{"report_id":"72cf2363-0827-4cb5-a0ad-ad16b4299997","version":0,"status":"done","tags":[],"date":"2026-07-14T13:34:06Z","url":{"schema":"http","addr":"yenibet3.one","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":0,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"yenibet3.one/","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"title":"En İyi Bahis Siteleri | Yeni Bet","dom":{"size":96344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1607)","md5":"6a44a8cec38f2dbfd5a48ab91b580898","sha1":"5ba73513fd101b9e59e56aa15afe1f53e5c786bb","sha256":"a97548e5d3d133a7b346c614dbda35aef02852a72e0d8be06f771c0f026d55f0","sha512":"ebe848d494057bc47d3336d784384f7d00dc97125842f4c5d48d50b0c7bceda76c460bf9828cf3f9b8081e4807f945618516d532b574d9aba58e67e49cc5e5b5","ssdeep":"384:zpzPtiEFyPzVXe3y0kMPa5iIUBk79eiMgPU17X57T7Px5yHPGPrxCxNfsE0DP99j:zpzV3IoMg7QaxCmr2bm9EvOTz","tlshash":"1593a758e4f238bb06a7d0c25ba247677ec2a297c6675a0937fc07d11feed42ac13416","dom_hash":"domhash84d0d1e983d2933ce1de84075bc637a6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yenibet3.one","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":0,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T13:34:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"statz.aatoolz.one","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-05-14T18:21:35.841489Z","last_seen":"2026-07-14T12:24:08.006995Z","alert_count":0,"request_count":2,"received_data":1100,"sent_data":1185,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"yenibet3.one","ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-07-09","domain_rank":0,"first_seen":"2026-07-14T12:24:07.344573Z","last_seen":"2026-07-14T12:24:07.344573Z","alert_count":220,"request_count":55,"received_data":642187,"sent_data":28457,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"ticky.aatoolz.one","ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-04","domain_rank":0,"first_seen":"2026-07-14T12:24:07.349402Z","last_seen":"2026-07-14T12:24:07.349402Z","alert_count":0,"request_count":4,"received_data":21178,"sent_data":2019,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-12T22:48:41.233588Z","alert_count":0,"request_count":4,"received_data":546769,"sent_data":2170,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":12,"received_data":618460,"sent_data":6898,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":14340,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-18T00:56:58.108682Z","times_seen":20609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/js/main.js","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d83291623f39d3e85c2d9fb584606fcd","sha1":"e1f2322c8d99f6c0cd261c565ec57a144d7cacd1","sha256":"bbae22387190ab25669cc3632de2c390ecbe170b4d47f811829be0221a65a293","sha512":"f286790fdb81d1f5f17466e8700ef22c75e84f1328979e212c875fc032019e14e074805793e284e3c018411a2f6237486eb17041dd150cc64ab105e9633dea12","ssdeep":"","tlshash":"0351322b7ea12f3245fb69fb23cfd2a9353944878889c503297cc5814f50f60527aed9","size":2445,"data":"","first_seen":"2026-06-06T14:17:34.194805Z","last_seen":"2026-07-14T22:41:44.13299Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statz.aatoolz.one/track.php?t=8d2ee7c121d1cbfae89b9c22fd4ef23a","fqdn":"statz.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d0f8f0ad4b21b2cc11d6cd7749e0f14","sha1":"7b46aba4936387dd8e77ba21effb850eb30bdbb7","sha256":"d23c50bcfa3492bcb48d3fb5721b60688dfb526d357247b3eeff8f0e75f395fb","sha512":"826da7618f7f36fc3602f1a49b6fb8cd0c11cc21672310f4d92777931c04891fa1d9514cee7c7a7888d3d1d34900cc6c3bae36303d7215da8c1edf450f0f80da","ssdeep":"","tlshash":"e0f0c9785a7390a1a733609b366f670828b780433e0ae480354c54900fa2b311366bfb","size":583,"data":"","first_seen":"2026-07-14T12:24:12.238125Z","last_seen":"2026-07-14T22:41:44.114708Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ticky.aatoolz.one/flow.js","fqdn":"ticky.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f2dac3670e072b9ba4b7a70851fd65f","sha1":"60353ff763707fbf432aadf19807498dcb7839af","sha256":"f425f140fa5a47920838caec85bdb8c4ccce72a3459e2b96fb520772c95056af","sha512":"ba9841e5ad9b7777d89b360bcd0f51ca59d8ddfebb77ce57135009fd95b6b19e47791530e296945c16dbd1baedd68eee6f735dd537264bfd2480569292b99656","ssdeep":"96:7OYkSBzt1B7cRMVkrhBvfAqnKCwoIZejCDDvC/06ta:yYkSBfbILvzCjwjC/MI","tlshash":"4ba1b63bbe7300bc6a2f805f66bee569316400235403ec61b46ce4199fd0d66167bafc","size":4899,"data":"","first_seen":"2026-07-14T12:24:12.283168Z","last_seen":"2026-07-14T22:41:44.096329Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/chin-chin-casino.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.570Z","timestamp":1784036014570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/chin-chin-casino.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16076\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16076,"size_decoded":16360,"mime_type":"image/png","magic":"PNG image data, 223 x 74, 8-bit/color RGB, non-interlaced","md5":"f39def741724da934e96f469dcaefeb4","sha1":"bb7eac44b5c73e3b6744142e5190ecf3ddb811c3","sha256":"fd7b8be63787e62cb50b284afc2a7510637e24b17d83e6dcf8960e395027b5d2","sha512":"44aacf07e440a525392803635652e9ea8e6a74049f287b3275c57562ac119ad799ebb597758a118b2003c018ce00d5d0289af29f60ab3d47fd7bbf61e84dccfe","ssdeep":"384:j1UQa8VulhVUc0vm5GwVYtL1F4I8AYLAzqImmck:jCgiIm5GoYtL1F43AFqDA","tlshash":"8072d152050f037aa80c1f2991e47628cf5c07451bac2eb6d7f8df9aa56149c8f7de36","first_seen":"2026-07-14T12:24:12.317946Z","last_seen":"2026-07-14T22:41:44.144275Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/rekabet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.579Z","timestamp":1784036014579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/rekabet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:22:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13892\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13892,"size_decoded":14176,"mime_type":"image/png","magic":"PNG image data, 209 x 45, 8-bit/color RGB, non-interlaced","md5":"75e9be91f04d130a2a586cdabe777ca4","sha1":"2f1012fae7ffe45fe379bb38038abea4a3268bc0","sha256":"15a802d7a0baccb85d367483e26bfc1ff57fdd8e27d8f4284c813277e73207c7","sha512":"668a35e79bc9825da560f39e76c10d0ef6ce1255e8ab63e68f2912d866a704663163e74ec1fa8532fae4b8d96cb23358925223a567bff93834fd55458ac10f7c","ssdeep":"384:GgU3XezqA4d8TLdSH6BRv9rAfOz+Kyt1S1u:HUeuALPF1aOz+KyC0","tlshash":"0352cfc575560e1be1f004d2b87ba5441aacf987de44aa0c8ee275c7f8561f7a39d03c","first_seen":"2026-07-14T12:24:12.255347Z","last_seen":"2026-07-14T22:41:44.091244Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/slot-vadi.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.584Z","timestamp":1784036014584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/slot-vadi.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:22:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5596\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5596,"size_decoded":5879,"mime_type":"image/png","magic":"PNG image data, 151 x 47, 8-bit/color RGB, non-interlaced","md5":"c2fc100cd458e306857d1328eaa921a7","sha1":"79b31a1857b1e628842facee0b8cbccc5d1cb89f","sha256":"55fe37fa71cc00c856488a3a048c49e633fa0e3adc311adb6d53c2e73df236c8","sha512":"4e10276b9d92e11aa99cf7ac1d89204e686986e102cb756c5bb41620d92a7a9c4f27ddc44fd840b931c4cd3c02976f02f7067b05822ece2fe54760cb476550fd","ssdeep":"96:yK6nsL1qXO8Bw7r/J5toxZUQ7il98FiTMCLgYw6ccam9pH4zn7E:yK6GqXO8BO/Jns7298FilgYtRYz7E","tlshash":"7ab19eb449f2e2a964354bd88801209f16e455ec0ef77794c51f8e647e0a0bdbbce861","first_seen":"2026-07-14T12:24:12.244153Z","last_seen":"2026-07-14T22:41:44.093277Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/intobet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.526Z","timestamp":1784036014526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/intobet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3843\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3843,"size_decoded":4126,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"c14dc5fa61340d7121913befc0f7b152","sha1":"5f4e580e7f941ca575a1c0589de649a0d9de0025","sha256":"b90ea16139a8df29fb1f3f90325ac34b77a0dc593d27a108b90ded0c7ab234d6","sha512":"877c599a29cf568aa584e3702522c1946594ec6fd7edb45e65c0916130dd6011a82b290b74438c5f2646c8d0589e80d04cc741fae11dcc474de974d6f92d85c1","ssdeep":"","tlshash":"c3816cdba0429a65d624b4816a09a59b1b8b02ca33b37d510c5f713b201a3799db0b0e","first_seen":"2026-05-29T12:25:45.830402Z","last_seen":"2026-07-14T22:41:44.097458Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/rexbet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.557Z","timestamp":1784036014557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/rexbet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:22:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5402\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5402,"size_decoded":5685,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"8fdd1c5e8971962817264603775b5896","sha1":"5bd072d9389d14a817d0fdd6e02f5bc5f5cc024f","sha256":"bb1a8cae9f7ee72d67e75968f9868b94a50a7a503c054b7f0af0cec11ba17728","sha512":"aa2ee51a8de2c04da8daf2680a41af92973ca7d7c1462a018b52ae3bcc7dd0aa0f023f368a41ce2bb2e7480643809b58d97a41c300e40d26df71e6f36f9dcd1c","ssdeep":"96:kcfCYBTawQElN4zE2Fu+zvXRpx1U3yT6aZdBY1BslwD+WEvwOsIej/0:k2CYRaiNYECz/RSyTPdO1GwD+WEvwOrj","tlshash":"72b18d9c896065342801586c63ea320a1cdb8792fe1f90cadc8af447f913cc27e7da97","first_seen":"2026-05-29T12:25:45.79757Z","last_seen":"2026-07-14T22:41:44.085353Z","times_seen":9,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/mostbet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.558Z","timestamp":1784036014558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/mostbet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13555\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13555,"size_decoded":13839,"mime_type":"image/png","magic":"PNG image data, 239 x 40, 8-bit/color