{"report_id":"73bbfe37-8641-4a8e-8064-3c64181f7157","version":0,"status":"done","tags":[],"date":"2026-07-29T13:08:03Z","url":{"schema":"http","addr":"sitebul3.pro","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sitebul3.pro/","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"title":"Bahis \u0026 Casino Siteleri İncelemeleri — SiteBul","dom":{"size":60780,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1337)","md5":"317e9bcd42891e8415ac8036cff23d70","sha1":"e744545ad95b7854d4f51b5afc3ddd93a966f41a","sha256":"eb649a2bf009192c25f76567bb9b39680c57d9a6aa3ef4258058c1f09054895d","sha512":"6b69fd5ed7826139791090c67b9f4461d77c79cfa70743c85bebdcac4a5e8baab7a42b3d064731ec86dff62bb1940ce518669af3e539ea8ed6358cd3e784fbdb","ssdeep":"384:p9cVMhyhq1GO8/zKd1xEaM3FOaliZgYli6iTlroia1DggXWkcVMhysdV:pNwuEaM1uqYgkW2V","tlshash":"9353621260fd313e11878182a66667bf6edea247f90e2915b6bc07964f5eec2cc3315c","dom_hash":"domhash3a809207a1b20ce6f5484c455610da9d","first_seen":"2026-07-29T13:08:05.086929Z","last_seen":"2026-07-29T13:08:05.086929Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sitebul3.pro","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-02T13:08:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sitebul3.pro","ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-29T13:02:26.015369Z","last_seen":"2026-07-29T13:02:26.015369Z","alert_count":68,"request_count":17,"received_data":1182072,"sent_data":8670,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":10,"received_data":144645,"sent_data":5505,"comment":"","tags":null,"fingerprints":null},{"fqdn":"betlink.love","ip":{"addr":"104.21.48.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-23","domain_rank":0,"first_seen":"2026-07-29T13:02:26.014516Z","last_seen":"2026-07-29T13:02:26.014516Z","alert_count":0,"request_count":1,"received_data":581,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":4819,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"betlink43.pro","ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-16T16:28:34.237068Z","last_seen":"2026-07-29T13:02:28.116812Z","alert_count":4,"request_count":1,"received_data":29757,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sitebul3.pro/","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c662616ecfd924ddaf7e75dc27a790d6","sha1":"3a387191922e9a8f244eedc9ab8dbb5a43f87724","sha256":"8e47441a3e10c03999c034a2581abcd2d7b52e20f51903608152662f6ed82db4","sha512":"d892d77b75237fe5d6ca25d1aa3b8825ef9aa3ab471eddd16a7916055107a142ea2d78c0a670befb7bb992fd57907ae8bc20d4e822ba8dc3b5f6cff103fca4fd","ssdeep":"","tlshash":"6251688935bae03e055f50751edb135b3476630bbd41e649bd3c09a18f1dea0a9339ec","size":3165,"data":"","first_seen":"2026-07-29T13:02:31.775792Z","last_seen":"2026-07-29T15:36:42.383857Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4135f9e86aa451d2c94149ea3a331a0a","sha1":"2361441ca1b6680e890ae54fbd9227225e754581","sha256":"8a50a01b49906dbd6d10006397c9e8736ce7472c849c80a203430368483440e5","sha512":"9b6a95ae2ce33b814a6b65a5e68a63dc01debbddce7e0842e6d19b5f68d2c744466972a15c390d688be2be3bfbc7fa98b49be67db1adefe0584739ff1e0097ba","ssdeep":"","tlshash":"4431e93bf61019334ccb6be731dba3b03e52008ab982a144323ccc510a1be415cb24fa","size":1504,"data":"","first_seen":"2026-07-29T13:02:31.782424Z","last_seen":"2026-07-29T15:36:42.38443Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e4d5c59905a4762a5a215f5c872fd64","sha1":"2381d8aacf320679373fd607d17812223ac10786","sha256":"ec81d56b3c887a28bf3525108d422d63a391201f3974c3eb6298eb54cacc5f1a","sha512":"1bb072f2a87b2e1c751cc6eaa9785410890828bfcb237aa71d511dc2416f7de3054c073d35e9d68a2fe65f8c38f4281eefbc6338bbc6751c87030f6adb93a319","ssdeep":"","tlshash":"b751ea13f3c53236919a901c82abb73dbd3d9102f3011d39ea4afb355b808d7956a96e","size":2673,"data":"","first_seen":"2026-07-17T12:37:15.342466Z","last_seen":"2026-07-29T15:36:42.385797Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/betsin.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.879Z","timestamp":1785330456879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/betsin.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:48 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ypR9rBo8fRum6xX%2BD7YqexRZKVpa8XDONn4YpyHbxH4S6l0%2Fle51ikKEXpBDvx0g4tmRqarNQnypLsx1kuX0lY%2FzQkvR8t48zoTi8MZ7MchQsq6OFja525Yjo30n8PE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a22c58fb8b10c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8110\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8110,"size_decoded":8926,"mime_type":"image/png","magic":"PNG image data, 150 x 40, 8-bit/color RGB, non-interlaced","md5":"a2daf16d42ca4cdadca56e8cfdb2a12f","sha1":"3f5cfa08242345121205ee8168131c534cc401db","sha256":"4eecf9e28c9c85e5feb414936a67bf4df5e8ea71f578b4f93c29e5df4db5942c","sha512":"fd6ce51ea7ecfdb1df6b61d33b8f85ac7faf9ec4063ac890e2193e97c268e324c7e462c3b782606e8d44bff8bb908c23007964f94a4a5a05c3532836c1a4a94d","ssdeep":"192:NQZtlt7FZvi1xBpiCL39xA7YmvGUXwRojiCdjrhEUyZ8pV9cT0jeblWRf:Orbh0ZnxmvbXmo2oJcTS0lWRf","tlshash":"7ef1bfb4e4b780234c0f609298044b945e3b5b9fd46269165fc1b97eda142fbbd8b3ac","first_seen":"2026-07-29T13:08:05.088495Z","last_seen":"2026-07-29T13:08:05.088495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/portobet.html","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.883Z","timestamp":1785330456883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/portobet.html HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:36 GMT\r\ncontent-type: text/html\r\npriority: u=4,i\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:51 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyFipiaPvD2dsaSFUDhwYnA0y%2F2bWWB3E4Hskqoretc4i4Q2aA3qug0ybsmEbYII6v%2FgAZNPvtUuAjHP4c4pm25dsSlVvl%2BXLjqPvbobdAFk%2FZFvZj%2BsjzUf75%2FOLKw%3D\"}]}\r\ncache-control: max-age=0\r\nexpires: Wed, 29 Jul 2026 13:07:36 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22c58fb8b13c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":1067,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-10T09:58:02.778851Z","times_seen":55125,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logo.svg","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.680Z","timestamp":1785330456680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logo.svg HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:36 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epeZbYnc2GPGQjhmY%2BUU%2FKB3sUQOS1QXexs%2BKvbpOdf5s8bRxi6ebk1v0oxEdhvvT22UEVwL5Uxnt%2BvKU%2F4sXGT8Zl1aSxhnCejjFBwkUNU%2FY4BX8x8P8pSQFZRn0Es%3D\"}]}\r\nage: 343\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22c58fa4ae8c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":465629,"size_decoded":350082,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4da67d15f1496a27d4bec08fdf75b835","sha1":"74cb93c0ee51496c8bb66a7ce7768f71a149085e","sha256":"4fbac695319f87a7de24fd1afd82880e60e8601259a8fa2634c0d3b9b50c8608","sha512":"09c3fb0b57fcf63edf78fbbf3bef7261c40c9a2a524dbb261bca589afdf292855681c08b0dd54d50c5ef36cc114eb0f093185530938f5ef61691955abbb372f1","ssdeep":"12288:kA/C7uO12vsTavjnBxnzgkeMtz9c+R32WN7Mt:kAwV1Y9rnBxzFNhSKH7Mt","tlshash":"ada423623cd67c22816b437ba20b8b3666b9c9e5502e96cbd5f721a75603b00d13dd3b","first_seen":"2026-07-29T13:02:31.732131Z","last_seen":"2026-07-29T15:36:42.373128Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sen/v12/6xKjdSxYI9_3kvWNAG_5LVwJcOM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.854Z","timestamp":1785330456854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/sen/v12/6xKjdSxYI9_3kvWNAG_5LVwJcOM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitebul3.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 12:33:16 GMT\r\nexpires: Fri, 23 Jul 2027 12:33:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:05:58 GMT\r\ncontent-type: font/woff2\r\nage: 520460\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9040,"size_decoded":9852,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9040, version 1.0","md5":"8d22b35bc60a30018bc51db740c87138","sha1":"b5ecb23fa4c17c7c2fe67f7851bda4d513fb8082","sha256":"dfe5c7737bbadda7e4a9411be9e01e267ad671ef52283308b50ff6b8df20da37","sha512":"4ca38e0163b76a86cc7207e1555b108465ae746cd5e196a182e345e5d54ba42b3087cd0bbc8088b9ad33ea7de7e7fb42501e979928ab81c873103218b008094d","ssdeep":"192:zaOfs+E1Gtv+GUuL3YwH36b+DQuNAuPmDPpnezK2nURlM7c23IpRX:zF0tGoGU03f36mAuP6h8K2n8lgGX","tlshash":"cf12be677c90be24c8574736c1ac594fc0b7810e6df877c41b28bcf602ce658ba899b8","first_seen":"2025-10-24T17:39:27.255754Z","last_seen":"2026-08-08T19:05:19.094083Z","times_seen":30,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sen/v12/6xKjdSxYI9_3nPWNAG_5LVwJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.855Z","timestamp":1785330456855,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/sen/v12/6xKjdSxYI9_3nPWNAG_5LVwJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitebul3.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Jul 2026 17:23:48 GMT\r\nexpires: Sun, 25 Jul 2027 17:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 330228\r\nlast-modified: Tue, 09 Sep 2025 19:06:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18264,"size_decoded":19077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18264, version 1.0","md5":"9b6ad2715948bacb17909ede4e87646e","sha1":"a80f4d0282302385a55b78f3fd8a7fbd327647c6","sha256":"36029f562746e34388cb0bb6ab4597760abe52d44a84ca636d19bb165ce8a8ad","sha512":"8fe8d6ea279d889e1803c5f433a3ffe24f5257fa825d603cde012d51b165b246ff466aff76a8ea54d447c760e1bbf3837b90bee25d1e83f8889b6fb4c3dad8ab","ssdeep":"384:Kmf1AVMRi7mluwq0nahkvETiCgB5E0fzwxEOn5P+hIoAUg26uOCN/Zo:Kmf1UMgSu90naj2JB5EoxqwAw/OCN/Zo","tlshash":"5882e0281d9f4362db1f5a6391eb2dc89b9f275ce14a4205804974623f5eb37f804ef5","first_seen":"2025-09-11T12:02:48.403166Z","last_seen":"2026-08-08T19:05:19.066692Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":49,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sen/v12/6xKjdSxYI9_3kvWNAG_5LVwJcOM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.859Z","timestamp":1785330456859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/sen/v12/6xKjdSxYI9_3kvWNAG_5LVwJcOM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitebul3.