{"report_id":"6c760761-bd24-4361-9afb-159bad258ba3","version":0,"status":"done","tags":[],"date":"2026-07-04T12:10:09Z","url":{"schema":"http","addr":"betyeni2.com","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"betyeni2.com/","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"title":"En Güvenilir Bahis Siteleri | Bet Yeni","dom":{"size":53974,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2998)","md5":"57b88db125e182af24661f543faaf052","sha1":"c04f4c73efeba80e497afc2fa85dae80f0770d7a","sha256":"bd3113dc3c6337ace2c793a93bec26cf65b7c652a01e6cb0fdb097474dee9763","sha512":"c6c120e644c2cfcb3eb7ee31ca81abd3170e616576df404223eb282f60a1af071b62cf99283217cc117e552605b770bef40489de730961897bcf3d54dbd67a2c","ssdeep":"384:z0rwvf54A22gmUZhjEB4kMiGPAPnTdHBMIgUbJL4YYMc1NqITVJahBODagrGhzHG:y2J+PXi9phEZagrGhzHNI","tlshash":"623341f3d0f2693b0763d1c352679b6bbad29447c8525215b3ee07d12fa9e82b62310d","dom_hash":"domhashe1c3aa8246cb9b8f25949c267e13fb6d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"betyeni2.com","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":0,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-08T12:10:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"statz.aatoolz.one","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-05-14T18:21:35.841489Z","last_seen":"2026-06-19T13:29:35.973583Z","alert_count":0,"request_count":2,"received_data":1100,"sent_data":1191,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":11894,"sent_data":592,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nostatz.vip","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-07-04T12:10:09.883563Z","last_seen":"2026-07-04T12:10:09.883563Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":624,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"betyeni2.com","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-03","domain_rank":0,"first_seen":"2026-07-04T12:10:09.884141Z","last_seen":"2026-07-04T12:10:09.884141Z","alert_count":36,"request_count":12,"received_data":159983,"sent_data":6651,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":8,"received_data":247972,"sent_data":4537,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"statz.aatoolz.one/track.php?t=7f00498573f3faab7fc0c3d47e7ae12c","fqdn":"statz.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"07162336cdeaeb3dfc89074346269ca0","sha1":"b7e3a6d2ee1a218db7985dc39c45b0ae5bff57c3","sha256":"bd207d3d054d0b867179be20e12603f9b4b74573896c87d6e3130692e03666e2","sha512":"9fd30a5ed93507d2e963bcc8d39f54d579e684203ffde243757b2837eb3212559f30670741bff7674c5005c5a08732b4219a8214d1c0c64f0b2cb4ff1fe0d946","ssdeep":"","tlshash":"fcf0c078456390a1a723609b326fa70828b780133f0ad480344c54900f66b251266bfa","size":583,"data":"","first_seen":"2026-07-04T12:10:15.001883Z","last_seen":"2026-07-05T12:29:37.068042Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"52df87cca6951c6849e5c4129c71418f","sha1":"c2a4cead7d689b3e50b68942b624249471bbf1a3","sha256":"bd644d54c9296c74145ff6127ee6f810d7ab395dcb25fff663d5bda01a69bca6","sha512":"52d8bb71a7584daff73110202859976eb6499ef85b24bab99d99cbf4393988995eb7f96449ccd955d5296a1a5905677983736c273a7ffc60ae37c84489cfe4d3","ssdeep":"","tlshash":"a4e06862e01019400d4f9c54932e368dd4e946877ced08400939a2c1c32ce6e8e1b1b4","size":375,"data":"","first_seen":"2026-07-04T12:10:15.008907Z","last_seen":"2026-07-05T12:29:37.070752Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"91b3cec5df6e9dbecf701a5a735a2e21","sha1":"206e82c6fe1a32df35b4fce52dfbd92678337fd1","sha256":"e4e4a8d4d8de7987f731b64ea5781ca52183b8e325d5f7f786f35de54aed5de5","sha512":"72571dfdeff1f500df362859f52aa39bf9ce7287b65433a2b981e4eb609a029499d492a84b9959bbe06cc3027897e633e1f03c20ed0ec748b76a05c4d31512f0","ssdeep":"","tlshash":"3841632faebd213d14f70a6ab78b7940762