RGB, non-interlaced","md5":"df17dcc481294270a9d0bc691c01edb6","sha1":"84708c19aa840eda4e69699829f6d998ce69ffa8","sha256":"a4034339eda257f71fef42fabe50e40258648f52f06bc3a037d3375d1dfc50e9","sha512":"5ee18784705a95009301265bfe286b9233781c960dda8634f8d6b0f3bba1b54f012d66d62abce19f1c5d0cc2fa3538ebc69e40c5fbcaa25e40c4af525f5b5213","ssdeep":"192:WQJWmLVvpl1cYmuTO8nDgVNnjGxZOb10ZE68y+rl6JBQUUUAwj49CIeGRnQZfxrx:WKWmLv4SDGNjaOd6f+0zvAXCIeGRIxzx","tlshash":"7052d01c2ef06ed7f79333c60c39d8a5c736c854c595f660aa254ab8bf2f54e620921e","first_seen":"2026-07-14T12:24:12.267399Z","last_seen":"2026-07-14T22:41:44.137333Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/kargabet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.582Z","timestamp":1784036014582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/kargabet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13692\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13692,"size_decoded":13976,"mime_type":"image/png","magic":"PNG image data, 202 x 48, 8-bit/color RGB, non-interlaced","md5":"2ce65ceb7b7b204f898511ab003b8281","sha1":"0a306bc63d9681848ced12672c4b158d2016e8f8","sha256":"444403a4e0be799f77500909470fae52082c77e67ea630fb1070e92246646407","sha512":"3406011542b0bd97bc6610e3d599a102169eb8c9ddeca3dc92b417152f99646d67ea45935e586143c50688b79399b3500d34f0dae8369e92492b409e90ac3c6f","ssdeep":"384:07h3Up169m97WiaVQ3YdVQFeyl7ajtDG3rXx1/SvQx:mdij9SvaIdVdW7ahDG3rXxtS4x","tlshash":"5952d1a703a25dc1153e06f7473f6049ff9500b21199a674de2460156c38fae1ae297e","first_seen":"2026-07-14T12:24:12.28065Z","last_seen":"2026-07-14T22:41:44.112981Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ticky.aatoolz.one/serve.php?action=v\u0026i=5\u0026h=yenibet3.one","fqdn":"ticky.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:35.183Z","timestamp":1784036015183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ticky.aatoolz.one","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:09:29 GMT","end":"Wed, 30 Sep 2026 17:09:28 GMT"},"fingerprint":{"sha1":"44:69:28:77:A2:27:42:1A:47:C1:81:F9:B7:63:48:A2:18:19:0C:46","sha256":"92:C4:DF:95:D5:97:B6:1C:5A:F9:C1:8C:61:B4:9F:36:9A:94:93:C1:37:77:49:F4:7E:7F:57:D8:6F:29:E8:D6"}}},"request":{"raw":"POST /serve.php?action=v\u0026i=5\u0026h=yenibet3.one HTTP/1.1\r\nHost: ticky.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 21\r\ncontent-type: text/plain;charset=UTF-8\r\ndate: Tue, 14 Jul 2026 13:33:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T01:40:23.105447Z","times_seen":17326528,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.485Z","timestamp":1784036014485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33186\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230189-FRA, cache-ber1080020-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3045918\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fchZlyoAdiRqx70KkXes5huTmNyijK%2FG5QanYFbSWnOHYSWMVFXE1bVC5WgPgpoo1MtaI9e78uPIffey13eF3ScHAO1Pxt%2FATdd9X%2F6od7xUme28qxs1rym1IuP8l5LAZwY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1b0e662b980b51b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232948,"size_decoded":34315,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-18T00:56:58.106548Z","times_seen":18127,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":7,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/slotbon.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.542Z","timestamp":1784036014542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/slotbon.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:22:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8406\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8406,"size_decoded":8689,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"e117e7fecd203e3441c36e6a2a96a8c1","sha1":"2ea625992b712625d97b0f00c612b66abd1f338e","sha256":"f390a60ce9b1ca403c1213f10760bed997f04bb433dcd756e0c80e1146035dcd","sha512":"b09b10d1c949b62382c818908011069d2193bad82ac583d6dbd2d29df81891bf8c837cddfbd3512b795f0008b7d1e1ee14dce6c0a0cdecbf030359e857236021","ssdeep":"192:9m/7ajP/VDCsI0AFmpqWSmuGfDG1wHdBHs2jrQRfExMpV3enYG:9m/7StCs5GmuGbG1iDHswKExMponYG","tlshash":"08029f95171caa2532930a9771d79e0dc6b1cfdb26c85291c26c13cca79fbbd8e54184","first_seen":"2026-05-29T12:25:45.787437Z","last_seen":"2026-07-14T22:41:44.06639Z","times_seen":6,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/delta-bahis.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.576Z","timestamp":1784036014576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/delta-bahis.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9510\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9510,"size_decoded":9793,"mime_type":"image/png","magic":"PNG image data, 171 x 41, 8-bit/color RGB, non-interlaced","md5":"f6580dcdfe7ae3d2f60b68909bd5267d","sha1":"ae236eb918c09059476b57280935bac663796915","sha256":"1f145da86537391272113e63ce8f2452ad2522fa18d105c6e319eafbec3a1a3f","sha512":"ab8e2422985a235d835ff05db93f5531ea016951f8c9180929c9c99cbb8167592558d97b8d8a633b4268acafd38752082462fc4cbfbbcb38a7b7da3ced0fde05","ssdeep":"192:U4EMZgSVttA8Zm6jN7thmsqeeehMxIC8oXU9xDk7:6MZPSqm6R7H/eDxDchG","tlshash":"0f12afc1b55e367b05e140b6703c8d967a1bc61b779622ebdd030165b2eacc262fce32","first_seen":"2026-06-06T14:17:34.188473Z","last_seen":"2026-07-14T22:41:44.088163Z","times_seen":6,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.980Z","timestamp":1784036014980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25284\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 09:42:14 GMT\r\nexpires: Fri, 09 Jul 2027 09:42:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445881\r\nlast-modified: Mon, 08 Sep 2025 17:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25284,"size_decoded":26097,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25284, version 1.0","md5":"fc575ebf6f7c3646d13d9386cf8a86e0","sha1":"779e9507b31992161d36df9f8a78ee73a6e64225","sha256":"811e11966d29f3a01fcb19b087b61ac067d380665a55aebb7fcdf2cda95e4a93","sha512":"bf1f6890960e5fe79619d0a7757b95b9e422e3aa5634b1fcfe7b59f018234ec9aff01ae70d9b3593e1e5ddde78e716139c443e5ab0741a61c5d6b1637397412c","ssdeep":"384:dZgkQy8vw6D97NySvnt+kywHJ0WQ5k77oyquIw8CTTu36ioguDDYdiW3I7Oa4Leq:dmJ0G95ySAIHJvd2uIw86zioFA2OC5cL","tlshash":"63b2f14db61d308cfa05cabf0ecb8aba2031dc44bd5b39c4f217928739f6a6599c4564","first_seen":"2025-09-10T18:00:33.205576Z","last_seen":"2026-07-17T22:51:15.334018Z","times_seen":2603,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":36,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.982Z","timestamp":1784036014982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:24:54 GMT\r\nexpires: Mon, 12 Jul 2027 12:24:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 176921\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-18T02:19:13.570507Z","times_seen":18590,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":60,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ticky.aatoolz.one/serve.php?action=get\u0026h=yenibet3.one\u0026t=off\u0026b=ana-grup-1","fqdn":"ticky.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.995Z","timestamp":1784036014995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ticky.aatoolz.one","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:09:29 GMT","end":"Wed, 30 Sep 2026 17:09:28 GMT"},"fingerprint":{"sha1":"44:69:28:77:A2:27:42:1A:47:C1:81:F9:B7:63:48:A2:18:19:0C:46","sha256":"92:C4:DF:95:D5:97:B6:1C:5A:F9:C1:8C:61:B4:9F:36:9A:94:93:C1:37:77:49:F4:7E:7F:57:D8:6F:29:E8:D6"}}},"request":{"raw":"GET /serve.php?action=get\u0026h=yenibet3.one\u0026t=off\u0026b=ana-grup-1 HTTP/1.1\r\nHost: ticky.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://yenibet3.one/\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncontent-type: application/json; charset=utf-8\r\ndate: Tue, 14 Jul 2026 13:33:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":237,"size_decoded":498,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"547b178aea7f5decadcd7755f876b95a","sha1":"c3a80f0f8760327855b344b3138005614442aa5b","sha256":"84c8f98185e29d49e25b015d6fdadbe042d2e576eb88bea28c0b647c8ed3a6b1","sha512":"1c2eda49574147fe741985ed309f845f4df3450ab19fa9f356648077afdd140cc779d3b22155917fdad9be426d930046f022c33b598c57a645dbfdaf6c1270c6","ssdeep":"","tlshash":"47d02e97cbbfacb2820a63c128d96c38280b3203bed4e099850589c8108e95000ca176","first_seen":"2026-07-14T13:34:09.323213Z","last_seen":"2026-07-14T13:34:09.323213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":20,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ticky.aatoolz.one/uploads/24ac101c75876400.png","fqdn":"ticky.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:35.184Z","timestamp":1784036015184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ticky.aatoolz.one","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:09:29 GMT","end":"Wed, 30 Sep 2026 17:09:28 GMT"},"fingerprint":{"sha1":"44:69:28:77:A2:27:42:1A:47:C1:81:F9:B7:63:48:A2:18:19:0C:46","sha256":"92:C4:DF:95:D5:97:B6:1C:5A:F9:C1:8C:61:B4:9F:36:9A:94:93:C1:37:77:49:F4:7E:7F:57:D8:6F:29:E8:D6"}}},"request":{"raw":"GET /uploads/24ac101c75876400.png HTTP/1.1\r\nHost: ticky.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 02 Jul 2026 18:08:24 GMT\r\netag: \"3a5b-655a4b1b96970\"\r\naccept-ranges: bytes\r\ncontent-length: 14939\r\ncontent-type: image/png\r\ndate: Tue, 14 Jul 2026 13:33:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14939,"size_decoded":15171,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"4b8335d18dcc520d3c25c66f3ea74b41","sha1":"2e8bc12bccdeecbe955387fd222838b4258bce96","sha256":"bf3633ff260588e5fcd95fd0e5676533e407a6a095b83c332433391b1a688335","sha512":"cb95a4d52e669840cabbf824d755e4b18947b21909db1289e5131304137a4d8d6b3129aeaed02ec4f07b1184c506ac88d48e3e738422358005856a61809cdbf5","ssdeep":"384:hkI3awjseLYREyxrsG2VYp3lV4HmV5I9UzW/POUPB:hkI3pjAEyxrd2Vc3lVsUna/PNPB","tlshash":"b262c09ea1fa9a0fe00cc65ba4339d147bb9bf2461d7a3c9cc4906ea31456471c34b0a","first_seen":"2026-07-14T13:34:09.324529Z","last_seen":"2026-07-14T13:34:09.324529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/winnit.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.543Z","timestamp":1784036014543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/winnit.