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 12:33:16 GMT\r\nexpires: Fri, 23 Jul 2027 12:33:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:05:58 GMT\r\ncontent-type: font/woff2\r\nage: 520460\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9040,"size_decoded":9852,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9040, version 1.0","md5":"8d22b35bc60a30018bc51db740c87138","sha1":"b5ecb23fa4c17c7c2fe67f7851bda4d513fb8082","sha256":"dfe5c7737bbadda7e4a9411be9e01e267ad671ef52283308b50ff6b8df20da37","sha512":"4ca38e0163b76a86cc7207e1555b108465ae746cd5e196a182e345e5d54ba42b3087cd0bbc8088b9ad33ea7de7e7fb42501e979928ab81c873103218b008094d","ssdeep":"192:zaOfs+E1Gtv+GUuL3YwH36b+DQuNAuPmDPpnezK2nURlM7c23IpRX:zF0tGoGU03f36mAuP6h8K2n8lgGX","tlshash":"cf12be677c90be24c8574736c1ac594fc0b7810e6df877c41b28bcf602ce658ba899b8","first_seen":"2025-10-24T17:39:27.255754Z","last_seen":"2026-08-08T19:05:19.094083Z","times_seen":30,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/stonebahis.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.878Z","timestamp":1785330456878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/stonebahis.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:49 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N0RjmaWL0DzKJSKJj%2FblcXtp2ucOUauVYX2gJqqxiS1qyINF7JcrbXUn6%2FLaYUF1kCXSNtWeJooUsC%2FJv1cGYFYtRG1DBfqNS9Hj5t18SjE69k3isO4ldfjquUI5pvc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a22c58fb7b0fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11840,"size_decoded":12657,"mime_type":"image/png","magic":"PNG image data, 211 x 45, 8-bit/color RGB, non-interlaced","md5":"63cbd4023f1733494bf9b787818468ae","sha1":"29c96e8efe72a112d7cdcd11c593fc2130769000","sha256":"6fb3c1fed9d6669693cae76a6fe635f995d5d0f429e5e5db937a3437de71a6d7","sha512":"8853191965708085eb74d930f0bac16a894dd7a06e578706d6cf914f47868dd85ecab23edfd2510c69568714bbab90cb2c1db43241340ed4e038f62834618216","ssdeep":"192:PKrYJN5heRLZRW78a4SOh26jX37cWVHj0zQSR00a0IdGSYhdHkP/F4Q:SrYDzoLLW78aQVjX/VHhajaf+PONJ","tlshash":"a432c08d9b4fbd9c65bd41f4c33272016a2bb3c661104920ad05c96f6be7faab0c955c","first_seen":"2026-07-29T13:08:05.091965Z","last_seen":"2026-07-29T13:08:05.091965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/billion-bahis.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.882Z","timestamp":1785330456882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/billion-bahis.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:49 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NGO3mDtv7qoRUS38Hf7oxkoOPk7oLart%2FVTcskxJGk1OLoBsabfq7ZLTDkfA6C%2BSMXa58LEHebu%2FN2%2Bi1%2B1taA9jpvzhuB8oW079vyp8FwRA%2FTp6xEOZDLAGowVDNgY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a22c58fb8b12c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10037\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10037,"size_decoded":10860,"mime_type":"image/png","magic":"PNG image data, 203 x 43, 8-bit/color RGB, non-interlaced","md5":"a97144b4418f1db98ec02d83f1112d70","sha1":"94a060de2469c9f481457df4ff6323d25a9e5602","sha256":"11bead887d34fbb363a2376a6f8f78191f321b915afad104eba248af62942dab","sha512":"763abddab5205407f74ea7aeb1a1d5d6a8826f5b7598512fb0a3160e95fd3c33e1729d7e57284f40cbff72b74b5601820f62261f8232998977934a49b4d6abef","ssdeep":"192:O+fZzFSf3LIqcCCX1AvbxvBe/TD1TPf5xLpiOvQQ1Z0a:O+fZoa8dJMTDdvViIQQ1p","tlshash":"c722c083a2910c6ce2f309505d9c6f741f7c515b6b2cf725ce4867e3b99a3a354352d0","first_seen":"2026-07-29T13:08:05.093096Z","last_seen":"2026-07-29T13:08:05.093096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/betcup.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:37.187Z","timestamp":1785330457187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/betcup.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:59 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xpsTGExSVCxvDpt2mRVWTaHnRQ3cLWI8A9ezoU8I9AAKjlD2qewHt7l4vCofxj2J%2B7JIBDAIZOT0uvFDKOhsiE9GTTfWRIRvAvUw28GtKdxFeGjjlQygBlmBsPtPHPI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a22c58fd6b5dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5240,"size_decoded":6052,"mime_type":"image/png","magic":"PNG image data, 90 x 42, 8-bit/color RGB, non-interlaced","md5":"ab94ad256f7a08b0715e56d0d5d5e17a","sha1":"622043a68153723532bfc403da5e233b0620bcc8","sha256":"3d99e3d1f73651489698d817cb6d5eef8d5ac5882cad6ca5bffab68d7e4bc703","sha512":"894305fc6d206f3097be4b5753c1a56419f24902caff72639fac26a1482a0ba594a4fa374c57836c0c9232ae8d254e76404efed22dc10915b0799ca5d62acca5","ssdeep":"96:eWumcWXnpJelK33Mr6FG5xj9WEqZfxlqGt/hlsGlCKMVhQ5wEVf76TU2aVZ2PJ5/:eWYWXEKHMr6FQhWTfxwuDTf0Srf7eUDk","tlshash":"e2b19ee77a088089c54c497e3ed87d85c5a6d47d7107ef28d721a86d6b88a0d3874d02","first_seen":"2026-07-29T13:08:05.093981Z","last_seen":"2026-07-29T13:08:05.093981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/gizabet.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.875Z","timestamp":1785330456875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/gizabet.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:58:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3TUm8t6Uxku%2FaKRFnSwU4zKJIA1WSOkfctrWMjc4Q6N8TdnOE98gg1BtwQzwpKGNcIUqDfQAiKgPqjPfcJq12feNR9borJKIi%2FAydYOerYBXmamTwhcn8WWezyUDbA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a22c58fb7b0dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10088,"size_decoded":10903,"mime_type":"image/png","magic":"PNG image data, 163 x 46, 8-bit/color RGB, non-interlaced","md5":"45153f31b8255b3fbd067ff774eb818d","sha1":"55cfad41cbf7ce5c11beddf69ee58c607e81ec75","sha256":"3b4be327f215a379bb3dc0123669c043e045bf825f13840950de62ea1216be2c","sha512":"57b15f778bd3550b2be6b5fd3b3649e73b47bdf840074e8eec4142bb968e8c7ba443a5f7303acdd8da358a29d6f40c5e01e536426d416b2525d1614eb27ea441","ssdeep":"192:iQZnYxqySL8f8uH2VRffbsGAl1K9nQXMPogyewQE1DSctX1/Qap5u720ej:RZRySYfoffYGsKFQXMPkDSOX1ouW20U","tlshash":"b322af6e0c39db39c3fa953df223d00bc63e910a7b1324555e5d71b16d8129912619ab","first_seen":"2026-07-29T13:08:05.094829Z","last_seen":"2026-07-29T13:08:05.094829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/wojobet.