{"report_id":"909c99c8-2451-4349-917e-89749208f79c","version":6,"status":"done","tags":[],"date":"2026-05-15T01:09:50Z","url":{"schema":"https","addr":"casinoroyal-girisadresirniz.icu","fqdn":"casinoroyal-girisadresirniz.icu","domain":"casinoroyal-girisadresirniz.icu","tld":"icu"},"ip":{"addr":"172.67.141.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tr.casinoroyal-girisadresirniz.icu/","fqdn":"tr.casinoroyal-girisadresirniz.icu","domain":"casinoroyal-girisadresirniz.icu","tld":"icu"},"title":"Casinoroyal Giriş | Casinoroyal Üye Ol - Güncel Erişim Adresi 2026","dom":{"size":55191,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (515)","md5":"03d0746bc59c3c15637323d530ebf236","sha1":"249c01d14e9192b7c6b8c4cdcbb6715be82ca1cf","sha256":"88deb1fc76daa5561e6a8927811e0bb1cc0f2f4ea462ef9ed85b428515a5e423","sha512":"566106df31baa74693ef42eb4c2bc32ee991062e768898d40a954197c0e64e0aa863742b33f8321df8086a0b2ff36cd764f4ef8bf9bd633b5dd6fa83bb7eb368","ssdeep":"384:2qOBYNPLOBV+5KOBSoSOByp8Vjop9QHlQIUgHzHR8FOXuBFPM0WWv67FdFS96vuw:9c7KZtQ5gHzHM1vWWQBo6vuPWO/7OuS","tlshash":"4743075365b12d4e9722a2d974d3732cb9669213c8109ca8ff1c412e6fd8aaec5f334d","dom_hash":"domhash6714a7675f45bc525b04b1217f23b13c","first_seen":"2026-05-15T01:09:54.239482Z","last_seen":"2026-05-15T01:09:54.239482Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"casinoroyal-girisadresirniz.icu","fqdn":"casinoroyal-girisadresirniz.icu","domain":"casinoroyal-girisadresirniz.icu","tld":"icu"},"ip":{"addr":"172.67.141.19","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-19T01:09:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-15T01:09:27Z","timestamp":1778807367,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":58718,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-05-15T01:09:27.779462+0000\",\"flow_id\":1954454702638986,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":58718,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"casinoroyal-girisadresirniz.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-05-15T01:09:27.771978+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"casinoroyal-girisadresirniz.icu","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-11","domain_rank":0,"first_seen":"2026-05-15T01:09:50.101511Z","last_seen":"2026-05-15T01:09:50.101512Z","alert_count":0,"request_count":1,"received_data":56634,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"tr.casinoroyal-girisadresirniz.icu","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":92122,"sent_data":1975,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tr.casinoroyal-girisadresirniz.icu/assets/jojo-logo.png","fqdn":"tr.casinoroyal-girisadresirniz.icu","domain":"casinoroyal-girisadresirniz.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tr.casinoroyal-girisadresirniz.icu/","date":"2026-05-15T01:09:28.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoroyal-girisadresirniz.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:32:18 GMT","end":"Sun, 09 Aug 2026 07:32:17 GMT"},"fingerprint":{"sha1":"A9:BB:9E:86:2C:35:E7:4B:48:F3:94:55:D2:91:8C:2C:C5:B7:BF:38","sha256":"D9:64:E3:F4:D8:67:BA:DF:FD:B3:3F:16:A6:59:7B:AF:D9:34:FA:E8:6D:F6:81:FA:0E:F4:A4:03:94:D0:BF:8C"}}},"request":{"raw":"GET /assets/jojo-logo.png HTTP/1.1\r\nHost: tr.casinoroyal-girisadresirniz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tr.casinoroyal-girisadresirniz.