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:22:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5021\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5021,"size_decoded":5304,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"f170a51ac858d5c6b00390a059b246d4","sha1":"3b4753118ececa59951d1138584fc36839820a41","sha256":"cfbc5893f77829dcf7134cf83231c357c8f72f19430da81a1069df6e838286c5","sha512":"48af3d4f8f4aa8e86bebb18b063588484a500e4bc26ede83fbfae714615a11bd9be441834acabb6f2f9f23b9cfcccbde8f58327e3a58bfdd8124da646b5e2742","ssdeep":"96:1O1AJCLVhGii4VUCLCYygfRnL9y9FA+ea4HTcCasvXF4l:PJCa+DsgxgA+ea2TcpsvVe","tlshash":"4ca16c4afcf8e178300219ad591ff9c06c5a1a16b079493c2db4a177666313e98bde81","first_seen":"2026-05-29T12:25:45.782133Z","last_seen":"2026-07-14T22:41:44.083929Z","times_seen":6,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/golvar-bahis.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.574Z","timestamp":1784036014574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/golvar-bahis.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1477,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-18T01:33:52.063064Z","times_seen":141359,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/babilbet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.578Z","timestamp":1784036014578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/babilbet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12649\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12649,"size_decoded":12933,"mime_type":"image/png","magic":"PNG image data, 189 x 57, 8-bit/color RGB, non-interlaced","md5":"3ccc954fa4162b436b3ea49fec81edbf","sha1":"d6cdf4e25ea96d80c5ae75153f82969bdbdf99f2","sha256":"8463ca1144b022c2bd828b3d65f2a783557e7af0d832c8b7fa2b81ff29b68fbf","sha512":"462250bfb7d6d5aad6c9606c9d0a1f7e01da7c7a890653d95a99e8b7e4c63960756071ab2f9262ecacceaaf7348f144d6ae09ad9ba3780fac5b6bcbc7053b3d7","ssdeep":"192:9TLw+8VDfY19PMwrar6VjZrZPKjQoPbm/GakLj9e91Zb3C0kAKSvajnQ1uCo/0l7:e+oYbPMZKj6E0mpk16zXCjG0/UZ5","tlshash":"ac42c0d4408222b4af6b1a10bcacb52358c7853c46ffb83ad5deeeb9cd5904c91ad784","first_seen":"2026-07-14T12:24:12.3243Z","last_seen":"2026-07-14T22:41:44.150552Z","times_seen":3,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/bethand.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.569Z","timestamp":1784036014569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/bethand.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9936\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9936,"size_decoded":10219,"mime_type":"image/png","magic":"PNG image data, 210 x 54, 8-bit/color RGB, non-interlaced","md5":"8076355b0c0247561d2f0a80dc48f4d5","sha1":"dbc2dad4e4823b936024a856f891113c26965dd5","sha256":"db26e9484688aaf0bbef41898e038ca7a488839c83d7705d726f050eeb02594d","sha512":"82b1520f4f5adf382cf69f55ad3796fcd719693bb0017373c5a137843e7187e14f5fa886aede3cb96da4003079577a557b1a3b221fbc5641de0e94da1ac7997a","ssdeep":"192:Ecb2TEkVRgk+yCMY5HgPiyzNznL6PE18ojGDOITVL:di5Rgnj1oZGPzojS/L","tlshash":"db22bfd09c06de7a256dea36cb9cd88cd492d7d0165755f1e8f865f63a377d0000ae32","first_seen":"2026-07-14T12:24:12.263284Z","last_seen":"2026-07-14T22:41:44.102745Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/ganobet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.573Z","timestamp":1784036014573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/ganobet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8223\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8223,"size_decoded":8506,"mime_type":"image/png","magic":"PNG image data, 129 x 42, 8-bit/color RGB, non-interlaced","md5":"6cc49636cd882bb87b6ffe8b02fe125f","sha1":"cded211be7cd07a1b45ce3d0a5323ef53c8b06ea","sha256":"fe6d5811ce04b762b33eff76212addef14d264419c4e6fbf464175710bed2087","sha512":"bc42938746e3037f4ce56ce88ea1dbc72bccf3f526dd8d1791a720623d0dcd611e49e9614996a51f50aada0c20680befd041c1cbfbaf02a025e7f9a8b87d5e55","ssdeep":"192:B0X+z9284Ctbl7gbu4EuG7x18+cgfFEHB6BY:BiY928tbLcG7x13p6HQY","tlshash":"9e02c090606a3e8bd072b9e345df92cc76d7abeef90069705098dc381dd354d8a5afb0","first_seen":"2026-07-14T12:24:12.236059Z","last_seen":"2026-07-14T22:41:44.112032Z","times_seen":3,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.976Z","timestamp":1784036014976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 474293\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-18T01:41:46.939716Z","times_seen":238093,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":55,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/betchip.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.523Z","timestamp":1784036014523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/betchip.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6672\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6672,"size_decoded":6955,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"c0eba6bfc654fec4cc7d2e94553f5352","sha1":"ec51e52984960f2c25bbb919625c82358de71da9","sha256":"3925fc9a00cf97d8db04322165387621b420dc151f0a6d940324e0c2d2e44fc7","sha512":"deede606327ff123e108b96a0defa4dfcc061f7c768cbf66988aec4b6a499b6eba99ebd2cf661927a2aabfa7df681b7fd9fc54878343c1e94146b24d557565f2","ssdeep":"96:zcNWqR5jPx+RvDMZcxQCKHDqweRFC+WSJduI5xkEmLSRgt7P6c9BYtF75wu:cbHYRvDMQQvDqw2/3LVFgt7PFK5p","tlshash":"40d19eb0c7859a01b69154abcbc654f4464765036fba9335f20c29beac428bb692c139","first_seen":"2026-05-29T12:25:45.832133Z","last_seen":"2026-07-14T22:41:44.115542Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/betelli.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.528Z","timestamp":1784036014528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/betelli.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3282\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3282,"size_decoded":3565,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"3cfd03d0d80bf135b3bc2912f5b9eaa4","sha1":"f9b482b7a4e2ce53e21c233b99750c1d0fef47bb","sha256":"88dcf85665022e1a7d26ab9ea2f88dc6e64af29d5dc0f9ca628d6eabbc81586a","sha512":"ccc6736845f326716c763e56ec47c7cc1546639bd836b33f236264df3242042d3c02890add3564d6626065143f409cd3ea59feb1ebf88bd5265af5c625541f71","ssdeep":"","tlshash":"c2617f9c4e363d7940adb4a4ff90b0868105902cf01b3c9cb175f0964644cdc5b8c15d","first_seen":"2026-05-29T12:25:45.786466Z","last_seen":"2026-07-14T22:41:44.068227Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/wettigo.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.533Z","timestamp":1784036014533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/wettigo.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:22:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15963\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15963,"size_decoded":16247,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"f1addcb63abc2a0ab136d60d47d6b3bc","sha1":"add7c92b5020a1e64cea79a51546e8b8656e6d6e","sha256":"551beea007aed769372b72918be5a72594f6c467c9765dd84fe83b066f48b26f","sha512":"751d11f8b02bcfb29e098d7282c55e45e3005c2e0d2b27be4b5284b5d2e6f5ccec12022aa08feb03fefe8a718a9b3367a33ecac544f3c68db03560f1ce8a0376","ssdeep":"384:RsPDbZT2Fomlk2JrqadOn/b9pjZNYzq4GXs1:+bQJU/1svr","tlshash":"2662cf7e948c9f8a33a87c4153ebd9a1fb89561a93bcdf306dc3909d09c52160315edb","first_seen":"2026-05-29T12:25:45.776501Z","last_seen":"2026-07-17T18:44:07.319412Z","times_seen":11,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/mobilbahis.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.536Z","timestamp":1784036014536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/mobilbahis.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6255\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6255,"size_decoded":6538,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"4f8dc48ae725e25877e651eb21e14448","sha1":"8f04d8076396c3fc883ec8d7aef0b6feeab8a907","sha256":"94aea37207ab9973b66aeedf1aad3dd57fb659ca3ac873b0badb36b210baab2d","sha512":"713cd0068d22357f9a9debaa3f4eb37707909320ab5adaed06c8a578b21e9f490feeb5d215cd041665258f3ab9e57a1929d084af52c8e6d3fb4c79915ff53cbf","ssdeep":"192:OUo/rEz5YoqDfEqpq74PlI8LjNhByikDB:ZakYoi1Z5NStB","tlshash":"2ed1afc918296ef42585c4c74a1887abed264ed0943750881e7b7213dd1fce45dde36e","first_seen":"2026-05-29T12:25:45.824583Z","last_seen":"2026-07-14T22:41:44.109942Z","times_seen":6,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/bets10.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.540Z","timestamp":1784036014540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/bets10.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10005\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10005,"size_decoded":10289,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"b05634b9fc15303658899f268242c193","sha1":"3ab44488920201741cb348e3faeb964b536e9992","sha256":"8650acd9f6a8e006b1457ebba73a7a999a87973a9c7ecb6e9581d325e5e23509","sha512":"a3f37638a2153987464cf395b8e6be74beb338ed1a63f4e43e1d443cda9987b13b476b36fcb70825d856215c1cdf9d52e2470686646a1b25ba93e683ff1030de","ssdeep":"192:zfjDkpniEoW8F0hz2sdvKlKDbsi1m0ibKi0ARGL14i9:zfMhiEoWvkGSlKDbdj6N0AG4A","tlshash":"2c22b07990acf866d2f215b2647832c435348c8aca7bd0e2fa1e5c9e4b1ed94fde1103","first_seen":"2026-05-29T12:25:45.833893Z","last_seen":"2026-07-17T18:44:07.321105Z","times_seen":11,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/altspin.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.564Z","timestamp":1784036014564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/altspin.