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.877Z","timestamp":1785330456877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/wojobet.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:49 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n1QUZ13zqfeaEzC61FfPQJgn8O%2FYmqYQ8Rs53ObXk6NpJr09Zg8LsvVwapzgK3LLD6O%2FC%2F3d%2Ft1FgLWnISGRXxO8niO%2FN6Rmh9TfkYI9HuvE3TNpOWbChLdHbZZ59Lk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a22c58fb7b0ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8529,"size_decoded":9349,"mime_type":"image/png","magic":"PNG image data, 159 x 43, 8-bit/color RGB, non-interlaced","md5":"c26842a8fd0ac2623399de98b9edac84","sha1":"1b9195b02e423f3434408cfa359dcac51f618f93","sha256":"9abf32fa4292ae704f86cbcc1342fbd88b9c248de33a58c589e4f6ae46fc30f4","sha512":"5449792a934a17c806456ce48221415b7700bb1715d70969f2c5982ecf1fa572d9602f09ee700d9c572894e0314634cd228d748cd60a117f68e8df2cde659eaf","ssdeep":"192:peVVN4ySLwbuy/XOwsfrpNUZMoSPNYpc8hz+bUk+bei7hk:pCIbLwrMNUZeFYu8hzel","tlshash":"98029e29f984c42ca4c7a266fedd276c2ced9160a7010ff92dd001e9bc182de5a807dd","first_seen":"2026-07-29T13:08:05.095765Z","last_seen":"2026-07-29T13:08:05.095765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sen/v12/6xKjdSxYI9_3kvWNAG_5LVwJcOM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.862Z","timestamp":1785330456862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/sen/v12/6xKjdSxYI9_3kvWNAG_5LVwJcOM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitebul3.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 12:33:16 GMT\r\nexpires: Fri, 23 Jul 2027 12:33:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:05:58 GMT\r\ncontent-type: font/woff2\r\nage: 520460\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9040,"size_decoded":9852,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9040, version 1.0","md5":"8d22b35bc60a30018bc51db740c87138","sha1":"b5ecb23fa4c17c7c2fe67f7851bda4d513fb8082","sha256":"dfe5c7737bbadda7e4a9411be9e01e267ad671ef52283308b50ff6b8df20da37","sha512":"4ca38e0163b76a86cc7207e1555b108465ae746cd5e196a182e345e5d54ba42b3087cd0bbc8088b9ad33ea7de7e7fb42501e979928ab81c873103218b008094d","ssdeep":"192:zaOfs+E1Gtv+GUuL3YwH36b+DQuNAuPmDPpnezK2nURlM7c23IpRX:zF0tGoGU03f36mAuP6h8K2n8lgGX","tlshash":"cf12be677c90be24c8574736c1ac594fc0b7810e6df877c41b28bcf602ce658ba899b8","first_seen":"2025-10-24T17:39:27.255754Z","last_seen":"2026-08-08T19:05:19.094083Z","times_seen":30,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-29T13:07:35.978Z","timestamp":1785330455978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=0\r\nexpires: Wed, 29 Jul 2026 13:07:36 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2FZX89hVfi6TA%2BRT%2BQNRgBH7r9DM9wDdYTDo7j0hufhFP1IZb8Ek8wvkZBJmZhGXmSARf0B6AcHXCUyu8rUCdqtxDZRU6%2BsSjckPYgbT%2B1iMtSaz9jgv9W%2BPMWKDi%2Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\ncf-ray: a22c58f60a6fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59967,"size_decoded":9629,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1337)","md5":"b533e0c76c0f020d8cd7cef34362511d","sha1":"0216eba878d22b9c6de9d476e0d5d8f5a0c5fc55","sha256":"97744ac7c5b09d2a530166b574146254485193cad407a21a33aae373052f8a86","sha512":"477163c0e7bf3349b6fd335fe8f2abed7b0a341d91a10ef30433c70a78199701a54a3c7414a2909a5b1b1b4f243fe58769486abb8aac5324c79554a62f0c6016","ssdeep":"384:n5IwOJOEFrvgEQ649ex6JJNYynwFhQ3+i8e9uZsVFOaliZgYli6iTlroia1DggX+:n6KhOsfuqYgkW5","tlshash":"d043621254fd713f01878082a62653ab6fdea247f90e2919b6bc0b965f5eed2dc3314c","first_seen":"2026-07-29T13:08:05.09672Z","last_seen":"2026-07-29T13:08:05.09672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":-1,"dns":6,"connect":13,"send":0,"wait":264,"receive":508,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sen/v12/6xKjdSxYI9_3nPWNAG_5LVwJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.856Z","timestamp":1785330456856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/sen/v12/6xKjdSxYI9_3nPWNAG_5LVwJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitebul3.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Jul 2026 17:23:48 GMT\r\nexpires: Sun, 25 Jul 2027 17:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 330228\r\nlast-modified: Tue, 09 Sep 2025 19:06:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18264,"size_decoded":19077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18264, version 1.0","md5":"9b6ad2715948bacb17909ede4e87646e","sha1":"a80f4d0282302385a55b78f3fd8a7fbd327647c6","sha256":"36029f562746e34388cb0bb6ab4597760abe52d44a84ca636d19bb165ce8a8ad","sha512":"8fe8d6ea279d889e1803c5f433a3ffe24f5257fa825d603cde012d51b165b246ff466aff76a8ea54d447c760e1bbf3837b90bee25d1e83f8889b6fb4c3dad8ab","ssdeep":"384:Kmf1AVMRi7mluwq0nahkvETiCgB5E0fzwxEOn5P+hIoAUg26uOCN/Zo:Kmf1UMgSu90naj2JB5EoxqwAw/OCN/Zo","tlshash":"5882e0281d9f4362db1f5a6391eb2dc89b9f275ce14a4205804974623f5eb37f804ef5","first_seen":"2025-09-11T12:02:48.403166Z","last_seen":"2026-08-08T19:05:19.066692Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":43,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sen/v12/6xKjdSxYI9_3nPWNAG_5LVwJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.858Z","timestamp":1785330456858,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/sen/v12/6xKjdSxYI9_3nPWNAG_5LVwJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitebul3.