{"report_id":"9bc30289-9c7e-41fa-93d1-487ce939f292","version":6,"status":"done","tags":[],"date":"2026-02-14T09:24:07Z","url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"padiisahbet801.com/tr/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"title":"Padişahbet, Şansa Davet!","dom":{"size":6510,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (419)","md5":"2b8d3415903daca069659886f44c47f6","sha1":"320e4a4aa0c71e7cc18971d65eaf0741c8961305","sha256":"acbc558eb5c10ca9fd9e2276857ce563c21667eb5fa900f27e52c1e3ef80929a","sha512":"a1b56a52ffc9d90855ae51c607214135f1e3f5a6df2951e2476fc2104394d67ab2a1d0aac760dcac05c449c2f53b0f26c260f7f3948a1d3990bc9abac2eeead7","ssdeep":"192:CrjRIG8D0nRk/RiDaixeQ7fUW0y+PGfpTNjXeOTyaLv2WUCWzip0U4WnM4AMcty:Cr9IG0uH7v2NCzDRcY","tlshash":"f1d1b65fc1930456512746919bbf3709f538a02bd402ceaabede5690cf0dec447a1bae","dom_hash":"domhash0ee511ea61a173c84f7bd49366933f64","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T09:24:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-02-12T00:08:04.368198Z","alert_count":0,"request_count":8,"received_data":449167,"sent_data":5106,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"57db31a6-b244-4076-95bc-5ec10ac25b3e.snippet.anjcdn.org","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-08-28","domain_rank":0,"first_seen":"2025-11-18T02:23:43.823297Z","last_seen":"2025-12-20T00:42:44.128601Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1191,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pamimage.com","ip":{"addr":"172.67.151.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-12-02T18:03:35.086466Z","last_seen":"2026-02-12T21:08:42.90493Z","alert_count":0,"request_count":2,"received_data":3168,"sent_data":936,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"go-cms.padisahbet804.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-11-11","domain_rank":0,"first_seen":"2026-02-12T21:08:41.266947Z","last_seen":"2026-02-12T21:08:41.266947Z","alert_count":0,"request_count":14,"received_data":0,"sent_data":7843,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2026-02-09T07:58:09.555546Z","alert_count":0,"request_count":2,"received_data":581,"sent_data":1141,"comment":"","tags":null,"fingerprints":null},{"fqdn":"header-iframe.vercel.app","ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-12T21:08:41.250247Z","last_seen":"2026-02-12T21:08:41.250247Z","alert_count":0,"request_count":1,"received_data":7062,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cms.padisahbet804.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-11-11","domain_rank":0,"first_seen":"2026-02-12T21:08:41.259682Z","last_seen":"2026-02-12T21:08:41.259682Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1018,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":1,"received_data":80666,"sent_data":426,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-02-11T17:36:47.560103Z","alert_count":0,"request_count":5,"received_data":190574,"sent_data":2449,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"padisahbetcom1.wordpress.com","ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2000-03-03","domain_rank":0,"first_seen":"2025-11-18T02:23:45.273696Z","last_seen":"2026-02-12T21:08:43.113892Z","alert_count":0,"request_count":1,"received_data":13933,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"eu-swarm-newm.padisahbet804.