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11163\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11163,"size_decoded":11447,"mime_type":"image/png","magic":"PNG image data, 176 x 55, 8-bit/color RGB, non-interlaced","md5":"b0cc1e0e94e2347e8bb593a6304825f3","sha1":"cf6a7b7d0c2ded605923d0bcc6750e24e4d2f93f","sha256":"1594cfc0d84ecc88dc25e9692010ed0fd4ed7fd0df477218d5e6b2bb59977900","sha512":"0a14580a567094686be4c30586692df3ebc9f557a45b32f24109e741e84b423081ea4507855e1bd679250a48f098510708cf3be5e6442e6d6a53295b53af1726","ssdeep":"192:ZLMfOD8ZTLCscxrnyox4jjnq/r0fFDCoWZ5T56+pQjkWXBnouiAsrWJEqdAODPox:Z1D8Z6scxl4jjnqQdDPWfQjkWXlouivt","tlshash":"ef32c0a1a7821197c935eee328700656b244ad31dff934c31aae450ce934ba517f3aa3","first_seen":"2026-07-14T12:24:12.316831Z","last_seen":"2026-07-14T22:41:44.122335Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.972Z","timestamp":1784036014972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 474293\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-18T01:41:46.939716Z","times_seen":238093,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":18,"dns":1,"connect":0,"send":0,"wait":73,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwWa-xsaQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.984Z","timestamp":1784036014984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwWa-xsaQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 08:32:52 GMT\r\nexpires: Fri, 09 Jul 2027 08:32:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 450043\r\nlast-modified: Mon, 08 Sep 2025 17:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12156,"size_decoded":12969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12156, version 1.0","md5":"05dc9078cb0637dcbb37001703a629c3","sha1":"5ad15d919ce507ebd84ba6644c087bfd9d683365","sha256":"08e1ba85bcb55277782f56766af09467dfe18cbeea49704203100c5797ac4cc5","sha512":"8fa0c426b3dcf5eed41c3af6c71a8fd0b19dcc060569bfea1cee6428297705d141b0b90dc3acb22acd13d4f537abc37b0a5d4f6f39497d9d513472c7f0c6c2b2","ssdeep":"192:TtMeAUCS7fKiru9mFAAklYb5SYEL1R03gn+nHFjUsUORA44FvbQ5WbbTcc+/+et:JxAc7zru9MIlBPpRlUYsNAtl1b81/+Y","tlshash":"0942dfdd6d118a11f09ee0b5677a25506c70ea3c26aec333011ab2b057224179b7d4ef","first_seen":"2025-09-23T18:03:42.680461Z","last_seen":"2026-07-17T13:41:44.820648Z","times_seen":166,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/melbet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.534Z","timestamp":1784036014534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/melbet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7395\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7395,"size_decoded":7678,"mime_type":"image/png","magic":"PNG image data, 159 x 40, 8-bit/color RGB, non-interlaced","md5":"4780c81189096832cab481e17a195f0c","sha1":"7a8a51469f85bfda5fddcf92736ab11aa47ef45b","sha256":"889b22acd2846c6065337831ce745cadd34dad225ecd4c3683a42a70f041322a","sha512":"a5e0e902f7bafab2afa6b736cabe4f80048598efb609330ed0bb83b90d1ed372571e854c275849c20c96156ca0f16e8d88b2abaa3d24d3a13c6b1a1b5f8c8c15","ssdeep":"96:RpBbZowQTstaEIYiJxUr8RxxPQAIPq8Mv3tdiiTqmcQ4/rVRiUdsnrIKy1viaQzt:Rp/sg6NSm7diOqj5/rPiUdsnJy1vJwo4","tlshash":"93e1c09170e160d3dc1c71867387b2d0b5a43a801e656e290e2666bbdf23a56571ff38","first_seen":"2026-05-29T12:25:45.810224Z","last_seen":"2026-07-14T22:41:44.079549Z","times_seen":6,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Sora:wght@500;600;700;800\u0026family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.747Z","timestamp":1784036014747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Sora:wght@500;600;700;800\u0026family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Jul 2026 13:33:34 GMT\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13656,"size_decoded":1568,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f5ab2010ca399af316b102a60310a4f1","sha1":"85239ce7a433ac444d4b72141b7b17a824c988ad","sha256":"0d4812acb8bd5245572766f48bcccf95e742dcb69ede355f5aec36141fb714f9","sha512":"0c456d266f8f4cafee1cf8a879cd96cf58a951d03acbe2bce74f2bbee49550842f0d6318eb376d2ffeb8cd0b9981bb64cb7b672a750edfb89b0904417ab40510","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGe1BB1+1Bo191Bv1I1Be4:vXuM0p2+jZ2urjYAG","tlshash":"8f52dc92002be400ab931dc233cf7e3aae8e5085a485d5796ffd0cc9aceed66436475d","first_seen":"2026-04-30T09:24:44.190428Z","last_seen":"2026-07-14T22:41:44.146144Z","times_seen":17,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/grand-operabet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.575Z","timestamp":1784036014575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/grand-operabet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20272\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20272,"size_decoded":20556,"mime_type":"image/png","magic":"PNG image data, 157 x 95, 8-bit/color RGB, non-interlaced","md5":"f17bb9b85bdac29d0cf80f1e9c322f98","sha1":"ba2b56f82a0a1620b6a0a76fadb0dd24a3dfebd6","sha256":"77b552bc4455a0766d45ab1fae4ecfa2f3dcd42898fa4c4a3b746f3c2ae093d9","sha512":"7fda69bc657f32702ca572328434dfab3a692744567a5b399238c4f1a241485be4c490094e1d0202d74981df4b0cb9eee66a5343d5550db56c4c5db985b8f529","ssdeep":"384:cRqYNimoULg7QiMj4lEi4yubFRF7OZhrS9gbKZDofNO1hhkSz0D+re48UtzTM8eu:coYyzu4D4yuBRhMhrS9WKFWcPfzY+reG","tlshash":"9992d0f88c15a186b5d2d3bf933e0c10b0a3c0c3586b45544ba56badc5b3d33f19aa1e","first_seen":"2026-07-14T12:24:12.306773Z","last_seen":"2026-07-14T22:41:44.054451Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.973Z","timestamp":1784036014973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 474293\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-18T01:41:46.939716Z","times_seen":238093,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":75,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.509Z","timestamp":1784036014509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24440\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230118-FRA, cache-bma-essb1270056-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2624388\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hzgpxkKqr1CSzM7A7hUZOFHn6IHQrtNdf4IcIMaE5YTCpYsF%2FBfm8pH82fpkv5h%2FLigInqM0KB4rqJSzhDAvZv%2FgnPMUAV3X3rWXOfP3XO2p1FClfxE9ttrlbAZLlN2exIU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1b0e662b98bb51b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80663,"size_decoded":25588,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-18T00:56:58.108682Z","times_seen":20609,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statz.aatoolz.one/track.php?t=8d2ee7c121d1cbfae89b9c22fd4ef23a","fqdn":"statz.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.513Z","timestamp":1784036014513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statz.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:40:42 GMT","end":"Wed, 30 Sep 2026 15:40:41 GMT"},"fingerprint":{"sha1":"47:13:73:08:6A:67:8A:DC:09:4C:53:D2:6C:78:84:B6:A0:59:9F:5B","sha256":"7F:55:01:9D:48:69:D9:EE:D8:7C:03:29:B3:CC:88:08:8F:7D:EF:AF:F4:49:25:52:86:83:B2:0B:93:ED:EE:61"}}},"request":{"raw":"GET /track.php?t=8d2ee7c121d1cbfae89b9c22fd4ef23a HTTP/1.1\r\nHost: statz.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 330\r\ncontent-type: application/javascript\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":583,"size_decoded":608,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5d0f8f0ad4b21b2cc11d6cd7749e0f14","sha1":"7b46aba4936387dd8e77ba21effb850eb30bdbb7","sha256":"d23c50bcfa3492bcb48d3fb5721b60688dfb526d357247b3eeff8f0e75f395fb","sha512":"826da7618f7f36fc3602f1a49b6fb8cd0c11cc21672310f4d92777931c04891fa1d9514cee7c7a7888d3d1d34900cc6c3bae36303d7215da8c1edf450f0f80da","ssdeep":"","tlshash":"e0f0c9785a7390a1a733609b366f670828b780433e0ae480354c54900fa2b311366bfb","first_seen":"2026-07-14T12:24:12.238125Z","last_seen":"2026-07-14T22:41:44.114708Z","times_seen":3,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":128,"connect":19,"send":0,"wait":22,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/discount-casino.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.549Z","timestamp":1784036014549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/discount-casino.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15440\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15440,"size_decoded":15724,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"6705b26c54da67de9ea17a61aed7c066","sha1":"bf3229a7a741484afd1d3beba4358ab8ca577091","sha256":"0e0ae5faa7dcfc924b567ae8b760ceb2729ddd4cb66005fa734af5a080ed18b4","sha512":"d1ec57f41358903d2338cdee4940724f3dfd8b6d28eb0d8d23a62da674b36ba2001a792034e8942f6c659375e0f438168e5ba3ef83ee016fba9c67de24495a93","ssdeep":"384:l3dbYe2y5/jc4lkEQexdF3UEPT0bQTJEWF:f2MjcuBxdWEsSeE","tlshash":"a062d0f948719ca52c49afc8592e86dad82acfe34bfca551e404cedd027d883c53b459","first_seen":"2026-05-29T12:25:45.809221Z","last_seen":"2026-07-17T18:44:07.333722Z","times_seen":14,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/warner-casino.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.563Z","timestamp":1784036014563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/warner-casino.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:22:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11173\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11173,"size_decoded":11457,"mime_type":"image/png","magic":"PNG image data, 133 x 52, 8-bit/color RGB, non-interlaced","md5":"8e72b7ec588ba8954dafecfd2a8e24f5","sha1":"2a708fca0350b1a51408d99060f792d9eef6292b","sha256":"7f0f7a8eaf240a27563719afeec2647314f9cee29d058e6a38ad45094db445c3","sha512":"a904e2f33bfc4a8cb3a4e6c5560a6339549d5e773f32afd70662bb794311265421897dc2c70c92a6c2c554c6b68001e8bd5f1ec187d373b0b3f133e3d9339c52","ssdeep":"192:5/8mn2Vt0D2or5s8Jt8DBcbBX/Jq+sPJ03N3PFLKqo+TjOPSU0g:+m2VyD2ItwBcVxGRkldPeqU0g","tlshash":"2532bfcea5a0ca0e872945ca4e841d1cd88fab4e6f3309903172d1b6a0357be366c74f","first_seen":"2026-07-14T12:24:12.303716Z","last_seen":"2026-07-14T22:41:44.142405Z","times_seen":3,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/pasgol.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.565Z","timestamp":1784036014565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/pasgol.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13125\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13125,"size_decoded":13409,"mime_type":"image/png","magic":"PNG image data, 185 x 59, 8-bit/color RGB, non-interlaced","md5":"fae153aac756c0686a6654ad44e1df26","sha1":"1532c911721992cfd62a22f8e84fd00921ae1dd3","sha256":"7da729bb356b68219cc8f4e8dfcda125ecf73e159bcffd67eefcddcb1d00bb9a","sha512":"ef75ae9f3e2e5e7ce0e3f68c71e71161d0345b20b4da98112f577f9f803f45878e4899245215bc6ad6ce31050f45775fdf7add2d0d772a6db0d2304ca9731dc9","ssdeep":"192:HYI1ORglwmSvXc+O5pvfki1FDTaWgX/4SnKtBzFBR0uoWWOrEGSXnZ:HYylwtvs+O5pkifyBXgoAFBR0MVRSXZ","tlshash":"ba42c04ca8d134d75a445d3b41dfba2ce11cb7103a64cdcfc932b22635f62ca654794b","first_seen":"2026-07-14T12:24:12.269145Z","last_seen":"2026-07-14T22:41:44.100088Z","times_seen":3,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/bahigo.