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Jul 2026 17:23:48 GMT\r\nexpires: Sun, 25 Jul 2027 17:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 330228\r\nlast-modified: Tue, 09 Sep 2025 19:06:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18264,"size_decoded":19077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18264, version 1.0","md5":"9b6ad2715948bacb17909ede4e87646e","sha1":"a80f4d0282302385a55b78f3fd8a7fbd327647c6","sha256":"36029f562746e34388cb0bb6ab4597760abe52d44a84ca636d19bb165ce8a8ad","sha512":"8fe8d6ea279d889e1803c5f433a3ffe24f5257fa825d603cde012d51b165b246ff466aff76a8ea54d447c760e1bbf3837b90bee25d1e83f8889b6fb4c3dad8ab","ssdeep":"384:Kmf1AVMRi7mluwq0nahkvETiCgB5E0fzwxEOn5P+hIoAUg26uOCN/Zo:Kmf1UMgSu90naj2JB5EoxqwAw/OCN/Zo","tlshash":"5882e0281d9f4362db1f5a6391eb2dc89b9f275ce14a4205804974623f5eb37f804ef5","first_seen":"2025-09-11T12:02:48.403166Z","last_seen":"2026-08-08T19:05:19.066692Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/reklam_1781254462_8586.webp","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"104.21.48.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.868Z","timestamp":1785330456868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jul 2026 02:06:17 GMT","end":"Mon, 19 Oct 2026 02:06:16 GMT"},"fingerprint":{"sha1":"10:88:FF:F4:30:59:CB:7C:D8:87:92:B8:1B:E4:AE:C6:EF:50:9B:97","sha256":"BC:4C:BA:0A:11:76:DB:BA:60:D5:E7:D8:31:37:D9:F3:66:C2:18:3E:D8:D2:31:C7:48:72:9E:29:5D:6F:E9:18"}}},"request":{"raw":"GET /img/reklam_1781254462_8586.webp HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Wed, 29 Jul 2026 13:07:36 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/reklam_1781254462_8586.webp\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UxJDc78Z3%2B2SRYu%2BGCAbCWTYWVh%2BY9i4scF1HyUsoxqt935DKwzCDItg%2FCCsZu4wvxBd05uV5qcOQWm74KLjLQi79%2FPsBgMOM5O9Ap8Asxf6b7kHOrpvFKb7PI2jvrI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a22c58fbead54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T09:49:08.512845Z","times_seen":17815242,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":56,"connect":20,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/hilbet.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:37.189Z","timestamp":1785330457189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/hilbet.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:57 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EgESRqx3D5JHRxnfc6IxfC8HI1GIx5Vkw3LTWrFMT1dyBkE4S9qwTog21gRtRyIpp5yQXx%2BgoS9gRKP6yZ0mvEC3W1RAfAwgWSZ5i3fXZIogmSlC8bVMfmDUcrvUFqk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a22c58fd7b6dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5077\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5077,"size_decoded":5889,"mime_type":"image/png","magic":"PNG image data, 121 x 37, 8-bit/color RGB, non-interlaced","md5":"633c3d6d60f997443dd3518691d28444","sha1":"24593016b537dffd4fadcd2f36f49bd5889b9752","sha256":"eeb6059bf054bf854649fc01454cc370f497db6a3867d6d24ff33a13e5457665","sha512":"a0a4f99955cc07c8b369b28863754c73ed1cd01d925a61fa29cb047893778d31302ddda05d61be89798de95269572d3a3988d92628917e1ae0a921fb8d7fef82","ssdeep":"96:lKi4oXhZJ+6fGrT4XCABoZ6M7k4hp47MPvpj+H9g+3pei/1H2EMpY+wz:lHZNfGfdAY/7nhqSvpyu4pP/1H2EC7A","tlshash":"f3a17ce4f1e30239f3489a39d093b439c63166d984bd2969c3bf3626a536bab046d210","first_seen":"2026-07-29T13:08:05.098084Z","last_seen":"2026-07-29T13:08:05.098084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/ligobet.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.871Z","timestamp":1785330456871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/ligobet.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:53 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2B3SThw2mAp9NCsJcFMTdsLwyWZTc2bU91Ydg5Dgm3ZijHCneMoq9B%2BWw%2Bva2h4ghVK0ERLjqaWtytyd3kGCOF2TqlfjKpqNMYrZjwIKF1kVd5SrdJh9J6XL7iZzowY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a22c58fb7b0ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8736\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8736,"size_decoded":9552,"mime_type":"image/png","magic":"PNG image data, 127 x 52, 8-bit/color RGB, non-interlaced","md5":"01906dde76e9aed1f69e50f63079a51a","sha1":"99b17448a09f8e15b9e22bdc3bf5be1bcf66de18","sha256":"f74d9760940614aff7d602cdb0bbaba3f2f9e05633547ffec1955e8edd912bbf","sha512":"269e399a33f792e9698f1325ae7f01e93b2e7c0953470aa4e6f51324e5d0974771a74fa475b6e187177f04989fa5df95659c9ec34745ef31e170f098068cf6ee","ssdeep":"192:Xwy8lMuoa+FRmcSeQdqpedqX5ULBOZvOb00LQQw5kf:n85/+FRRSddq7ZvO4iQ35kf","tlshash":"ad02a0c500f8cf796f4e167cb9881dae4234b41a19272cf94cf74f4d36e08a58766ba6","first_seen":"2026-07-29T13:08:05.098932Z","last_seen":"2026-07-29T13:08:05.098932Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/risebet.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.880Z","timestamp":1785330456880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/risebet.