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-11-11","domain_rank":0,"first_seen":"2026-02-12T21:08:41.255477Z","last_seen":"2026-02-12T21:08:41.255477Z","alert_count":0,"request_count":4,"received_data":0,"sent_data":2292,"comment":"","tags":null,"fingerprints":null},{"fqdn":"padisahbet.winwingames.io","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2025-12-20T00:42:42.147312Z","last_seen":"2026-02-12T21:08:43.049641Z","alert_count":0,"request_count":5,"received_data":58171,"sent_data":2378,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":2,"received_data":5296,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"padiisahbet801.com","ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-02-12T21:08:41.250148Z","last_seen":"2026-02-12T21:08:41.250148Z","alert_count":93,"request_count":93,"received_data":8524116,"sent_data":49050,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-08T22:20:44.026892Z","alert_count":0,"request_count":3,"received_data":1262388,"sent_data":1332,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-02-11T12:56:59.079478Z","alert_count":0,"request_count":2,"received_data":54047,"sent_data":886,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"crm-lib.fasttrack-solutions.com","ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-28","domain_rank":1905587,"first_seen":"2019-02-04T20:13:24Z","last_seen":"2026-02-10T04:19:42.461673Z","alert_count":0,"request_count":5,"received_data":2898081,"sent_data":2439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2026-02-09T04:33:07.619159Z","alert_count":0,"request_count":1,"received_data":99997,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"i.hizliresim.com","ip":{"addr":"172.67.154.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-10-11","domain_rank":1356069,"first_seen":"2014-01-15T23:35:04Z","last_seen":"2026-02-10T02:03:19.474546Z","alert_count":0,"request_count":1,"received_data":219831,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.onesignal.com","ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-09-10","domain_rank":31060,"first_seen":"2015-04-22T13:41:50Z","last_seen":"2026-02-11T13:39:31.528825Z","alert_count":0,"request_count":1,"received_data":10027,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"dataspot-int-bucket.padisahbet804.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-11-11","domain_rank":0,"first_seen":"2026-02-12T21:08:41.264095Z","last_seen":"2026-02-12T21:08:41.264095Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":472,"comment":"","tags":null,"fingerprints":null},{"fqdn":"icons.padisahbet804.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-11-11","domain_rank":0,"first_seen":"2026-02-12T21:08:41.249359Z","last_seen":"2026-02-12T21:08:41.249359Z","alert_count":0,"request_count":14,"received_data":0,"sent_data":7240,"comment":"","tags":null,"fingerprints":null},{"fqdn":"geoapi2.bcapps.org","ip":{"addr":"185.162.230.7","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2019-01-31","domain_rank":1722879,"first_seen":"2022-12-18T09:36:24Z","last_seen":"2026-02-13T09:27:33.490655Z","alert_count":0,"request_count":2,"received_data":1794,"sent_data":934,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"padiisahbet801.com/assets/lodash-B2ykpnJz.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c6842a63ee365c3acfe1f72ca308a063","sha1":"4dbc52f9fd6f6afae3b5e1e00ccee61cad8a96ab","sha256":"03a5c0c386bcde5ff9addb345a31b66ad332a11efaeeb9896fb1cc1f45822edb","sha512":"7fde0dcb8c25c76a112e0fae6757f1947db8c2098246bff81d9994cbc01fa9b9defd18729c770f5ce98c1b235dad96c58b6d9fbfb8ceaba248bdc94ea36c1c68","ssdeep":"1536:Q520uwaecP3RKJ3/seniln10ohXRFSNN/as/CeDwqnNdJfhjDzJm+JJ6iD6/AThJ:QgkcGnIfFSb/amjyiDPThMI5qeJvb5","tlshash":"8df3a1c835d7f0a183a7287440bf084ff23ead65a84cd054e1aae0dd7db89199277e6d","size":164651,"data":"","first_seen":"2026-02-12T21:09:52.662056Z","last_seen":"2026-02-14T09:24:23.230921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19454832\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fpadiisahbet801.