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.539Z","timestamp":1784036014539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/bahigo.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12826\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12826,"size_decoded":13110,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"cca2ecb5c7e1ce5eeec35ca7673142d2","sha1":"f3742836e4db14f09f5c4208ba20c7e02beb8503","sha256":"09f0d87a00b28d344bb8c9e726c34a8bca3fbf90a1b572d243618aa86269952e","sha512":"a5bc8921973b65ed6891d8e2c472d13ac527c61682739acef748598a33f15f0ad4ed87ffc141819b279c9b706700dc82348890ca7c5fa21a26d6c1f7a10d2469","ssdeep":"192:HEXT/ITbIxPp3omWH6mZqTNiAoZaC2/kmvyT9x9GdcbrVUDvvvb4:Hk/KIxF+bONihUC2/rvyT9x9GOf+DvvM","tlshash":"6442d1cf4e478c9e0c76c82a096788b169a3821c53b44d8ff512d69c253b31fabd4e5e","first_seen":"2026-05-29T12:25:45.832996Z","last_seen":"2026-07-17T18:44:07.321892Z","times_seen":11,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/davegas.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.551Z","timestamp":1784036014551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/davegas.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23787\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23787,"size_decoded":24071,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"a87d161537dfa72e6e237bcab970b940","sha1":"fe3e7fd5bd4cefbce8e9dece6b3a42aac3270fd8","sha256":"97d67ae1cb9700650da1c0a686b0199ed0bd22ddd15d244d79ebd22da5f7864a","sha512":"9d7b2ba58d588ab9097834aa1dd4234c8ddf3900e3b0bbdbcbac49abeec20460da1493f82e2b448e5012a2a554552e484e735f1daff9e8a69c6d60fc19c357ac","ssdeep":"384:OD/PMKGzmH89qpa/4h5Ewa3UZzfHJPrpgBagFj7WEnDZetnGNoLGSV6SJDoKdf83:a/PMKGzmccpa/aa3azhPrKB/j7WEDZWG","tlshash":"42b2e14ca9b8ed0ee68e340c435f4b713da8f9d9a1c26fec285e452515c0ef614f4396","first_seen":"2026-05-29T12:25:45.778296Z","last_seen":"2026-07-14T22:41:44.141231Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/betwinner.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.553Z","timestamp":1784036014553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/betwinner.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6886\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6886,"size_decoded":7169,"mime_type":"image/png","magic":"PNG image data, 155 x 32, 8-bit/color RGB, non-interlaced","md5":"be5571a5cd0b704443d16728e4aba07b","sha1":"0f5886b8e65b03d2e0670e0133768b1bd0dbff0b","sha256":"ef2477917ac802f015f06093f801b53c07f7747ba22f1b0e8931211311bb5eb8","sha512":"2914614df69c42767c62e3e459fd853554f05f4f6c3d90e3487c24692f7e17771329046682c1753256991043fd6c199fcd6560924e28a01f65643022675804dd","ssdeep":"96:oRRCHVgJyUFKy2jR69CmtsPMF/lFq7fK1GGwLH1v6ya3W73hF/NRidL:MKVgJV2lfHPMxkfewBDa3Wjfi","tlshash":"51e1bf6531c57c185bae233f4df687ad757f0dfbc9631484b28b4b28415024a82f9adc","first_seen":"2026-07-04T12:10:15.007658Z","last_seen":"2026-07-17T18:44:07.333151Z","times_seen":8,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/max-royal.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.567Z","timestamp":1784036014567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/max-royal.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9781\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9781,"size_decoded":10064,"mime_type":"image/png","magic":"PNG image data, 150 x 45, 8-bit/color RGB, non-interlaced","md5":"28713c30efa418113276a4137211c14f","sha1":"49c442f7a034938a025315f43ed1aa3c46dd9aa4","sha256":"0d0860e283d1efde560e52a04f2a3e350d08795a79799b0229ccf6a181203b50","sha512":"607ed1808a54176cf72ee1859ee4c51c04028839553c435bae80b5c724cc798f00452923e4b01416cddd071cb9b392d200c773a50d94f894b073c90c9b7db73b","ssdeep":"192:GrghCAMiXQ7dAK5lrGUqI7BSL1YJligIQ7U4SAwlOzhqYXEMna250Ye0u:GriCAMiXQ5rrGwEL1BgIxOAYUMa25bev","tlshash":"1c12b0aa402e7ed2c9501df9a04d9fa9ae5201417e5056fce8079d7fb0d7c63f2c05ab","first_seen":"2026-07-14T12:24:12.305394Z","last_seen":"2026-07-14T22:41:44.101447Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/hovarda.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.559Z","timestamp":1784036014559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/hovarda.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26914\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26914,"size_decoded":27198,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"b17fa87adbf4853184802f3a9156f556","sha1":"e5ab6566044b8b51ba08fad5c076245e2f6f8f25","sha256":"600d01dc65e1ca2c2d343c70c9ad8d8b7cb123f0945ed8d74328266ea5736d3b","sha512":"64a1b13b231edc9885651f9d50744a87cb9df9b4eca607ac92f9a3641749a0af8ddd42137155763f9ab5c25ecd5ef9923599a5214754419ae8f1d7567670f997","ssdeep":"768:LVA4e1vl7ovqfEcqRA0Fuz0j54zFal0YZszKco0hl4:2fpAFuzCZSTHo0M","tlshash":"fac2e184f2ae31c98404fe4ad8b414116a23e48dbdaf03a4e8b92461e50f5d6f6f6682","first_seen":"2026-05-29T12:25:45.811215Z","last_seen":"2026-07-14T22:41:44.110905Z","times_seen":6,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/hasbet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.577Z","timestamp":1784036014577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/hasbet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12275\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12275,"size_decoded":12559,"mime_type":"image/png","magic":"PNG image data, 202 x 42, 8-bit/color RGB, non-interlaced","md5":"70f0c2b4daf54778a36671caeb809d86","sha1":"153380fd2741a85a9c95aa034c7cefd79ef04952","sha256":"ef583a2a0644c0486465548d156211ef44b01b93ab33c9081b75830329c8a544","sha512":"01c0acee9f4d19720981e52b3c014ebaa3c832384591135063a91f9b27194f7127d084201b13f55cd90572f8d7177e13cedf5767c4c3265af9bda0f53a167a13","ssdeep":"192:COwLeLJKk6o3y9nN1QQgj+H2X/LdeZvzyT03HUR8GXAmROIIkTz/KXaOo9NwG++Z:CZAEQC9NAj+H+LdeX3k8GXAmOkTuq3Gm","tlshash":"f642bf294ff87ac9539cda17132b5d67aa6fbf3d428f068ed964a1c061d0057046253e","first_seen":"2026-07-14T12:24:12.277026Z","last_seen":"2026-07-14T22:41:44.089562Z","times_seen":3,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.970Z","timestamp":1784036014970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwV6-x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25284\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 09:42:14 GMT\r\nexpires: Fri, 09 Jul 2027 09:42:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445881\r\nlast-modified: Mon, 08 Sep 2025 17:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":25284,"size_decoded":26097,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25284, version 1.0","md5":"fc575ebf6f7c3646d13d9386cf8a86e0","sha1":"779e9507b31992161d36df9f8a78ee73a6e64225","sha256":"811e11966d29f3a01fcb19b087b61ac067d380665a55aebb7fcdf2cda95e4a93","sha512":"bf1f6890960e5fe79619d0a7757b95b9e422e3aa5634b1fcfe7b59f018234ec9aff01ae70d9b3593e1e5ddde78e716139c443e5ab0741a61c5d6b1637397412c","ssdeep":"384:dZgkQy8vw6D97NySvnt+kywHJ0WQ5k77oyquIw8CTTu36ioguDDYdiW3I7Oa4Leq:dmJ0G95ySAIHJvd2uIw86zioFA2OC5cL","tlshash":"63b2f14db61d308cfa05cabf0ecb8aba2031dc44bd5b39c4f217928739f6a6599c4564","first_seen":"2025-09-10T18:00:33.205576Z","last_seen":"2026-07-17T22:51:15.334018Z","times_seen":2603,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":23,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.978Z","timestamp":1784036014978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:24:54 GMT\r\nexpires: Mon, 12 Jul 2027 12:24:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 176921\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-18T02:19:13.570507Z","times_seen":18590,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":47,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/js/main.js","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.511Z","timestamp":1784036014511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 Jul 2026 13:23:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 798\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2445,"size_decoded":1045,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d83291623f39d3e85c2d9fb584606fcd","sha1":"e1f2322c8d99f6c0cd261c565ec57a144d7cacd1","sha256":"bbae22387190ab25669cc3632de2c390ecbe170b4d47f811829be0221a65a293","sha512":"f286790fdb81d1f5f17466e8700ef22c75e84f1328979e212c875fc032019e14e074805793e284e3c018411a2f6237486eb17041dd150cc64ab105e9633dea12","ssdeep":"","tlshash":"0351322b7ea12f3245fb69fb23cfd2a9353944878889c503297cc5814f50f60527aed9","first_seen":"2026-06-06T14:17:34.194805Z","last_seen":"2026-07-14T22:41:44.13299Z","times_seen":6,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/casino-metropol.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.541Z","timestamp":1784036014541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/casino-metropol.