610474509c820797dec814f78e4258fe6db","size":2023,"data":"","first_seen":"2026-07-04T12:10:15.010071Z","last_seen":"2026-07-05T12:29:37.072062Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9f350760dbebfa23d39451b11f90e18","sha1":"862e178fb7d79ba67d89004265bf790e05537145","sha256":"1c8363313b9e6d1d81356617cf329d559e2096c9f80b09577f8ee65f5c57f4fa","sha512":"9af8d0d188894a1582b78fff8fa13d1be0938f8c321a1d9ae5e0071e2d8539df18e13c0c295ab4c737e41ffb144a25a9e7b9bba5f828865f58c59d1dd0f6a0c3","ssdeep":"","tlshash":"c101491ff6602d390cf7ba9b11dfabe439210041894bd9201abcd8850b19ec128bfed9","size":772,"data":"","first_seen":"2026-07-04T12:10:15.011697Z","last_seen":"2026-07-05T12:29:37.073022Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"betyeni2.com/","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-04T12:09:45.246Z","timestamp":1783166985246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0; path=/\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 7107\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 04 Jul 2026 12:09:45 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":54024,"size_decoded":7472,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3000), with CRLF, LF line terminators","md5":"6f1ca15b6d89552cb4f7a21a03e5a52f","sha1":"ded7b33eb49a34beb3fd9728e725b581a6912983","sha256":"3bd1eabbf4365095abf509b22c28ef94002b7903f0396c4823b0b6adfa1ed42f","sha512":"6c99952a5582fc07b0d7864be3407ab95b3918e69506f8570abfa4a7800810dfbbb8ddcbc3ad65122b67c659c8829e88ce20760cf2db78e733a16057c8250ecc","ssdeep":"384:Kx0vf14A22gmUZhjEB4kMiGPAPnTdHBMIgUbJL4YYMc1NqITVJahBODagKhzHNo:4S1+PXi9phEZagKhzHNo","tlshash":"653342f3d0f2653b0763d1c352679b6bbad29847c8525215b3ee07d12fa9e82b62310d","first_seen":"2026-07-04T12:10:14.977593Z","last_seen":"2026-07-05T12:29:37.059112Z","times_seen":3,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":65,"connect":19,"send":0,"wait":34,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/assets/style.css?v=5","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.035Z","timestamp":1783166986035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /assets/style.css?v=5 HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:08:33 GMT\r\netag: \"4771-655b3c8979353-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4809\r\ncontent-type: text/css\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18289,"size_decoded":5091,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (307)","md5":"703dcfa79d7a9c330524e70cd99fa686","sha1":"dccb3e270caaeca3b8c0f67ed13fc7ee3b1594a0","sha256":"038218cce8a3fa172b6f715d7ee8c5ab1b6ae0a6cb62ab9292f14b0d701789c6","sha512":"d8e1791ca0fdb142f3473a88b7285cc2c634ae2003ed3711c99e449d9c3ad448fd863baa6e83474be8e4ea818223e1ada7895ae87123fac3a4f243585290eebb","ssdeep":"192:gDkKf/96mmc9zH3XBnAxfljPkfBX0pEpWyN2Vxok6umnkwtO13Tl1LbukxbdN+E6:E/BAfjPkJX0GW9H+nIT3DdNT6","tlshash":"fe8272e1a561b138b537e8a2bbc0678f7104e403d8b747e9e992e169c6c36f717a0349","first_seen":"2026-07-04T12:10:14.979121Z","last_seen":"2026-07-05T12:29:37.067443Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fraunces/v38/6NU78FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0KxC9TeA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.441Z","timestamp":1783166986441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/fraunces/v38/6NU78FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0KxC9TeA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betyeni2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 67304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 07:10:16 GMT\r\nexpires: Fri, 02 Jul 2027 07:10:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 190770\r\nlast-modified: Tue, 09 Sep 2025 18:43:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":67304,"size_decoded":68117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 