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__7ey4mtcgpaj","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddd5ee2c2dde8b6a5f4a8e289d4d98cd","sha1":"b0838235f4858bdfbcb43ef484a00d9d9c701fbf","sha256":"70d22772f70e9ead17e7d2877977014cb50ddcb43625df5f23e015d98b21168a","sha512":"48f291077a3dd149587a326f3a6acb7249eb1f3170eaf67346f99e89cf02735721916476ca58229ebcb0bea63e58b391e9c93cf8b9fe58ac7ae2f3c833831358","ssdeep":"","tlshash":"9fb02bb3f7339a341a0df30348081086b01c40c4000a399970c45220810d5c84340b05","size":126,"data":"","first_seen":"2026-02-14T09:24:23.225636Z","last_seen":"2026-02-14T09:24:23.225636Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padisahbet.winwingames.io/public/proxy2.js","fqdn":"padisahbet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b41727e3bb910f357362f457cd790afe","sha1":"377822d23e102ffd0ccfff02bc27c63ab5e6a155","sha256":"179e54650e8fdec7e1bd16f132dd4d626b119a6a746288083f770307b8ebc050","sha512":"191d6ef739cf7a53b6b575b15db98bc666afdd2e27a13db067ea23af7b7f62df6b519c413fe99306127bde94665c935b5f802ea6305c6a7b7e8349b05b5c3dca","ssdeep":"192:0eJp461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:lJ/Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"c992860e92bb2123447334bc978ba146bd1150971d0acd847f4ce394bf85b6eb6b27ac","size":19500,"data":"","first_seen":"2026-02-14T09:24:23.223307Z","last_seen":"2026-05-19T18:11:41.39824Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-CjSfBsBO.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7b4a4bbad5c5a6f160ef0669023415e7","sha1":"4553d91dc7fabe659f52f9d337504dc9f0e0cb21","sha256":"f2f06f2521b54be5af175ea4d2c71933defa31b68b59321c2b0aea2cb5b4a169","sha512":"1f1d9541f5754254b899661ce589d667f61a5f29fb4285d49c6fe96aa73408c48c37c392292d348d0106b0cf118dc8b02a9f7cd91b6252f89277483f91ce7c44","ssdeep":"","tlshash":"085152d63e929cb0529681a52a7fd2593163352ca104a470feed98986f20e47c902eed","size":2462,"data":"","first_seen":"2026-02-12T21:09:52.684155Z","last_seen":"2026-02-14T09:24:23.220187Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/GoogleAnalyticsTracking-BggHLP3v.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8769303a44940be9dcde3e019bf2c71a","sha1":"63fb4f5488aba940d5d2e8e4b3a7e076a4cf35a8","sha256":"e7e2eb94f84ce69a4e39f604fce348c8e3db3f565fdf2a40d7ff21bcab8e30f7","sha512":"adb5c3ac0d0064d0fdb95a18f646e157920dac6fdbe72a3e18a7c2eeefad944f6274ead7b07af3240ff737650659f0e86873e9c66d7d9b4dfafb9644290e44c1","ssdeep":"192:tMwtlZTRNRnqTdCTbxbHXCT75hrxGE0IZshp127DNhV6Wh52I5gQwpvuF:tvlZZmdCNCwEYUhptIuF","tlshash":"c152c69c32adb0b282df6054587f320bf1755910a458f480a265fdb46ef8c9f52abf36","size":13981,"data":"","first_seen":"2026-02-12T21:09:52.620335Z","last_seen":"2026-02-14T09:24:23.211046Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bec8f62ad38cf50db60eea0fcaed78ad","sha1":"cd773fe7f4b9355a0a8a5b60da6c82f1507f87a5","sha256":"441583d0e256f99032dfe8a0c8ec02b90dc1f39a48e1e56cb76510388073a713","sha512":"7b38ce4b54eb095675e888a9b773d35ccf99e333f659c985ec17141f222d36d1349cfe9163bf32637494fbc64776d3c9892e74b3c78c64a984d9796d61c033fd","ssdeep":"","tlshash":"57e0a31d1c1eb4212bb41a68f637851530d9120125412665cbd7d4643970dc55cd5a4c","size":423,"data":"","first_seen":"2025-09-03T14:22:22.441493Z","last_seen":"2026-05-19T18:11:41.531691Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-C75pT7xi.