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9201\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9201,"size_decoded":9484,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"24817f4b92e9c5cf20e097dce48a1212","sha1":"4e8dfa91eea534379c10ec0f671172c9b774a005","sha256":"403a92b1e9d6368a783640c21178e6e03e58cb66292d469b1cbd466882c708fc","sha512":"38971d47b5b8668d9c6cc832f2b4339ab11112c4790ed4800d91cf3ed1f7d6af6b9d83e62f15a81e4596bf701a6f0f749d0b6a8c3202ee23f9ac27350f5b4cc2","ssdeep":"192:V7YdL3Ablcsr7uxglsxG/M0vLMs/3KCTEh6qyR2P:V8djARcVxglNUQQs/H8e0P","tlshash":"2912bf16ba077dbc69cc5291a2f925dbc903263d42035d884b8c77eac858235dbb427d","first_seen":"2026-05-29T12:25:45.789698Z","last_seen":"2026-07-14T22:41:44.120146Z","times_seen":9,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/astekbet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.550Z","timestamp":1784036014550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/astekbet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6414\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6414,"size_decoded":6697,"mime_type":"image/png","magic":"PNG image data, 123 x 34, 8-bit/color RGB, non-interlaced","md5":"96ddb7398069b55428c9338c3c5b94a3","sha1":"92427f5cb00ece81f09976ac59d399f44d3aee03","sha256":"0b0f4cf1d493b6d97bb9c9144cb9b1cf8a80546561a3b5ecfee36fad9c89a437","sha512":"58d5342c90c0443fa508803cf119d71009c9579fc80d7c2e8483249499810659e9faf43891fbdf78dac4d5e5593ac71ced187a83c0647b3f518ce367855dbdf5","ssdeep":"96:tlfAVn5Nfzp8sSoZAO+mQRhkdy+/vHAQ5ea01xQ4pAqqK2fqX3qQFocD36pOe:vc5Nrp8sV+tRhkowfnYP1x7fXaQaS3qX","tlshash":"a8d19e824182b5ea41e53f1c712c04a7b25404b9a29fe67fd4c246deffe2f5180d7e86","first_seen":"2026-05-29T12:25:45.851087Z","last_seen":"2026-07-14T22:41:44.103725Z","times_seen":6,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/jetbet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.552Z","timestamp":1784036014552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/jetbet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4605\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4605,"size_decoded":4888,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"98d3da9c87837586d8ad7e28a1af6921","sha1":"80d56a51ba537f2300cbfc9e3355c8bc79b084f8","sha256":"1738eeee8ad407280d4decaca77d3373a16f7dc579234012090850c6ce213e19","sha512":"b405b2051bf9fb0e2673a0ee2d72122d9634add0e362824e3733fcfcebbbdd0457a4a3dd5883588416466d270b87a7afa2e55c2836cb95f57ade62ecb5ac3c1e","ssdeep":"96:UNHRr2s2EIubYrRbR8bbH0BkCJ7rAc5y+1t4FZxFmEg:ORrGuMrtsbH0B8at4FZxkF","tlshash":"38917d5293e4d4744760760b46f1ae8454ee81384a2a02840efdc348f7607fc28a46ba","first_seen":"2026-05-29T12:25:45.794594Z","last_seen":"2026-07-17T18:44:07.327422Z","times_seen":11,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/jokera.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.556Z","timestamp":1784036014556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/jokera.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5667\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5667,"size_decoded":5950,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"78a7ce9b73fe4d9b5c4cb4a9d5d7415a","sha1":"472d4f74d64f561133fe22ffcf2b50e42646d6cc","sha256":"3a87a73d7623df1108105e8cf4554c390cdec2107ab03fb7b804ebebbfb92878","sha512":"478b1931a23d3bac3c455ad2276dba7abf85608976fc92c04144fb9628a124d1e97508737a77a4054ce3a049055dbd372972d2250ace9bc8c9be8085413ea550","ssdeep":"96:YRn4pZf9LUAbtZEx2LVUuYBSyCHEXD+VFilBhpCot/cSuuadREBI8veg5bgjfgqL:Gn4pLUAbtZEx2LVUuYMs+VElBCgUr52m","tlshash":"8dc17dd19b4c6a35708141c719249c3ee69dee29d8e980927bb7c116aed3fdc88df049","first_seen":"2026-05-29T12:25:45.814115Z","last_seen":"2026-07-14T22:41:44.136095Z","times_seen":9,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/amkbet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.566Z","timestamp":1784036014566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/amkbet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7201\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7201,"size_decoded":7484,"mime_type":"image/png","magic":"PNG image data, 115 x 42, 8-bit/color RGB, non-interlaced","md5":"63fd8ee8c3524f48b970e3b6eb6612af","sha1":"6844e9cd1004433d63622e1b07e9183513923858","sha256":"ac4aa9a63132e0f541abff0aa978c36f587bb348ce2955f8e23803a1dc23d129","sha512":"c8d510a9c9d53cfde0d93af5f72103cccf5dd7710f093ff3b17f11b3e37648e1a71fbb848b171a9aed15a1a53698173a71d676783cef11af32a817a42e7df594","ssdeep":"192:Ls03fiSrVTKj3hkpia2JwtCD3LO/7ILfad8jslSdO:LxKSrVTU3hkph2eULkAfaavdO","tlshash":"fde1be0fe7a559d041a6ccb436cded6978f00ab6a524eca4093edc421a8b5df1d7ca0f","first_seen":"2026-07-14T12:24:12.330173Z","last_seen":"2026-07-14T22:41:44.066967Z","times_seen":3,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwWa-xsaQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.979Z","timestamp":1784036014979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/sora/v17/xMQ9uFFYT72X5wkB_18qmnndmSdSnh2BAfO5mnuyOo1lfiQwWa-xsaQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 08:32:52 GMT\r\nexpires: Fri, 09 Jul 2027 08:32:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 450043\r\nlast-modified: Mon, 08 Sep 2025 17:59:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12156,"size_decoded":12969,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12156, version 1.0","md5":"05dc9078cb0637dcbb37001703a629c3","sha1":"5ad15d919ce507ebd84ba6644c087bfd9d683365","sha256":"08e1ba85bcb55277782f56766af09467dfe18cbeea49704203100c5797ac4cc5","sha512":"8fa0c426b3dcf5eed41c3af6c71a8fd0b19dcc060569bfea1cee6428297705d141b0b90dc3acb22acd13d4f537abc37b0a5d4f6f39497d9d513472c7f0c6c2b2","ssdeep":"192:TtMeAUCS7fKiru9mFAAklYb5SYEL1R03gn+nHFjUsUORA44FvbQ5WbbTcc+/+et:JxAc7zru9MIlBPpRlUYsNAtl1b81/+Y","tlshash":"0942dfdd6d118a11f09ee0b5677a25506c70ea3c26aec333011ab2b057224179b7d4ef","first_seen":"2025-09-23T18:03:42.680461Z","last_seen":"2026-07-17T13:41:44.820648Z","times_seen":166,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"statz.aatoolz.one/track.php?t=8d2ee7c121d1cbfae89b9c22fd4ef23a\u0026collect=1\u0026u=https%3A%2F%2Fyenibet3.one%2F\u0026ti=En%20%C4%B0yi%20Bahis%20Siteleri%20%7C%20Yeni%20Bet\u0026r=\u0026sw=1280\u0026sh=1024\u0026l=en-US","fqdn":"statz.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.996Z","timestamp":1784036014996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"statz.aatoolz.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 15:40:42 GMT","end":"Wed, 30 Sep 2026 15:40:41 GMT"},"fingerprint":{"sha1":"47:13:73:08:6A:67:8A:DC:09:4C:53:D2:6C:78:84:B6:A0:59:9F:5B","sha256":"7F:55:01:9D:48:69:D9:EE:D8:7C:03:29:B3:CC:88:08:8F:7D:EF:AF:F4:49:25:52:86:83:B2:0B:93:ED:EE:61"}}},"request":{"raw":"GET /track.php?t=8d2ee7c121d1cbfae89b9c22fd4ef23a\u0026collect=1\u0026u=https%3A%2F%2Fyenibet3.one%2F\u0026ti=En%20%C4%B0yi%20Bahis%20Siteleri%20%7C%20Yeni%20Bet\u0026r=\u0026sw=1280\u0026sh=1024\u0026l=en-US HTTP/1.1\r\nHost: statz.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Tue, 14 Jul 2026 13:33:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":42,"size_decoded":239,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-18T01:40:20.685802Z","times_seen":994456,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/maksatbahis.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.560Z","timestamp":1784036014560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/maksatbahis.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9968\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9968,"size_decoded":10251,"mime_type":"image/png","magic":"PNG image data, 153 x 59, 8-bit/color RGB, non-interlaced","md5":"02a4c5b41c1c75f5ccebb5528616aff6","sha1":"10f05745f12c6c714c97631ed28bdec6e7a43f28","sha256":"2d36eb13e99536cbcf4392f60abc51db4cbcd2a1384eca500dcbb2cce805744f","sha512":"8741b6dcc148d424cfff1704172157f0a21ee5a637df85816cce2519f890fd985f352369f9edb625f12a93f0d5253b61941c40fed1d211414792648508ea0833","ssdeep":"192:RbH/DqJyhA7pe9+o05mKdWGU2m5c/1+H4k65n4YhCOHLG:Z7qJyhD05mKdbU2mjB6N4YhCOy","tlshash":"3422b0cb4052237e208ae5958070395cde3e3e9e5cedb6870069f33b505eed998c8e78","first_seen":"2026-05-29T12:25:45.834714Z","last_seen":"2026-07-14T22:41:44.121035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/images/favicon-16x16.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:35.181Z","timestamp":1784036015181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/images/favicon-16x16.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 790\r\ndate: Tue, 14 Jul 2026 13:33:35 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":790,"size_decoded":1072,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"91e193c6dea082a39855394d4559a0e7","sha1":"32b716afc35ed26aa00081ea7b9c81867d6e5fd1","sha256":"d7da6cefdd6b13cf51b9f9e2fe7d53c92bd263a22a5817a461fe89ca5b515070","sha512":"9d6f54ce5665607618f2e51693d986e84024ba2539a6b3eb37eecd6d69eab6f61e0a40b0ceadaffc14d37f1f430e2476350bc5fbb4f292adb270a8feff3b889e","ssdeep":"","tlshash":"7001cae2e6624dbdc76483ada218462a7ec4904d414701c44d3b314d23d803d4459f7e","first_seen":"2026-07-14T12:24:12.264688Z","last_seen":"2026-07-14T22:41:44.113864Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/betlora.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.580Z","timestamp":1784036014580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/betlora.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9779\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9779,"size_decoded":10062,"mime_type":"image/png","magic":"PNG image data, 155 x 55, 8-bit/color RGB, non-interlaced","md5":"70a8bdce1842b01f0e43e504a5265fd1","sha1":"3ca6be72d8b14cdc7ba2acf6552b9d833e266098","sha256":"ece3361fae7de6a4de05d95509b1cbaebe67e97799f7963415fae8e272a36a06","sha512":"209c23e8c3b20827ba0eaa9f3ab4a27e3097878fff32fbac9cc9760cecc4a0f2bd6463f6c873569121bbe8a166e417f09a8ff25a55ca4aaddab8344b8d6dd264","ssdeep":"192:aBwXLDyBH02nGtphZWXfqHnu5CqGzOH10aE4sYRgbEzIZRCR7UA/4gV7hmpFLvEA:nyBHVGtpSAuEOV0ajgb2h4gcFblH","tlshash":"5d12be4025f6351da48774728d523b3b7b1ac43b6c7771a31910a8feacd25902b7f15b","first_seen":"2026-07-14T12:24:12.24805Z","last_seen":"2026-07-14T22:41:44.14547Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.489Z","timestamp":1784036014489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 13613\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"17fcf-nuSWzJuqrli5jn/B60bjV42vgUM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220077-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 2894978\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N88OZC1opIJGJ7n0tVX5TKWReeFjYI3%2BPl2fON%2FmAUQn0c6a6gfWXznsuMxizvzLRNUThwHm40AC2pr78No%2Ff6cumIwfGsqhaWsKBfTCUQ78kJD2Sr%2FFm2iUHIth3jha14U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1b0e664091b0b02-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98255,"size_decoded":14743,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1d14ac4000dc4a8d3557b256248d9000","sha1":"9ee496cc9baaae58b98e7fc1eb46e3578daf8143","sha256":"4ffa6bea4304d2eda418683f56261685ed47bf00995039f27e5ad62d53938d2d","sha512":"cb098f6eec464b8709ec6c70097f9b089c1e79ec6dd38ed9614d873f9d9658a6e9267178fd9cdfaf6068d7d2780963d766695e56eb10f5dfff441e5bab444fef","ssdeep":"768:Tqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMR:KOocm4FJwZ5ijINRDlIia","tlshash":"d5a3eeba914f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad73dc","first_seen":"2024-01-08T15:48:29Z","last_seen":"2026-07-18T02:03:07.215444Z","times_seen":4199,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":8,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/css/style.css","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.491Z","timestamp":1784036014491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 Jul 2026 13:20:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6106\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33295,"size_decoded":6604,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"efdc78e49e143d18eb09ab36c2a0312d","sha1":"5d4fa38bbf4972bea7a2a2d018e019285966ea5f","sha256":"6e510b9c2ee1616ae970d686a802c4d190c34e5c96bf62a6b1f8dae4aa4f04ea","sha512":"1d6e7218afc19d2888284f73aa1861cc015e31fc5e3bf12d3394b2f61e2aa165b2b4209d808deec21ce674262c4b9f57e421f8d722aa0367813f86251606303c","ssdeep":"768:ji+AjRxDHxbUedFtBkTGLKFX2vF4NPKKFjE/ShvAnvA:pGRxrxbUG/BkTGLKov6PKKFjE/+YnI","tlshash":"c5e26242b71492a07827a6b87b97eb9e7318a402d446db7dbfa5000ccccc3fd45a678d","first_seen":"2026-07-14T12:24:12.25006Z","last_seen":"2026-07-14T22:41:44.1468Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/spino.