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:59 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2FCpS%2Baawt3T%2FuD1xRc6XqCa45QRCNgW9DdFX4yh6ZcMGY%2BOj15k%2B7QqLUxXaz2zAA9rg1mGl1Bs5XVHlAMJrqbrzhMgg%2BSXKWSgcBQIRD69AQGI6MVnnWc3TEZhYzI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a22c58fb8b11c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11864,"size_decoded":12687,"mime_type":"image/png","magic":"PNG image data, 210 x 56, 8-bit/color RGB, non-interlaced","md5":"1c0bb34942486817e8e37f67dd47f5de","sha1":"5d34f28043e4ce857abf4f12235b0852d63d2042","sha256":"52c84763d045d43285b6f236708d463cdc37b975c4bb7adb18731784a54b27c4","sha512":"893a7bf29d6b2aa084d1b30187a6a7610d71645d36f02ba3c4aacac3536391972c89802bc728ac829f75ff2f3c53f2f7bde41a64fb72c406b4595f55ee05063d","ssdeep":"192:H/2kMPAAxKSh7Ou7YusojyeN2rMl4Wo0q7gyWE2KM5tP3m+52kg2LcPMFAKHjnzw:H/loAAxJ7OuHs+Nflzo17gyWEC5tLgTD","tlshash":"4332d076b4c3f34ef24bacafd319f44885298850300b487ba84d183f5a9abfc564446e","first_seen":"2026-07-29T13:08:05.099876Z","last_seen":"2026-07-29T13:08:05.099876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/yenibet.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.873Z","timestamp":1785330456873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/yenibet.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:53 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEOfPfRO5pFp0IvIL%2BG1mVtsxB1tsc9%2FiBPoKJL9wW6HUKdFJjTguFK58WeZx19IeBeV3DZii0jQOgbKP2%2FlFqqxiXr%2BZKRtu31jf6BKeLqMdgv6s97As8Xa9%2Bfyq2U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a22c58fb7b0bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14227\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14227,"size_decoded":15048,"mime_type":"image/png","magic":"PNG image data, 215 x 47, 8-bit/color RGB, non-interlaced","md5":"a63f3a1bedd288b6682f17c8e0bdc71b","sha1":"3ad3b6c24fcc3ac7833567c05bbee061208a174a","sha256":"6dc3cffa2ce7015d68addb40ca7f7b96a50d04aa6ebe38518956fae56475af82","sha512":"a38f01b5db2fd408288b3641252c005cd1ca09fa58cad9df3209edc49ec72f1881b4c8fa33672fb8790a12fed74a119e31ce38bd8aa473a9896fef624eb6ac68","ssdeep":"384:y2canKlf7zhhnKCvrGJRBp3YicBE97Ua7DXboWMU:aaK93XDsXcMDRV","tlshash":"dc52d1853b9048721a53817f8341cb498dba5d697ad71f789a6703217afcf6eb21071c","first_seen":"2026-07-29T13:08:05.100642Z","last_seen":"2026-07-29T13:08:05.100642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/apple-touch-icon.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:37.179Z","timestamp":1785330457179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/apple-touch-icon.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:47 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:01:54 GMT\r\nage: 343\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ugAEpqCt0C3rRDF5c5K%2FYooInymJW9R6sGtyrnWabTLvmjFi5NJu7UzofIHqIlOjkkOC8KpE1c%2Bh%2FtePmbnEsce9KhWDkCPCnVTfsJc6XngLLjsteNgUm0bK3LBal4w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a22c58fd6b4dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45108,"size_decoded":45937,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"4219315b33c0d8762245d0578df6dc0a","sha1":"924f5d0156e0ac2ef10c257a3653fcc92ff07e3c","sha256":"3711661dccd7293cdac88f6b490592f8376f36e6d6b0ab1bf806275ec99ad22d","sha512":"8cfcac24033e1ef4161f90a96d9bb7fe79b31f2bdf68c1bde0d83a5d5653bf3adb33829502014c8db869fd82a90c8109642dfe4e0e56f576a4b13d29e2d8ca50","ssdeep":"768:Vn4QiPp0A47Qa+5hOFTnbqY2hWaeWI9O9Y5vD7rA2jScquNP4hV2Vq7IplHZMqZ:VNiR0z7QGTnuY2ZA8qhvrLjrquNPUmqg","tlshash":"7b13f15be0caa8fba0f54b616701050165dd72a8abe869ae5ddec83f51413cedb027e0","first_seen":"2026-07-29T13:02:31.75634Z","last_seen":"2026-07-29T15:36:42.375433Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/favicon.svg","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:37.182Z","timestamp":1785330457182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2BrxhUlQXDFtMVFDC%2B8AYopV8LN3tFgQ52f0EKGS04qgONsmkNcluGrNNYWYkGikKXoN2hNeM4Y1yyCBZ3W4J6hWEHxmBxpoix3%2BCSJEU1Ah%2F3vnFy3fluH%2FuMmWZ5Q%3D\"}]}\r\nage: 343\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22c58fd6b4ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":465629,"size_decoded":350097,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4da67d15f1496a27d4bec08fdf75b835","sha1":"74cb93c0ee51496c8bb66a7ce7768f71a149085e","sha256":"4fbac695319f87a7de24fd1afd82880e60e8601259a8fa2634c0d3b9b50c8608","sha512":"09c3fb0b57fcf63edf78fbbf3bef7261c40c9a2a524dbb261bca589afdf292855681c08b0dd54d50c5ef36cc114eb0f093185530938f5ef61691955abbb372f1","ssdeep":"12288:kA/C7uO12vsTavjnBxnzgkeMtz9c+R32WN7Mt:kAwV1Y9rnBxzFNhSKH7Mt","tlshash":"ada423623cd67c22816b437ba20b8b3666b9c9e5502e96cbd5f721a75603b00d13dd3b","first_seen":"2026-07-29T13:02:31.732131Z","last_seen":"2026-07-29T15:36:42.373128Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Sen:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.670Z","timestamp":1785330456670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Sen:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 29 Jul 2026 13:07:36 GMT\r\ndate: Wed, 29 Jul 2026 