa15a22257c3bf66876508","first_seen":"2026-04-14T13:58:12.875704Z","last_seen":"2026-04-14T17:20:41.37033Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bonusrosem.com/_next/static/chunks/e97bb96cb3c593c6.js","fqdn":"bonusrosem.com","domain":"bonusrosem.com","tld":"com"},"ip":{"addr":"104.21.94.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bonusrosem.com/","date":"2026-04-14T17:20:12.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bonusrosem.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 03:58:17 GMT","end":"Sun, 12 Jul 2026 04:58:14 GMT"},"fingerprint":{"sha1":"E6:AF:F6:D0:59:33:19:4D:2E:AF:96:C7:2B:5E:1F:10:27:2A:A0:AB","sha256":"F8:3A:E4:B0:8F:BB:22:53:B5:C7:7D:A0:5D:17:39:B9:29:B2:29:C3:80:00:6C:8F:89:98:8F:73:13:0C:03:29"}}},"request":{"raw":"GET /_next/static/chunks/e97bb96cb3c593c6.js HTTP/1.1\r\nHost: bonusrosem.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bonusrosem.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 17:20:12 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"bacafe8224c4d4d4c2b969af17620eec\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejKoC%2BWLM7s1QRyM3kuH5O8P7mgNPCD4gVKsxTJZdV8RVceF3HIpLZPsD3rUkEwSPpIiW0ca0Z83Q4Rgmx0NwphUja08jRwNJpwq5%2F4cgQpS61vyy8n7KQMjFGLVN5Ygcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec4613b09c6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17778,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17778), with no line terminators","md5":"8bb320829dd83763cc7c53a529f283c6","sha1":"e7d922983295ebac8ef3eff1b4bb1a4bac2f6915","sha256":"717c2a46a3e2c1061841fef02f92b3665619f1e8b7e15c528dcdd90738f2e9f7","sha512":"51a2c072dc1d068140a41bdf5b67c677162cd72538438aa31f7c7f8dced1b788687635e20146e5ed4f6b1a687b41c6017899cba3238c1d1da145d3ff7943de57","ssdeep":"192:TUQB9k84OONbcjEhPk2ktHAwiKiEXKwCTi5Lm1FZMeiXQ62hUNjVprO:T27vBKT2k8RwFCsm1FZJity","tlshash":"6e82c4ad7195f4911fa364a5803f500bb23929b6286dd0b0e3a2dcf5b8f415ed233f5a","first_seen":"2026-01-06T07:07:24.458831Z","last_seen":"2026-07-28T14:47:09.566919Z","times_seen":10,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"bonusrosem.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}