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.532Z","timestamp":1784036014532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/spino.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:22:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3990\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3990,"size_decoded":4273,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGBA, non-interlaced","md5":"eff17837bb858109ab3d5bba73ac1548","sha1":"e442037e0ebdde446813fd1190bd2b8b6d14a573","sha256":"0b6980b0d9244d70c84b299b1e707439f7679d678b0ec880ecb36d65cbd56082","sha512":"a65f8535f62a84d537746d8de1a422d09529e22e391f2fec3b7f9ce95742ce84247cc4dd9ce946e14c8203baf29cd982efeb2e9a3b0276abe12b711bb2f837d4","ssdeep":"","tlshash":"96815ba414d0f3178f6308b621bbd8ad823f4f92497a56b9c0eec638581d234866d3b8","first_seen":"2026-05-29T12:25:45.783699Z","last_seen":"2026-07-14T22:41:44.098082Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/milyar.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.536Z","timestamp":1784036014536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/milyar.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8976\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8976,"size_decoded":9259,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"45f2d17dcdcce6073a31c68f988f4ea0","sha1":"0c1fb5a60a782ecaf9395c5c780245b88160edc0","sha256":"812705e17d72373b766e7cf1f239d9f890a0645103f92ab38940a9599ef9a4a1","sha512":"f1330be000d0ed814b22d7298e422c750c2be79422f719e1067c8c90aab9c82c7d6a64b5eb2e866ababf7d8ff42756d1133357d61aaf3fdc23d5e9e5f5254b1e","ssdeep":"192:zTQOqHivee+e8Cdul5esxVjOTT622nepu2cKvYQMYimrj1:Nvee+qyNOy3e9cyYJYLJ","tlshash":"6202bf0241aec72215038764c14a83a7da0bffd887a48375613a55532353265fcdbaae","first_seen":"2026-05-29T12:25:45.790821Z","last_seen":"2026-07-14T22:41:44.105165Z","times_seen":9,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/tempo365.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.562Z","timestamp":1784036014562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/tempo365.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:22:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19176\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19176,"size_decoded":19460,"mime_type":"image/png","magic":"PNG image data, 258 x 61, 8-bit/color RGB, non-interlaced","md5":"e837a24c3ea92fbedcaa12e6ff2884f3","sha1":"f266b9e6205f0c12a33727bc90ddf79c6beeaadb","sha256":"6f0ff72a16226f9240b8ccdb866c60401745c90f480f936fab574c254d0bfaf0","sha512":"70fed947b894d7a3305f531c2a260dd66fc0341fcfff8a36dc23b52fde1d5d1b2e3103d82c7f2c5ddffb75804facd3e913ef8bd15d7b79646ccec17793a0275b","ssdeep":"384:wDWs6Oy/dMOE9GQDN7w7abpgFdAJB26o3nsHFFNCONKm3rgWiZ:whyaXDqQpgLlQAOXEWq","tlshash":"6782d0d1cec58abbc651f44507403459e8296d7428edbc3fd8361ead3b670b48eec229","first_seen":"2026-07-14T12:24:12.328981Z","last_seen":"2026-07-14T22:41:44.107095Z","times_seen":3,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.985Z","timestamp":1784036014985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 474293\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-18T01:41:46.939716Z","times_seen":238093,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":71,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/images/favicon-96x96.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:35.180Z","timestamp":1784036015180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/images/favicon-96x96.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6124\r\ndate: Tue, 14 Jul 2026 13:33:35 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6124,"size_decoded":6407,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"44cd2d2e521bb4367c90296fbc8fba2d","sha1":"9750cd2fa0346d8be4af65cc415feba64f5d4f53","sha256":"cadc454dfbead2b7d147be551b233f961cc167a0e638f78579c1a322b3c15e5e","sha512":"5826d72eec8985aea1e1a977a1f700795af7d4ede1323c6fee22bbb6231c103a5c576415ba8487f087f0cc27f76c3edace43b2540a6af3a592f079c5996782c6","ssdeep":"96:0rftC3lEP/LMK94Kl64VBdJV7po53DjuSVy3oypmo0CxFpmqRE3gSkwcQWUAbXB:Eyq/QKGKl6ULVIuSV4oypGeFQqRWnjvU","tlshash":"20c1ae7269d74a0044505592db6e40ff6734c19b75702ffc023f2f4ce2add5a119e657","first_seen":"2026-07-14T12:24:12.28208Z","last_seen":"2026-07-14T22:41:44.118739Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T13:33:33.686Z","timestamp":1784036013686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Tue, 14 Jul 2026 13:33:33 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94268,"size_decoded":7643,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"78323b2ae740713641e39e08bcb0ae93","sha1":"9671fdab537c59be747b5fe740c5ab86ea60cde4","sha256":"a6e095fd7a3fcf5a512d0c8357a8ea4d54e9da08b8d6d4af49a18ff2d2aa9d31","sha512":"a010078adc0b9737ab910e54d76f0f37c69611dfc77e160f45fd5388f6747b1cce888a3fae7b42f275ba70e22b1dee3695c5ece0d136d59586b26cb452d78787","ssdeep":"384:vpzXEFyPzVXe3y0kMPa5iIUBk79eiMgPU17X57T7Px5yHPGPrxCxNfsE0DP99inj:vpzU3IoMg7QaxCmr2b09Evb","tlshash":"2f939658e4f278bb0697e0c25b624767bec2a297c6675a0937fc07d11feed42ac13016","first_seen":"2026-07-14T12:24:12.271814Z","last_seen":"2026-07-14T22:41:44.135052Z","times_seen":3,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":33,"connect":22,"send":0,"wait":47,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/bahibi.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.546Z","timestamp":1784036014546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/bahibi.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6001\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6001,"size_decoded":6284,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"3292cb7ee124075c17558eb5402174ca","sha1":"d769117c32632f6a80c808bfd7db63d59c2917ce","sha256":"f5b7f00beaba524ea9ff2494cf6014ad25f3e2271aaeadc5232c22c720a8401d","sha512":"ebcc334fcfa7639b3f1585b61bff6bf20399b1897a23d84af23a7bcc0dcafb17d4ddc29e5390cbdc3a3ec1714a54fb84bd6470322426046f5355801e05a02cdb","ssdeep":"96:CHPb+qSbwz++zoc9HeqGCqYo32OVE/Z7vrOmerkgvwFtjoGKPKHpj7pyttOBZcvR:mqqSbM+ZbqGjmH/Z7vymS782GKP23ytT","tlshash":"cac19d99bf0828623805866cdb8558095ff5a30aa768aa0f95dc9510ff29ac6136b2cd","first_seen":"2026-05-29T12:25:45.828675Z","last_seen":"2026-07-14T22:41:44.117414Z","times_seen":6,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.975Z","timestamp":1784036014975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:24:54 GMT\r\nexpires: Mon, 12 Jul 2027 12:24:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 176921\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-18T02:19:13.570507Z","times_seen":18590,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":63,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/hitpot.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.538Z","timestamp":1784036014538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/hitpot.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7328\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7328,"size_decoded":7611,"mime_type":"image/png","magic":"PNG image data, 122 x 44, 8-bit/color RGB, non-interlaced","md5":"d0466d64c8778e6c666a722cb6a852e4","sha1":"ead34e538dd8c5ad335838a4772b5ea88e7e464f","sha256":"9d64fad24615a8aaea0a6acacef12f2f73ece8ed8bc4f8aeb514bca76a603802","sha512":"f8f5d784653eb57bbe744b8090f6d5054a3a29ea27b49bfe6b598eb4b1771f841bb3dbffbbfbb0b62755476c169d08726bc892b82797e087da164bb0a8fb0370","ssdeep":"192:bjeoBdfirEFg2ZrQInSZSR3Cj7PqyChuy:bjfdficg2ZGZ77PJG5","tlshash":"aae1beffe62a17aa05a4c93dafd8567c0917643d81ba902332038054dd1ff4498d10ff","first_seen":"2026-05-29T12:25:45.829517Z","last_seen":"2026-07-14T22:41:44.055741Z","times_seen":9,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/casino-maxi.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.544Z","timestamp":1784036014544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/casino-maxi.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9370\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9370,"size_decoded":9653,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"71fc6be72ebae974663962ba77ed01ed","sha1":"b0e8f26f5448532922635380a54a6f34f0df7067","sha256":"9573f0feaacea4d3ed66adab60b93659fa95e3f727c6a3f02ba618ad3cd12335","sha512":"963cebb7dc1bdb3ba80d50b410507d6383f323f2e9d943019901bf5fdc8640f933f75201232db4ad2244421516b2c048f7174f90eda3f6daf6d3afce3c4640e5","ssdeep":"192:xWNTBaSsWEF3XpIt021gQ2gkh0e3y0ZSVp1gbUBmlDlYT:WIS5EF3XqJyQ2NGeLSVp6beADl4","tlshash":"2012aec365c91132199ae0b84eef3c388a7411a1e3d113e489e841da37bdb62492cb2b","first_seen":"2026-05-29T12:25:45.844195Z","last_seen":"2026-07-14T22:41:44.116794Z","times_seen":9,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/casher.