13:07:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4135,"size_decoded":1129,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"50802a3a5dd72da703d69f389097f6db","sha1":"755b85d09b8f123aaf91035502cb62bb585c7083","sha256":"190c794f93a0bc8731b4dda9c3b69cfdfb5a7ffdf9f3dafe983fb352458c15e2","sha512":"f52e8a0126a4dba5a4df59d10ec9ba11f68278374219a65ac14eda7b39c767a50310dd0e4a3bfcbdf32b6ed9a3a2a36cb053e168ed0207558dce8f03ae661555","ssdeep":"96:jOEa8Jc+u3OEa3NsOXa8Jc+u3OXa3NsOxMa8Jc+u3OxMa3NsOpa8Jc+u3Opa3NsE:UILGIkDIt8IuZI/+","tlshash":"e481f6a1085ba100db970dc112cd7d33ee4ea1916445d8759eff28d8bc56c5553a1f4d","first_seen":"2025-09-15T22:24:16.053636Z","last_seen":"2026-07-29T15:37:19.853641Z","times_seen":43,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/css/style.css","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.672Z","timestamp":1785330456672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:36 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HBACpGCdGUMCjtwrwi4fCRjYTSgPDNx9Vy7OyAxdYUQttHwCoPsP2Fx%2F0vcTOphW6XLpiS8hqxqbMb7X9%2FJ8sxYZfr92VFlr%2BibEggP1xqWw2%2BtvfIi1kFFY4x%2FerQg%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Fri, 28 Aug 2026 13:01:52 GMT\r\nage: 343\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22c58fa3ae7c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29786,"size_decoded":7282,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0d9af3f428c9a2a25ae9c60230530c40","sha1":"efd732a43082da127b0cfe9a2f09c50c90e81a24","sha256":"1958120ba8a1cd801e60bd0db2b76be9c7212d0ec07948d4c3b144a31f865586","sha512":"f01aa6ec6685d4e872ca68f0f77649c194b61a2b8508feaa869ec007ffc937bd358767d02955a65ef8ea5e13a992f70e912df6c29c370edc679ffcf74700cb9e","ssdeep":"384:acFZT11EWAci9FiETZVs29zLFkfUFT9iHRvhLP+:acFZp1EWAci9FXTZVs2RFEAMvhi","tlshash":"ffd2ebb7671419053117ec5cf992db86a399b002b10ae2bf6ee0305ccfcc799a575bb8","first_seen":"2026-07-29T13:02:31.764311Z","last_seen":"2026-07-29T15:36:42.381532Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sen/v12/6xKjdSxYI9_3nPWNAG_5LVwJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.851Z","timestamp":1785330456851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/sen/v12/6xKjdSxYI9_3nPWNAG_5LVwJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitebul3.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Jul 2026 17:23:48 GMT\r\nexpires: Sun, 25 Jul 2027 17:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 330228\r\nlast-modified: Tue, 09 Sep 2025 19:06:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18264,"size_decoded":19077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18264, version 1.0","md5":"9b6ad2715948bacb17909ede4e87646e","sha1":"a80f4d0282302385a55b78f3fd8a7fbd327647c6","sha256":"36029f562746e34388cb0bb6ab4597760abe52d44a84ca636d19bb165ce8a8ad","sha512":"8fe8d6ea279d889e1803c5f433a3ffe24f5257fa825d603cde012d51b165b246ff466aff76a8ea54d447c760e1bbf3837b90bee25d1e83f8889b6fb4c3dad8ab","ssdeep":"384:Kmf1AVMRi7mluwq0nahkvETiCgB5E0fzwxEOn5P+hIoAUg26uOCN/Zo:Kmf1UMgSu90naj2JB5EoxqwAw/OCN/Zo","tlshash":"5882e0281d9f4362db1f5a6391eb2dc89b9f275ce14a4205804974623f5eb37f804ef5","first_seen":"2025-09-11T12:02:48.403166Z","last_seen":"2026-08-08T19:05:19.066692Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":37,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/reklam_1781254462_8586.webp","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:37.059Z","timestamp":1785330457059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/reklam_1781254462_8586.webp HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29024\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Jun 2026 08:54:22 GMT\r\netag: \"6a2bc93e-7160\"\r\nexpires: Fri, 28 Aug 2026 12:16:03 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 3093\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2I4QYRmMeaP4uKmoV0Q9RqmJnWb0dfPN%2BOIc5LxcDMEJ0G3lMrz%2FW06X5zz4zxHWnqCfPAG49plESq3eF1EExnefgkqTqeyUysCkruUqE8NwXwT%2BapQuU10NXw8uoQvh\"}]}\r\ncf-ray: a22c58fcc966c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29024,"size_decoded":29757,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x670, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b388ef52f49539ddbb7f0463bc5ecb7a","sha1":"784e5b46b9191f9b3f3173f646f7e8771c50d934","sha256":"ace06a6b3340952bde442d6db1b3888bd7fbf30cd0d8349d517357163ce0f55f","sha512":"96153e9456ace2679d6cccb3d662dde4189f13c3f63ca10306a6a3c2f11dcd4cca2a94b39aa08eca97a1d86e9d262a951c3b898ec8c79dc9d0674a9095bd3757","ssdeep":"768:XsiozBDBfNa3XvSlomkD3dBp4T/2I7ht0E2/Nfr3vGsP5:4zx/aHalnK37pS/2I7hc/Nzug5","tlshash":"44d2f2001fcf657acec5c52df32c718536e5c22427e5386f8ea2858de8de805bbd4829","first_seen":"2026-06-15T13:15:27.958678Z","last_seen":"2026-07-29T15:37:19.868538Z","times_seen":17,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":8,"connect":1,"send":0,"wait":17,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sitebul3.pro/assets/logos/barbibet.png","fqdn":"sitebul3.pro","domain":"sitebul3.pro","tld":"pro"},"ip":{"addr":"172.67.143.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:37.185Z","timestamp":1785330457185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sitebul3.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Jul 2026 12:47:47 GMT","end":"Wed, 21 Oct 2026 13:46:21 GMT"},"fingerprint":{"sha1":"0C:DA:0E:09:CA:94:C7:6B:8E:69:64:E7:B5:A3:EC:19:77:91:25:8B","sha256":"44:F8:E6:DA:91:F0:75:42:70:A9:72:22:61:64:C5:23:89:CD:0B:CB:D0:B4:2C:D1:97:3C:B4:CC:71:79:90:FD"}}},"request":{"raw":"GET /assets/logos/barbibet.png HTTP/1.1\r\nHost: sitebul3.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sitebul3.