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 15 May 2026 01:09:28 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache-status: EXPIRED\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9I0%2BziDwZuu1Ay66aXGuRVyVKS1YdYG5eLBP05fKxZzHhdWAaoVGuUlsZ7R2i9zbbmH50Y0dX%2Bb2pMqaxw98NakdOQhoKF%2BTGXI75vp8C2fgkIOGYa62%2FiBSpcNvRSpshkCXu%2BNHjIeBrLYfyQzp3nkJ9S8b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbe41e36d564c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-20T22:21:19.482846Z","times_seen":151505,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.casinoroyal-girisadresirniz.icu/Casinoroyal.png%3E%20%20%20%20%3Cmeta%20name=","fqdn":"tr.casinoroyal-girisadresirniz.icu","domain":"casinoroyal-girisadresirniz.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tr.casinoroyal-girisadresirniz.icu/","date":"2026-05-15T01:09:28.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoroyal-girisadresirniz.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:32:18 GMT","end":"Sun, 09 Aug 2026 07:32:17 GMT"},"fingerprint":{"sha1":"A9:BB:9E:86:2C:35:E7:4B:48:F3:94:55:D2:91:8C:2C:C5:B7:BF:38","sha256":"D9:64:E3:F4:D8:67:BA:DF:FD:B3:3F:16:A6:59:7B:AF:D9:34:FA:E8:6D:F6:81:FA:0E:F4:A4:03:94:D0:BF:8C"}}},"request":{"raw":"GET /Casinoroyal.png%3E%20%20%20%20%3Cmeta%20name= HTTP/1.1\r\nHost: tr.casinoroyal-girisadresirniz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tr.casinoroyal-girisadresirniz.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 15 May 2026 01:09:28 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TK1Xl2kLZ5wlR8jYO2Hoeh8Q838esbTGj9yCn%2FelzBs3J8icT0RKoTvZ47SSfHAmJiJlcvUej1Yr1QLXHpeBSj8MC3wLJbYlvkjikcuzjVmVdmFIqrUkPQahqLsVzN43o4iWOeqflk96kQMNsIXr487M%2Bfyx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbe41e40dd54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-20T22:21:19.482846Z","times_seen":151505,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.casinoroyal-girisadresirniz.icu/Casinoroyal.png","fqdn":"tr.casinoroyal-girisadresirniz.icu","domain":"casinoroyal-girisadresirniz.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tr.casinoroyal-girisadresirniz.icu/","date":"2026-05-15T01:09:28.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoroyal-girisadresirniz.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:32:18 GMT","end":"Sun, 09 Aug 2026 07:32:17 GMT"},"fingerprint":{"sha1":"A9:BB:9E:86:2C:35:E7:4B:48:F3:94:55:D2:91:8C:2C:C5:B7:BF:38","sha256":"D9:64:E3:F4:D8:67:BA:DF:FD:B3:3F:16:A6:59:7B:AF:D9:34:FA:E8:6D:F6:81:FA:0E:F4:A4:03:94:D0:BF:8C"}}},"request":{"raw":"GET /Casinoroyal.png HTTP/1.1\r\nHost: tr.casinoroyal-girisadresirniz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tr.casinoroyal-girisadresirniz.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 May 2026 01:09:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 30685\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=14400, immutable\r\nexpires: Fri, 22 May 2026 00:35:36 GMT\r\nlast-modified: Mon, 11 May 2026 10:21:44 GMT\r\nx-turbo-charged-by: LiteSpeed\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y7U2Slf7IFQGWvksmejnmb%2BPWlNphkbTW9JGFcHn%2F8mZU%2BGJ0Fs9VMxgJ%2FtTpv4S3mqYVjKvjJICZQwifCUK23w4h14iwmiXZ5huiGmkn89yRRHApiYr1ZB2anq0MkCsZhj747WVIBWyBmgUoINAOOwP7lFh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fbe41e40dd64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 448 x 500, 8-bit/color RGB, non-interlaced","md5":"e5b764127c458715a5b204284ee19ea8","sha1":"227feca7baade27dcb92cd810679871a0ed612a0","sha256":"85f98d06cc62c6ce2584b0cdec76637abaf1392d0ea602c84f3f57391400b96f","sha512":"5b4f059d39e329c4911a6c96817fc70e3d75107c4efbc4338e3297f41590546dd902dd59828daca4a589febcea4f0298106aee396ca3ba9db9dbc3c9f7a8d9ab","ssdeep":"768:TsTu/6P1eg0HRQTl17Z86jBqWeUnkuHM/4iWX6:TsRMQTtjUWeUn7Mga","tlshash":"c1d2e1ccd8d9995dcdc1af7e468b9898839ca849dbe9e1da6f0701202d809fd111b3cf","first_seen":"2026-05-09T16:58:13.219275Z","last_seen":"2026-05-15T01:09:54.244072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoroyal-girisadresirniz.icu/","fqdn":"casinoroyal-girisadresirniz.icu","domain":"casinoroyal-girisadresirniz.