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.555Z","timestamp":1784036014555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/casher.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4299\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4299,"size_decoded":4582,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"d8ac8806d4f24462171b5ee25928f159","sha1":"cf8ec064bea54157330456e5b61f094088303e36","sha256":"9ee86713f9b1fc210043ee4cf6f0e8fdd0691de566f15e4d99af3a6967ee470e","sha512":"e63470d44822f3c219a701783c3ffa7b8efd9d76823532f3eae7b75782fff071d74330ba3e168ca74ef8991d97caeb21fa4339928218fc8566d82a6614c5960f","ssdeep":"96:xcDX6/jLNQM5b12ANoBCSs/aMN+PcK5zXF:GDE5bALBCzbN0cU1","tlshash":"af916ed7064165228da074f9ad65d15f1846e4d1a64615c48e3fde7db930ff0ae3014b","first_seen":"2026-05-29T12:25:45.845007Z","last_seen":"2026-07-14T22:41:44.152994Z","times_seen":9,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/teosbet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.585Z","timestamp":1784036014585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/teosbet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:22:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8020\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8020,"size_decoded":8303,"mime_type":"image/png","magic":"PNG image data, 128 x 42, 8-bit/color RGB, non-interlaced","md5":"ce7661dc1f0ec37853415fb7e3b1a2c2","sha1":"9a558f109295752f6913272b73bc3faf6aee1d42","sha256":"a860b377129039851f56c06dce99beaf104e97b92e050d68e739348d7cff416a","sha512":"0f6461093ce31461c4c4de716aa7a35906e12d759e9011e6738e1ef6764c6c1c2f2d22acb6be31356bf04f0e21121955795dd2aeec260844f9eca3da9b9fbad6","ssdeep":"192:aqR9vCknnMaxZ/vGnkAdBOXxhgxCN0j6/3dKqH4IpA9p1KA7YPfzOI7iOV89:ZYaxZWk8fy0WPdKqYpEPfzR7u","tlshash":"bff1ae0d117548c88a2de5305f7e5a898422a53eddc7ff29f28893fb859e09700d98bd","first_seen":"2026-07-14T12:24:12.325399Z","last_seen":"2026-07-14T22:41:44.138454Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.969Z","timestamp":1784036014969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/fonts/bootstrap-icons.woff2?dd67030699838ea613ee6dbda90effa6 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 130396\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"1fd5c-Agw8b5KAoxXoQl1/kuFbzQzdobI\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220181-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 2457343\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cm4R1BYOdllRsSqbhLYp%2FzXl%2BpqDtyEgv6g9ZA00fdeLZLv1ACn9wv6F%2FG6AEfOIwlOwNZtslXT%2BF%2Bb7PdpvFeWmNGBgwSjr6Xm7kEAZe6pyQHdN%2BY0RuoYpzxpQoQhlPI8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1b0e665a9f60b02-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130396,"size_decoded":131496,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 130396, version 1.0","md5":"cc1e5eda776be5f0ff614285c31d4892","sha1":"020c3c6f9280a315e8425d7f92e15bcd0cdda1b2","sha256":"476adf42b40325098fcfa8b36ab3e769186bb4f6ce6a249753e2e1a9c22bf99e","sha512":"8ea88eb326ce57117a24f88abf9ef1740ff55a1cf6d09d8bc1e798132d44bf237aecff44253ef60c9eb3fce108cf4f7d8ea27e6a763a9338c7d6204247b2cc60","ssdeep":"3072:IBqhyg8Dr/UO5b2uP63F92P/ke/zjK9Ec5DGl0zdxxNSw1F:EsyH/uuOsP37j+NK0zdvNFj","tlshash":"b5d312e3ae1bd5965ccf2adb8431382d5e861ceadd039ff265b477ec579182028c025e","first_seen":"2024-01-04T23:06:55Z","last_seen":"2026-07-17T23:17:56.421066Z","times_seen":15344,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.986Z","timestamp":1784036014986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://yenibet3.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:24:54 GMT\r\nexpires: Mon, 12 Jul 2027 12:24:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 176921\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-18T02:19:13.570507Z","times_seen":18590,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":56,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/1xbet.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.530Z","timestamp":1784036014530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/1xbet.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1477,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-18T01:33:52.063064Z","times_seen":141359,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/betroad.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.537Z","timestamp":1784036014537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/betroad.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8057\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8057,"size_decoded":8340,"mime_type":"image/png","magic":"PNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced","md5":"c871d98fbf2a0ae13a6b037b7fbccbef","sha1":"39dec7f798ae403c6e173db53ef09fdebebaf28b","sha256":"d707ca4ab60efbf90ed9980b6c0685cb604434dab02266b1f81fe1ccb530a68c","sha512":"84d8def6ea8cd08d4fa0488f75c33622145ba9bceb40ff63098bd8e5360ba14cb556ade48f183d9a27539bc6232c449d5f950bdbf384e0fc16b9ff1f0ee42004","ssdeep":"192:AS+LXbSif5QypSVr6+uVL5jzIYWe2F3hU5mKtS9KDXIuf:AxZP1zIdrhU5hLXzf","tlshash":"13f1b0f2f69826f2738c7b4fab032a745284151e81bafd99d49347ad30588e1ad90993","first_seen":"2026-05-29T12:25:45.793385Z","last_seen":"2026-07-17T18:44:07.31822Z","times_seen":11,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ticky.aatoolz.one/flow.js","fqdn":"ticky.aatoolz.one","domain":"aatoolz.one","tld":"one"},"ip":{"addr":"183.81.169.79","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.547Z","timestamp":1784036014547,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ticky.aatoolz.one","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 17:09:29 GMT","end":"Wed, 30 Sep 2026 17:09:28 GMT"},"fingerprint":{"sha1":"44:69:28:77:A2:27:42:1A:47:C1:81:F9:B7:63:48:A2:18:19:0C:46","sha256":"92:C4:DF:95:D5:97:B6:1C:5A:F9:C1:8C:61:B4:9F:36:9A:94:93:C1:37:77:49:F4:7E:7F:57:D8:6F:29:E8:D6"}}},"request":{"raw":"GET /flow.js HTTP/1.1\r\nHost: ticky.aatoolz.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 02 Jul 2026 18:08:22 GMT\r\netag: \"1323-655a4b195dbd5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1946\r\ncontent-type: text/javascript\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4899,"size_decoded":2235,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2f2dac3670e072b9ba4b7a70851fd65f","sha1":"60353ff763707fbf432aadf19807498dcb7839af","sha256":"f425f140fa5a47920838caec85bdb8c4ccce72a3459e2b96fb520772c95056af","sha512":"ba9841e5ad9b7777d89b360bcd0f51ca59d8ddfebb77ce57135009fd95b6b19e47791530e296945c16dbd1baedd68eee6f735dd537264bfd2480569292b99656","ssdeep":"96:7OYkSBzt1B7cRMVkrhBvfAqnKCwoIZejCDDvC/06ta:yYkSBfbILvzCjwjC/MI","tlshash":"4ba1b63bbe7300bc6a2f805f66bee569316400235403ec61b46ce4199fd0d66167bafc","first_seen":"2026-07-14T12:24:12.283168Z","last_seen":"2026-07-14T22:41:44.096329Z","times_seen":3,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":94,"connect":22,"send":0,"wait":24,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/nakitbahis.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.561Z","timestamp":1784036014561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/nakitbahis.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11569\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11569,"size_decoded":11853,"mime_type":"image/png","magic":"PNG image data, 201 x 55, 8-bit/color RGB, non-interlaced","md5":"46a199f468bc0f40a1effc2a9fe01636","sha1":"c177daa9fde99e7e7f537e85fcb68b02abd87016","sha256":"8aaa0ba8b16dfb7305ec2ec0f12ead828ae54dfc4d13ac4276c8adae40117127","sha512":"2f78673299d77d3f84a64e547a7aafef0cc015f6912bc068658ee771d6b1ed7d8576138b16e5118d1a29fb33c40d306bc4de30a555ad50f53443f16e35bbb049","ssdeep":"192:WDqUs51APcNK9sDzsQfelVwd0Gl84LnvFnWcFz6Akau8H4BHqSrA:WS5+UNK9sEQMYvJpfFulBH3s","tlshash":"1632c0d77d2e026eac6308cf0df18910ee243db715ff065025af8a5559dc6e279207a9","first_seen":"2026-07-14T12:24:12.254337Z","last_seen":"2026-07-14T22:41:44.099088Z","times_seen":3,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yenibet3.one/assets/img/logos/bahizz.png","fqdn":"yenibet3.one","domain":"yenibet3.one","tld":"one"},"ip":{"addr":"209.42.19.29","port":443,"asn":35575,"as":"Vaioni Group Ltd","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yenibet3.one/","date":"2026-07-14T13:33:34.568Z","timestamp":1784036014568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webdisk.yenibet3.one","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 12:15:35 GMT","end":"Wed, 07 Oct 2026 12:15:34 GMT"},"fingerprint":{"sha1":"39:D0:2D:9C:5D:96:30:60:CA:A0:7B:4B:F8:C1:88:B1:4D:AB:53:E0","sha256":"87:3E:C0:4E:F6:C0:17:68:71:0E:AF:65:15:EC:B6:07:DE:1A:6A:1B:AD:22:B3:67:8C:A0:4F:47:3E:15:F1:4F"}}},"request":{"raw":"GET /assets/img/logos/bahizz.png HTTP/1.1\r\nHost: yenibet3.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yenibet3.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 21 Jul 2026 13:33:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jul 2026 13:20:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8398\r\ndate: Tue, 14 Jul 2026 13:33:34 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8398,"size_decoded":8681,"mime_type":"image/png","magic":"PNG image data, 163 x 40, 8-bit/color RGB, non-interlaced","md5":"8d6f08a4281bebbecc5f67ed01391365","sha1":"b81383326e3ab71a555cb22fcd8c3f48da01b4f5","sha256":"e9b671d8fa6dba594ef25db6720561d8ae56b27e3b68521c614d653f229c6a93","sha512":"a3d25183373049081cf4f335736049f64848b8eea5ecb76092b78b79f0280a16c5624bdfac7173c1d3c84d42a407eeb8fff37e62e2e2ae9387e46f95f6ca12a6","ssdeep":"192:+iv882FTG2noFkZ5/ub1Txk2lQlZ2wp0eU4jYyyEaiemEE:4GwZ52bhxkV2wp0kjY9jE","tlshash":"3502af91fdd65bbe9c21df1b968eda2494229c0508c1a5152b96c2c53cc1f7608989eb","first_seen":"2026-07-14T12:24:12.331063Z","last_seen":"2026-07-14T22:41:44.086563Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-14","alert":"Phishing Block","trigger":"yenibet3.one","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"yenibet3.one","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}