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 29 Jul 2026 13:07:37 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Wed, 15 Jul 2026 12:57:56 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=15552000\r\nexpires: Mon, 25 Jan 2027 13:07:37 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJE5MUCavb%2Blid0abPkXuz7NyclalHfdWTqg7JvdeeP%2Fsd%2Fv%2F74I6dMBnh8c%2BHj7hsEt4YU510tsQDAyMUxHBgD9R7cd0cAheHnylDiyeFUaGibE5LCxUlcKgpfPD%2Fw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a22c58fd6b4fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8100\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8100,"size_decoded":8922,"mime_type":"image/png","magic":"PNG image data, 145 x 44, 8-bit/color RGB, non-interlaced","md5":"30a4df07f78e8f7a703a51126aa39fa6","sha1":"70bc5a09b565588ee3c19bb78aa856fb046c0274","sha256":"58f5d323544ac7e5a6e5c8bb2fbae9df9566a466775df1626c489f73517a128d","sha512":"ba38d72d102c7b13cc357a397fb2fce0b5acbff0d65d69349a0ffb2ac3d3e0e6cf33691e4f19adac9b2afbda314f1d2717ab15722ac8afd39361bbb04cc03892","ssdeep":"192:DXRchCgPtNqiZcgSxL/paN0fmGClggWNDsTFj:DXRANrZILxNHtBRs9","tlshash":"f9f1bf1561de0c563b5f3fee512f03142c214b65e91a5dcc70141346681d3e6a4373eb","first_seen":"2026-07-29T13:08:05.103602Z","last_seen":"2026-07-29T13:08:05.103602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-29","alert":"Phishing Block","trigger":"sitebul3.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-29","alert":"Sinkholed","trigger":"sitebul3.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sen/v12/6xKjdSxYI9_3kvWNAG_5LVwJcOM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.864Z","timestamp":1785330456864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/sen/v12/6xKjdSxYI9_3kvWNAG_5LVwJcOM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitebul3.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 12:33:16 GMT\r\nexpires: Fri, 23 Jul 2027 12:33:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:05:58 GMT\r\ncontent-type: font/woff2\r\nage: 520460\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9040,"size_decoded":9852,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9040, version 1.0","md5":"8d22b35bc60a30018bc51db740c87138","sha1":"b5ecb23fa4c17c7c2fe67f7851bda4d513fb8082","sha256":"dfe5c7737bbadda7e4a9411be9e01e267ad671ef52283308b50ff6b8df20da37","sha512":"4ca38e0163b76a86cc7207e1555b108465ae746cd5e196a182e345e5d54ba42b3087cd0bbc8088b9ad33ea7de7e7fb42501e979928ab81c873103218b008094d","ssdeep":"192:zaOfs+E1Gtv+GUuL3YwH36b+DQuNAuPmDPpnezK2nURlM7c23IpRX:zF0tGoGU03f36mAuP6h8K2n8lgGX","tlshash":"cf12be677c90be24c8574736c1ac594fc0b7810e6df877c41b28bcf602ce658ba899b8","first_seen":"2025-10-24T17:39:27.255754Z","last_seen":"2026-08-08T19:05:19.094083Z","times_seen":30,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sen/v12/6xKjdSxYI9_3nPWNAG_5LVwJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.853Z","timestamp":1785330456853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/sen/v12/6xKjdSxYI9_3nPWNAG_5LVwJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitebul3.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 25 Jul 2026 17:23:48 GMT\r\nexpires: Sun, 25 Jul 2027 17:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 330228\r\nlast-modified: Tue, 09 Sep 2025 19:06:04 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18264,"size_decoded":19077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18264, version 1.0","md5":"9b6ad2715948bacb17909ede4e87646e","sha1":"a80f4d0282302385a55b78f3fd8a7fbd327647c6","sha256":"36029f562746e34388cb0bb6ab4597760abe52d44a84ca636d19bb165ce8a8ad","sha512":"8fe8d6ea279d889e1803c5f433a3ffe24f5257fa825d603cde012d51b165b246ff466aff76a8ea54d447c760e1bbf3837b90bee25d1e83f8889b6fb4c3dad8ab","ssdeep":"384:Kmf1AVMRi7mluwq0nahkvETiCgB5E0fzwxEOn5P+hIoAUg26uOCN/Zo:Kmf1UMgSu90naj2JB5EoxqwAw/OCN/Zo","tlshash":"5882e0281d9f4362db1f5a6391eb2dc89b9f275ce14a4205804974623f5eb37f804ef5","first_seen":"2025-09-11T12:02:48.403166Z","last_seen":"2026-08-08T19:05:19.066692Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sen/v12/6xKjdSxYI9_3kvWNAG_5LVwJcOM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sitebul3.pro/","date":"2026-07-29T13:07:36.861Z","timestamp":1785330456861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/sen/v12/6xKjdSxYI9_3kvWNAG_5LVwJcOM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sitebul3.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 12:33:16 GMT\r\nexpires: Fri, 23 Jul 2027 12:33:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:05:58 GMT\r\ncontent-type: font/woff2\r\nage: 520460\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9040,"size_decoded":9852,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9040, version 1.0","md5":"8d22b35bc60a30018bc51db740c87138","sha1":"b5ecb23fa4c17c7c2fe67f7851bda4d513fb8082","sha256":"dfe5c7737bbadda7e4a9411be9e01e267ad671ef52283308b50ff6b8df20da37","sha512":"4ca38e0163b76a86cc7207e1555b108465ae746cd5e196a182e345e5d54ba42b3087cd0bbc8088b9ad33ea7de7e7fb42501e979928ab81c873103218b008094d","ssdeep":"192:zaOfs+E1Gtv+GUuL3YwH36b+DQuNAuPmDPpnezK2nURlM7c23IpRX:zF0tGoGU03f36mAuP6h8K2n8lgGX","tlshash":"cf12be677c90be24c8574736c1ac594fc0b7810e6df877c41b28bcf602ce658ba899b8","first_seen":"2025-10-24T17:39:27.255754Z","last_seen":"2026-08-08T19:05:19.094083Z","times_seen":30,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}