67304, version 1.0","md5":"069cb90e11a337bf264eadfb15ad00f5","sha1":"48642176d960affe01a1a57fc8179e05c618793d","sha256":"7234ed860a9cc83045413c4faee63c960a8f2d1917adcf728119307d56e0d783","sha512":"1c076a1b528a83e283f57d408c8e4f0a629b8daa47e8e10e2607fa26e346b7ea5ad1d237f815be91b553adfe644227877cb4693d1db9568028b6c2c68ed3f1d2","ssdeep":"1536:suAREpsv3Xf8UR8UX2S6teGGD7BhviSVDQ2AV4QnsKBn3Fa9dT1G5w6:GdPXzeUX2S60GGD36uOZFATM","tlshash":"d663020d07b99b3c436f5c9319b2ede92e2ea41b2486f045feb7b891e4405c591bcc97","first_seen":"2025-01-24T12:50:21.10871Z","last_seen":"2026-07-13T10:55:58.539394Z","times_seen":2878,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":47,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/uploads/betlogos/bahigo.png","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.469Z","timestamp":1783166986469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /uploads/betlogos/bahigo.png HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:08:49 GMT\r\netag: \"321a-655b3c9942f95\"\r\naccept-ranges: bytes\r\ncontent-length: 12826\r\ncontent-type: image/png\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12826,"size_decoded":13058,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"cca2ecb5c7e1ce5eeec35ca7673142d2","sha1":"f3742836e4db14f09f5c4208ba20c7e02beb8503","sha256":"09f0d87a00b28d344bb8c9e726c34a8bca3fbf90a1b572d243618aa86269952e","sha512":"a5bc8921973b65ed6891d8e2c472d13ac527c61682739acef748598a33f15f0ad4ed87ffc141819b279c9b706700dc82348890ca7c5fa21a26d6c1f7a10d2469","ssdeep":"192:HEXT/ITbIxPp3omWH6mZqTNiAoZaC2/kmvyT9x9GdcbrVUDvvvb4:Hk/KIxF+bONihUC2/rvyT9x9GOf+DvvM","tlshash":"6442d1cf4e478c9e0c76c82a096788b169a3821c53b44d8ff512d69c253b31fabd4e5e","first_seen":"2026-05-29T12:25:45.832996Z","last_seen":"2026-07-05T12:29:37.061608Z","times_seen":6,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/uploads/betlogos/discount-casino.png","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.471Z","timestamp":1783166986471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /uploads/betlogos/discount-casino.png HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:09:44 GMT\r\netag: \"3c50-655b3ccd453e1\"\r\naccept-ranges: bytes\r\ncontent-length: 15440\r\ncontent-type: image/png\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15440,"size_decoded":15672,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"6705b26c54da67de9ea17a61aed7c066","sha1":"bf3229a7a741484afd1d3beba4358ab8ca577091","sha256":"0e0ae5faa7dcfc924b567ae8b760ceb2729ddd4cb66005fa734af5a080ed18b4","sha512":"d1ec57f41358903d2338cdee4940724f3dfd8b6d28eb0d8d23a62da674b36ba2001a792034e8942f6c659375e0f438168e5ba3ef83ee016fba9c67de24495a93","ssdeep":"384:l3dbYe2y5/jc4lkEQexdF3UEPT0bQTJEWF:f2MjcuBxdWEsSeE","tlshash":"a062d0f948719ca52c49afc8592e86dad82acfe34bfca551e404cedd027d883c53b459","first_seen":"2026-05-29T12:25:45.809221Z","last_seen":"2026-07-05T12:29:37.069794Z","times_seen":9,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statz.aatoolz.one/track.php?t=7f00498573f3faab7fc0c3d47e7ae12c\u0026collect=1\u0026u=https%3A%2F%2Fbetyeni2.com%2F\u0026ti=En%20G%C3%BCvenilir%20Bahis%20Siteleri%20%7C%20Bet%20Yeni\u0026r=\u0026sw=1280\u0026sh=1024\u0026l=en-US","fqdn":"statz.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.478Z","timestamp":1783166986478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statz.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:40:42 GMT","end":"Wed, 30 Sep 2026 15:40:41 GMT"},"fingerprint":{"sha1":"47:13:73:08:6A:67:8A:DC:09:4C:53:D2:6C:78:84:B6:A0:59:9F:5B","sha256":"7F:55:01:9D:48:69:D9:EE:D8:7C:03:29:B3:CC:88:08:8F:7D:EF:AF:F4:49:25:52:86:83:B2:0B:93:ED:EE:61"}}},"request":{"raw":"GET /track.php?t=7f00498573f3faab7fc0c3d47e7ae12c\u0026collect=1\u0026u=https%3A%2F%2Fbetyeni2.com%2F\u0026ti=En%20G%C3%BCvenilir%20Bahis%20Siteleri%20%7C%20Bet%20Yeni\u0026r=\u0026sw=1280\u0026sh=1024\u0026l=en-US HTTP/1.1\r\nHost: statz.