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9e0d3d7de4c5e1aa2e573f4a0ccd546","sha1":"c7e99fe78536c4ea09d4b2e373325161f0fda413","sha256":"a018042e6553f2b9723662cab56699c3083197e79e0141b7527f80e9dac63c80","sha512":"b89792ccd55ed70acb93bfda12e9220ffa64caee4f3b1354ab5a013b78478743cc6a545c35ceb63a291b8994ca1f392ecbc3245c61630871922893fc5b47f409","ssdeep":"49152:tHtjf7P93FQQrVgj5vLPE83Dsq1BHC8obFb1zzse:kDsr","tlshash":"cb95c34aa6f224358223b0791e2fd51a3625490b5d9cfc683f9c92541f4d43ea2f2fed","size":1939981,"data":"","first_seen":"2026-02-12T21:09:52.788961Z","last_seen":"2026-02-14T09:24:23.282831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"header-iframe.vercel.app/","fqdn":"header-iframe.vercel.app","domain":"header-iframe.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa220b1547cf7016a60c010c23555411","sha1":"b82b277e4fc2eeb047d81893511aeff8db2523f0","sha256":"702ab87122db854cf55c10f9eb3dd4a6f459db731b7b1d8d348bebf2b616258f","sha512":"98a950d887f57aeac159474c62c17def1c46c90b9aaa364d4b7ef9a424ba71fc9db21cf9827f8bdbd1a89280453686bf284a66e90b5627eb257d8bfe1d72f1aa","ssdeep":"","tlshash":"01018b6d4f67c1dc6663217e1f7e411020bce87be845ce067d5cd2508fa2e54025aedb","size":677,"data":"","first_seen":"2026-02-12T21:09:52.781325Z","last_seen":"2026-05-19T18:11:41.529964Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RC9240401Z","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7123e730156e2678bfb3f102932806f","sha1":"a3633c8688e8260f3fe892fd608150261c69d266","sha256":"42940d31a5bef72fd2f0ac89ed7b5cc7317b7f537b56456b38f242c25b443b14","sha512":"3724d0280e4838f4dc9350413d4da22bf286f3d283b1b6d1c1fe0f5babd9c11545e7402d43a084a73f69013df306b9123bb205f1f64c2b8a0bd3ca77567cdec0","ssdeep":"6144:MPjNMmwzYRrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:ajwzYRSmIP8G44BSa","tlshash":"6fa419ce73d674225296f478503f018ba57b24a2f49cc89af189cce42d74a9a4277f7c","size":450744,"data":"","first_seen":"2026-02-14T09:24:23.183445Z","last_seen":"2026-02-14T09:24:23.183445Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/PromotedProductsWidget-DA3bpxxz.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a526a3a9c60347bc73abe851e0f149d","sha1":"ae9c7fafc93eaeeb820b06531fb76b01bf3c11e1","sha256":"221aba9eb73c3ab424d4e205818ea6af4f2ae7cf9cb683fcf1571008a9aefb5b","sha512":"9a2461afefb8c185aee2a2c22a52ab967ef34286e91d37aeb6f5a1976c6379e0accedb12aaf4539e6fbc4d248f361646da1fedc4bf58f742703ab9d9ec1c3d26","ssdeep":"","tlshash":"163110cad534a37df27d0cfc020511c53a177d28dfb589a1e0aaac06d039815ba16fac","size":1701,"data":"","first_seen":"2026-02-12T21:09:52.666928Z","last_seen":"2026-02-14T09:24:23.233468Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/events-DGycpgSD.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2c2d1aba64f2ec39e8ccadfffba377be","sha1":"b760045fa3fff4c67d39c82d7b8c7c1d8b60a662","sha256":"e059549e26e71dad947f4444e07bcbddec30cc27cdf28f8cf4085d1002ff7fcf","sha512":"fec61a002b501439777aa9fbd58ae4e03933a1c17655786b59ba1932b966f369a6ecf185a455e37e7ec779ab36ed3c486931ae0e8e3beffa64f50ef0b5cbdfed","ssdeep":"96:tRd9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:tR3IM2sWMtBq6n3PzH","tlshash":"f9c143ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126b78","size":6141,"data":"","first_seen":"2026-02-12T21:09:52.693658Z","last_seen":"2026-02-14T09:24:23.148033Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06d9317d6145dae4587ea0db4a85c20c","sha1":"8847e7542b83501b630874d660fb0989da485434","sha256":"2747d90f10901eee70f1e86a46e674b62322d0409b2c8b927f73548482a789c0","sha512":"f3acc3e23178d7a690c8ac5e06a81ad0b9590c1e599616df078e649a1c4eb0d8fa6741541772f463970279c23b6be535ef04e9f68a2652fb23f62f044aab8164","ssdeep":"","tlshash":"e6e061cbba9914742d47917567784e65751222a8e04140379cfccc35341469f49666e8","size":389,"data":"","first_seen":"2026-02-12T21:09:52.774426Z","last_seen":"2026-02-14T09:24:23.287108Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-Pb0kLhjw.