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-15T01:09:27.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoroyal-girisadresirniz.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:32:18 GMT","end":"Sun, 09 Aug 2026 07:32:17 GMT"},"fingerprint":{"sha1":"A9:BB:9E:86:2C:35:E7:4B:48:F3:94:55:D2:91:8C:2C:C5:B7:BF:38","sha256":"D9:64:E3:F4:D8:67:BA:DF:FD:B3:3F:16:A6:59:7B:AF:D9:34:FA:E8:6D:F6:81:FA:0E:F4:A4:03:94:D0:BF:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casinoroyal-girisadresirniz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Fri, 15 May 2026 01:09:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://tr.casinoroyal-girisadresirniz.icu/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=2592000, public, max-age=3600, must-revalidate\r\ncdn-cache-control: public, max-age=2592000\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ffskiyQxsIenyJmBxS9iLaAjZOA5vSCpgx08te3XZrOyLDO8LwaKb%2FzacXNmFGprhDXIAwx1x4Sxk7t8FJ1hUtyO6J1Ta7usWxZakszmAIqO2%2BrtgRekXxqh3hwXeN6v%2FIkW9DJ8w2V3NE387W%2BkZR8%2B\"}]}\r\ncf-ray: 9fbe41e0bf9e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":55845,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T22:30:42.60301Z","times_seen":18000396,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":93,"dns":82,"connect":1,"send":0,"wait":87,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tr.casinoroyal-girisadresirniz.icu/","fqdn":"tr.casinoroyal-girisadresirniz.icu","domain":"casinoroyal-girisadresirniz.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-15T01:09:27.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoroyal-girisadresirniz.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 07:32:18 GMT","end":"Sun, 09 Aug 2026 07:32:17 GMT"},"fingerprint":{"sha1":"A9:BB:9E:86:2C:35:E7:4B:48:F3:94:55:D2:91:8C:2C:C5:B7:BF:38","sha256":"D9:64:E3:F4:D8:67:BA:DF:FD:B3:3F:16:A6:59:7B:AF:D9:34:FA:E8:6D:F6:81:FA:0E:F4:A4:03:94:D0:BF:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tr.casinoroyal-girisadresirniz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 May 2026 01:09:28 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=14400, public, max-age=3600, must-revalidate\r\ncdn-cache-control: public, max-age=2592000\r\nvary: CF-IPCOUNTRY,Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k6Cv%2Bc8%2B8OiTsSwDOO2QMQY7mRW0bpBkxbfSSMM262c29cUhN%2BSR%2BvaktlTcUptWbhpyD%2F8dDPDwlJkb0fp5DlYGiMpgeOrUPIYUdb6ZPHO0rknQf%2BFGkmeTR0P6TrSVAN6ylV%2BLQkAxCazmW8XyUgCWQAix\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fbe41e1bbbc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55845,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (515), with CRLF line terminators","md5":"75a20ae12ca433bb6eda63d6ffb3f7f7","sha1":"90c15086e5c7fbee582d3ba25f9bd8a5317e1e26","sha256":"59c8ecb5cf79b70949fe48dcbf49eb4571cefb7e5e021c590b5a6f0f2ce6846a","sha512":"83f0409b4d7154b10486738e008d8bdfbba5920d14077a4d4cef208df4463d4fd46833e6c0ad637696d1f05f24f513b30a109aca6716988d86efcaac00f69be4","ssdeep":"384:fSHOByriOBm+PtOBX/OBJ0B0IfE0HIFDcJMXuuRMJOX9sATOlrGBvawj6Faa6ahx:EKKs9aDuMXuu5K1GBBQh6ah6HolWXmH","tlshash":"5a43e65365916c1e9732a3d9f593a32cfd265357c10088aafe2d422f2ff4a6885f3748","first_seen":"2026-05-15T01:09:54.247838Z","last_seen":"2026-05-15T01:09:54.247838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}