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":239,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-13T10:17:33.997624Z","times_seen":985180,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/assets/images/apple-touch-icon-180x180.png","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.756Z","timestamp":1783166986756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /assets/images/apple-touch-icon-180x180.png HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:08:34 GMT\r\netag: \"4a4-655b3c8b34d03\"\r\naccept-ranges: bytes\r\ncontent-length: 1188\r\ncontent-type: image/png\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1188,"size_decoded":1418,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"20464e8392779015a0a3d3a29803c5eb","sha1":"62fae180107b8561c3ce17f42808ca41a0588886","sha256":"3b2e54a811ad16ad9603dce82e31e873f8bcd332e2eac0e8181af6d57fa675c2","sha512":"a844c16bd399c6ad4b673957ec2e2946f2a51ae2072ff57f2d9ed2ea75620ec249138db2c2156a1421ba768f63a2e3b72af611715b0dca22dd9be6224d89a762","ssdeep":"","tlshash":"a621a79316b340dc949f164308be69e0f5402dfb8e04835fb82d04309d5790b71e1ac2","first_seen":"2026-07-04T12:10:14.989326Z","last_seen":"2026-07-05T12:29:37.062657Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/assets/images/favicon.svg","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.758Z","timestamp":1783166986758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /assets/images/favicon.svg HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:08:36 GMT\r\netag: \"174-655b3c8ce4f1b\"\r\naccept-ranges: bytes\r\ncontent-length: 372\r\ncontent-type: image/svg+xml\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":372,"size_decoded":605,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c549b19fa4f424956d426f8ece736750","sha1":"17da435080a5313bf03e4983c6076c2173848947","sha256":"f28327b9ff907592787992aa23f529ee80ce56e1d99128361f5daf129cdd0055","sha512":"8c0c8e213d7af43299716e8d1078abd764c1018a4b101879329596b754aeeb96be3bdd9746da919cdd53c3b214c4d7221137f4426ffb79e49a905e699d6e09a3","ssdeep":"","tlshash":"5fe048d872ec64145e3847746b3ffcc9935271c7805014c5f4c5a8a725196ca5897917","first_seen":"2026-07-04T12:10:14.990656Z","last_seen":"2026-07-05T12:29:37.065441Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800\u0026family=Fraunces:opsz,wght@9..144,500;9..144,600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.032Z","timestamp":1783166986032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800\u0026family=Fraunces:opsz,wght@9..144,500;9..144,600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 04 Jul 2026 12:09:46 GMT\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11210,"size_decoded":1454,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1513e6de3c1ed9f52d137da8b270debe","sha1":"f0c3f67edf2be6b91ed53c3211d6a8e519ae2f61","sha256":"5e40ab34dd8be272533e3e53d3bd9adafa23d2b7dfb514a203905bb529e0725f","sha512":"b4c90b1fcaa26e3cd51f8b239c7e02eed246042507ed0f665122a8440cad4bc4091b89885180260843876693c576f0f447021c66d1c708cd36876a3afa699fa4","ssdeep":"192:c6M6ME7MwXMXMEeM0CFJRSdCmaRBUCj3Ro7CcQRvSC5VRed:cEwdrF/0","tlshash":"8f32e3a0082fa500eb831cc763cf3d369e9e6192605584b99ffd1858ec6ec2a7375b1d","first_seen":"2026-07-04T12:10:14.9924Z","last_seen":"2026-07-05T12:29:37.066501Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/assets/images/logo.png","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.045Z","timestamp":1783166986045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:08:37 GMT\r\netag: \"2496-655b3c8d392c4\"\r\naccept-ranges: bytes\r\ncontent-length: 9366\r\ncontent-type: image/png\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9366,"size_decoded":9597,"mime_type":"image/png","magic":"PNG image data, 165 x 45, 8-bit/color RGBA, non-interlaced","md5":"48b68b4553ce904305184e4c3d188d9f","sha1":"81086bde52a7bd03a19cce86e61dfb9e5ff45f81","sha256":"83933c410243fc59112c18b186d3025bbae465d18f6211056783aae1f16e17c7","sha512":"63f14347f28dc6d7aeece1f11f42a56ef07d86b1408ad835b40e1518165bea23ed49d911ba046d14fe24f4a021d09bd4bfdb3eb2475a4c5433c0f8ff501665bf","ssdeep":"192:plkEu03gJVbg9FKFJ0gCHNvqCllarurUUYUo+5hSz7PQz5tc:/kI3awF60r/iurUUjJNrc","tlshash":"9c12aef521395cabb10c96922b98db4d7853cf8ac0af2156700909c425cd96be9f9fb8","first_seen":"2026-07-04T12:10:14.995496Z","last_seen":"2026-07-05T12:29:37.068923Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/uploads/betlogos/betroad.png","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.462Z","timestamp":1783166986462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /uploads/betlogos/betroad.png HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:09:16 GMT\r\netag: \"1f79-655b3cb2616c3\"\r\naccept-ranges: bytes\r\ncontent-length: 8057\r\ncontent-type: image/png\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8057,"size_decoded":8288,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"c871d98fbf2a0ae13a6b037b7fbccbef","sha1":"39dec7f798ae403c6e173db53ef09fdebebaf28b","sha256":"d707ca4ab60efbf90ed9980b6c0685cb604434dab02266b1f81fe1ccb530a68c","sha512":"84d8def6ea8cd08d4fa0488f75c33622145ba9bceb40ff63098bd8e5360ba14cb556ade48f183d9a27539bc6232c449d5f950bdbf384e0fc16b9ff1f0ee42004","ssdeep":"192:AS+LXbSif5QypSVr6+uVL5jzIYWe2F3hU5mKtS9KDXIuf:AxZP1zIdrhU5hLXzf","tlshash":"13f1b0f2f69826f2738c7b4fab032a745284151e81bafd99d49347ad30588e1ad90993","first_seen":"2026-05-29T12:25:45.793385Z","last_seen":"2026-07-05T12:29:37.057939Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nostatz.vip/track.php?t=bb63b7f0cc527c55de04\u0026u=%2F\u0026ti=En%20G%C3%BCvenilir%20Bahis%20Siteleri%20%7C%20Bet%20Yeni\u0026r=","fqdn":"nostatz.vip","domain":"nostatz.vip","tld":"vip"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.472Z","timestamp":1783166986472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nostatz.vip","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:45:55 GMT","end":"Thu, 01 Oct 2026 14:45:54 GMT"},"fingerprint":{"sha1":"56:E4:A6:D7:B9:76:07:E0:B3:50:BC:E3:02:15:B2:82:7D:DF:FB:41","sha256":"2D:48:14:09:1D:10:BE:C9:16:B6:6F:97:74:FB:35:22:85:6E:ED:6D:86:AA:AC:F6:85:29:C9:B5:FD:17:36:EB"}}},"request":{"raw":"GET /track.php?t=bb63b7f0cc527c55de04\u0026u=%2F\u0026ti=En%20G%C3%BCvenilir%20Bahis%20Siteleri%20%7C%20Bet%20Yeni\u0026r= HTTP/1.1\r\nHost: nostatz.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncontent-type: image/gif\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":268,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-13T10:17:33.997624Z","times_seen":985180,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":124,"connect":19,"send":0,"wait":21,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.435Z","timestamp":1783166986435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betyeni2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 07:19:31 GMT\r\nexpires: Fri, 02 Jul 2027 07:19:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 190215\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-13T10:16:54.152152Z","times_seen":16650,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":55,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.443Z","timestamp":1783166986443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betyeni2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 01 Jul 2026 21:34:40 GMT\r\nexpires: Thu, 01 Jul 2027 21:34:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 225306\r\nlast-modified: Tue, 09 Sep 2025 18:29:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21740,"size_decoded":22553,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21740, version 1.0","md5":"feb32a783dde93d92ecd80e2e5ee2fd6","sha1":"6a77846330b45303ba88cc52db486332eb10a1b4","sha256":"afb7198c978dc6146a16f600df962a51d0b607334332929d4d123749c27586ff","sha512":"0a03f0d4f725df8de1d5a383a0f364b8636005edae784b0decb583e1150740e1e338569e8d5a8b2c8021665c529d3ca522c6178a835533b7342b056fb3dc0543","ssdeep":"384:+IC0yB1UD32kqUXqzZ7v/+XA/eK0AQaHjZipRYBpcsTjtVIVEElBs:+b0+WDmkdXqt/iYAC0RgcccVlBs","tlshash":"c1a2e170cece390ee329716e02568a78e6878ce94a053d20949d9d390fdaf3497c5df4","first_seen":"2025-09-10T18:57:50.481843Z","last_seen":"2026-07-13T08:16:52.315102Z","times_seen":874,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":34,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.447Z","timestamp":1783166986447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betyeni2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 07:19:31 GMT\r\nexpires: Fri, 02 Jul 2027 07:19:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 190215\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-13T10:16:54.152152Z","times_seen":16650,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":56,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/uploads/betlogos/bets10.png","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.466Z","timestamp":1783166986466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /uploads/betlogos/bets10.png HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:09:16 GMT\r\netag: \"2715-655b3cb3495b7\"\r\naccept-ranges: bytes\r\ncontent-length: 10005\r\ncontent-type: image/png\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10005,"size_decoded":10237,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"b05634b9fc15303658899f268242c193","sha1":"3ab44488920201741cb348e3faeb964b536e9992","sha256":"8650acd9f6a8e006b1457ebba73a7a999a87973a9c7ecb6e9581d325e5e23509","sha512":"a3f37638a2153987464cf395b8e6be74beb338ed1a63f4e43e1d443cda9987b13b476b36fcb70825d856215c1cdf9d52e2470686646a1b25ba93e683ff1030de","ssdeep":"192:zfjDkpniEoW8F0hz2sdvKlKDbsi1m0ibKi0ARGL14i9:zfMhiEoWvkGSlKDbdj6N0AG4A","tlshash":"2c22b07990acf866d2f215b2647832c435348c8aca7bd0e2fa1e5c9e4b1ed94fde1103","first_seen":"2026-05-29T12:25:45.833893Z","last_seen":"2026-07-05T12:29:37.058703Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"statz.aatoolz.one/track.php?t=7f00498573f3faab7fc0c3d47e7ae12c","fqdn":"statz.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.037Z","timestamp":1783166986037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statz.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:40:42 GMT","end":"Wed, 30 Sep 2026 15:40:41 GMT"},"fingerprint":{"sha1":"47:13:73:08:6A:67:8A:DC:09:4C:53:D2:6C:78:84:B6:A0:59:9F:5B","sha256":"7F:55:01:9D:48:69:D9:EE:D8:7C:03:29:B3:CC:88:08:8F:7D:EF:AF:F4:49:25:52:86:83:B2:0B:93:ED:EE:61"}}},"request":{"raw":"GET /track.php?t=7f00498573f3faab7fc0c3d47e7ae12c HTTP/1.1\r\nHost: statz.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 331\r\ncontent-type: application/javascript\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":583,"size_decoded":609,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"07162336cdeaeb3dfc89074346269ca0","sha1":"b7e3a6d2ee1a218db7985dc39c45b0ae5bff57c3","sha256":"bd207d3d054d0b867179be20e12603f9b4b74573896c87d6e3130692e03666e2","sha512":"9fd30a5ed93507d2e963bcc8d39f54d579e684203ffde243757b2837eb3212559f30670741bff7674c5005c5a08732b4219a8214d1c0c64f0b2cb4ff1fe0d946","ssdeep":"","tlshash":"fcf0c078456390a1a723609b326fa70828b780133f0ad480344c54900f66b251266bfa","first_seen":"2026-07-04T12:10:15.001883Z","last_seen":"2026-07-05T12:29:37.068042Z","times_seen":3,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":96,"connect":21,"send":0,"wait":20,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.433Z","timestamp":1783166986433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betyeni2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 07:19:31 GMT\r\nexpires: Fri, 02 Jul 2027 07:19:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 190215\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-13T10:16:54.152152Z","times_seen":16650,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":40,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.437Z","timestamp":1783166986437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betyeni2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 07:19:31 GMT\r\nexpires: Fri, 02 Jul 2027 07:19:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 190215\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-07-13T10:16:54.152152Z","times_seen":16650,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":51,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.438Z","timestamp":1783166986438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betyeni2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 01 Jul 2026 21:34:40 GMT\r\nexpires: Thu, 01 Jul 2027 21:34:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 225306\r\nlast-modified: Tue, 09 Sep 2025 18:29:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21740,"size_decoded":22553,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21740, version 1.0","md5":"feb32a783dde93d92ecd80e2e5ee2fd6","sha1":"6a77846330b45303ba88cc52db486332eb10a1b4","sha256":"afb7198c978dc6146a16f600df962a51d0b607334332929d4d123749c27586ff","sha512":"0a03f0d4f725df8de1d5a383a0f364b8636005edae784b0decb583e1150740e1e338569e8d5a8b2c8021665c529d3ca522c6178a835533b7342b056fb3dc0543","ssdeep":"384:+IC0yB1UD32kqUXqzZ7v/+XA/eK0AQaHjZipRYBpcsTjtVIVEElBs:+b0+WDmkdXqt/iYAC0RgcccVlBs","tlshash":"c1a2e170cece390ee329716e02568a78e6878ce94a053d20949d9d390fdaf3497c5df4","first_seen":"2025-09-10T18:57:50.481843Z","last_seen":"2026-07-13T08:16:52.315102Z","times_seen":874,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.445Z","timestamp":1783166986445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko40yyghfvaZ-EHYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://betyeni2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21740\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 01 Jul 2026 21:34:40 GMT\r\nexpires: Thu, 01 Jul 2027 21:34:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 225306\r\nlast-modified: Tue, 09 Sep 2025 18:29:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21740,"size_decoded":22553,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21740, version 1.0","md5":"feb32a783dde93d92ecd80e2e5ee2fd6","sha1":"6a77846330b45303ba88cc52db486332eb10a1b4","sha256":"afb7198c978dc6146a16f600df962a51d0b607334332929d4d123749c27586ff","sha512":"0a03f0d4f725df8de1d5a383a0f364b8636005edae784b0decb583e1150740e1e338569e8d5a8b2c8021665c529d3ca522c6178a835533b7342b056fb3dc0543","ssdeep":"384:+IC0yB1UD32kqUXqzZ7v/+XA/eK0AQaHjZipRYBpcsTjtVIVEElBs:+b0+WDmkdXqt/iYAC0RgcccVlBs","tlshash":"c1a2e170cece390ee329716e02568a78e6878ce94a053d20949d9d390fdaf3497c5df4","first_seen":"2025-09-10T18:57:50.481843Z","last_seen":"2026-07-13T08:16:52.315102Z","times_seen":874,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/uploads/betlogos/jetbet.png","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.460Z","timestamp":1783166986460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /uploads/betlogos/jetbet.png HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:10:17 GMT\r\netag: \"11fd-655b3cecb3aa5\"\r\naccept-ranges: bytes\r\ncontent-length: 4605\r\ncontent-type: image/png\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4605,"size_decoded":4836,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"98d3da9c87837586d8ad7e28a1af6921","sha1":"80d56a51ba537f2300cbfc9e3355c8bc79b084f8","sha256":"1738eeee8ad407280d4decaca77d3373a16f7dc579234012090850c6ce213e19","sha512":"b405b2051bf9fb0e2673a0ee2d72122d9634add0e362824e3733fcfcebbbdd0457a4a3dd5883588416466d270b87a7afa2e55c2836cb95f57ade62ecb5ac3c1e","ssdeep":"96:UNHRr2s2EIubYrRbR8bbH0BkCJ7rAc5y+1t4FZxFmEg:ORrGuMrtsbH0B8at4FZxkF","tlshash":"38917d5293e4d4744760760b46f1ae8454ee81384a2a02840efdc348f7607fc28a46ba","first_seen":"2026-05-29T12:25:45.794594Z","last_seen":"2026-07-05T12:29:37.059678Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/uploads/betlogos/wettigo.png","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.464Z","timestamp":1783166986464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /uploads/betlogos/wettigo.png HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:11:40 GMT\r\netag: \"3e5b-655b3d3c5a234\"\r\naccept-ranges: bytes\r\ncontent-length: 15963\r\ncontent-type: image/png\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15963,"size_decoded":16195,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"f1addcb63abc2a0ab136d60d47d6b3bc","sha1":"add7c92b5020a1e64cea79a51546e8b8656e6d6e","sha256":"551beea007aed769372b72918be5a72594f6c467c9765dd84fe83b066f48b26f","sha512":"751d11f8b02bcfb29e098d7282c55e45e3005c2e0d2b27be4b5284b5d2e6f5ccec12022aa08feb03fefe8a718a9b3367a33ecac544f3c68db03560f1ce8a0376","ssdeep":"384:RsPDbZT2Fomlk2JrqadOn/b9pjZNYzq4GXs1:+bQJU/1svr","tlshash":"2662cf7e948c9f8a33a87c4153ebd9a1fb89561a93bcdf306dc3909d09c52160315edb","first_seen":"2026-05-29T12:25:45.776501Z","last_seen":"2026-07-05T12:29:37.061089Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betyeni2.com/uploads/betlogos/betwinner.png","fqdn":"betyeni2.com","domain":"betyeni2.com","tld":"com"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://betyeni2.com/","date":"2026-07-04T12:09:46.468Z","timestamp":1783166986468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betyeni2.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 01:21:22 GMT","end":"Thu, 01 Oct 2026 01:21:21 GMT"},"fingerprint":{"sha1":"10:E6:E4:88:4C:F6:E7:9E:52:19:26:1A:38:A4:8B:28:A5:9B:E8:74","sha256":"F4:98:0E:CC:60:1C:32:E3:DE:B2:12:8D:98:CD:8F:E4:20:BF:D5:C2:C1:57:E6:43:78:E6:C3:BA:74:F4:25:40"}}},"request":{"raw":"GET /uploads/betlogos/betwinner.png HTTP/1.1\r\nHost: betyeni2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://betyeni2.com/\r\nCookie: PHPSESSID=baf7tftejhpcdqn388p02r5dq0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 03 Jul 2026 12:09:19 GMT\r\netag: \"1ae6-655b3cb60d9cc\"\r\naccept-ranges: bytes\r\ncontent-length: 6886\r\ncontent-type: image/png\r\ndate: Sat, 04 Jul 2026 12:09:46 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6886,"size_decoded":7117,"mime_type":"image/png","magic":"PNG image data, 155 x 32, 8-bit/color RGB, non-interlaced","md5":"be5571a5cd0b704443d16728e4aba07b","sha1":"0f5886b8e65b03d2e0670e0133768b1bd0dbff0b","sha256":"ef2477917ac802f015f06093f801b53c07f7747ba22f1b0e8931211311bb5eb8","sha512":"2914614df69c42767c62e3e459fd853554f05f4f6c3d90e3487c24692f7e17771329046682c1753256991043fd6c199fcd6560924e28a01f65643022675804dd","ssdeep":"96:oRRCHVgJyUFKy2jR69CmtsPMF/lFq7fK1GGwLH1v6ya3W73hF/NRidL:MKVgJV2lfHPMxkfewBDa3Wjfi","tlshash":"51e1bf6531c57c185bae233f4df687ad757f0dfbc9631484b28b4b28415024a82f9adc","first_seen":"2026-07-04T12:10:15.007658Z","last_seen":"2026-07-05T12:29:37.06459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-04","alert":"Sinkholed","trigger":"betyeni2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}