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6a84aa1da1a71063830bdf2e881ef454","sha1":"34f58120ceef75932032c0bfda06c94d3130c181","sha256":"5854246759af34b1ced58c72085fac024406f1bc4c841d10085dd1c24e5fa547","sha512":"6791df393f7e75afbd78c96fa2eea557a39cfb3b4c4b1f94e404d176ba1cf4b8c13b4aede1cc3632bd12b0d6c87d99009c4f4eb414097edc5d3cc9a1b58352f6","ssdeep":"384:dhxMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ0:dhxMci408FFnJrIjE3D/OY2E0xqpc1NV","tlshash":"5982fad0e3b4f7a642e86add80392074f2248c28347dd0f1b6b6edda70664ca856dd37","size":18027,"data":"","first_seen":"2026-02-12T21:09:52.656149Z","last_seen":"2026-02-14T09:24:23.172312Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2363889186e23777b4b704661794f3d","sha1":"7f50ba76565cbebe1ce54ed6e30f3794fee96554","sha256":"f71def488c2fb369e417b84e2088a8c9c21a59a3d1dffe4a43f4dad196460b8c","sha512":"4fb51fd523149c9cb04134a77d41461736a1e832dbd48af01a71d47843a56fed5a4474275e8752a2460c3cd7203bbbe9fb897a4c027d81a6b446973169d3eea4","ssdeep":"12288:xF7gB5EvtEvEEvtEvud6Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJyO:xGBzd6BgJn+wT8ZI3I5Z7y+","tlshash":"688533582a6bf3849409d0d7f9373d84c59ed19aa44764d24fb24bf31bb2352eaacd03","size":1831195,"data":"","first_seen":"2025-03-04T03:23:02.060485Z","last_seen":"2026-04-13T13:13:58.719874Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/SystemBetCalculatorContainer-CX9u-UKQ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47e50f5b2cf0686b114e31847dbe750c","sha1":"9b7f336cbf6ccf716d2b579f4bbefc05f67923e3","sha256":"7cc63eadbcd0f9c3b9446d393211c1b4c3f31c57ac3596bb404f17c7b277d4c5","sha512":"b101f79f2ed5ba1b692ea1a378ad32837a05baa2fbaf53b01f40cbbf3b5d8342bfcf2538767a6b589408ee7962dcfa17c939cfd0b3221c7fbeeb98363ebcbea2","ssdeep":"","tlshash":"6b11dc626368cd75c48e0fa2089590840df00708690cf528b2b54d3ca01589283eeff7","size":940,"data":"","first_seen":"2026-02-12T21:09:52.632184Z","last_seen":"2026-02-14T09:24:23.122227Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/AppSettingsButton-RbfiIfSo.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1b3f788cc8319cbfe44e55cbe7def74","sha1":"521f629f57d8202438779a094b6e104ff017ee16","sha256":"f375faa0b61473ef8b0c2e8030c887b7c19f22048b36bd3d87e549bc7e910a28","sha512":"6227250fada855ade5de67f98ceb540898b5b36855db5e4e7a07ecf660eb428b8b39cde1f24bd656848dc5567661fd1c04930e2edd1cc9e6b78b986617b0b3d9","ssdeep":"","tlshash":"ebe060875083c3fa03d11bc0c11bc10439063c78c344e802c0bc219136f0093c14f66b","size":385,"data":"","first_seen":"2026-02-12T21:09:52.580944Z","last_seen":"2026-02-14T09:24:23.273476Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-D3bGYEet.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"926c847723e7d230b7277ba06fc8e9b7","sha1":"4e02fa4876ace3ba750293fb5b14d7e491a54367","sha256":"aa074fd5b8138e08c4822a637695ea243e3fca94541769ddfdedc63ae3878062","sha512":"4a243c541aa31179c2d6b970c025da8c9ce5d4615d87be45637e93c81470d5727910addf4a94dc7d2bfa2a8dfa0144a5ca1731b9d57ea4f5221bc39c416d7a42","ssdeep":"","tlshash":"b65131c76042d7b8bfe708e6419b10b074374e5cfe1a449082be15864958792e35bf4d","size":2923,"data":"","first_seen":"2026-02-12T21:09:52.638462Z","last_seen":"2026-02-14T09:24:23.139172Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/TabItem-zkEF3Idw.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e59e36887f8fcd88c5d20ac121a95ffe","sha1":"68438ecbe8dfff1e718e44016f3ed72127e55415","sha256":"529d42530d7220d8394807642b9cdd073370ca9378fcd4a90aeaea470dfdc647","sha512":"84910f6aac0ade165c65d2d9612be6ee4855474b5e14c6a2e7671395722e8b62023d5823a5a680a8fa3e32eb28349e0a188efcb562e0ac0dfae5bfcadc30bfcd","ssdeep":"","tlshash":"b9e02b42a020f3f5982b44d6d67e94c7721219dcda5588e6a1a22040072e521f74ff8e","size":413,"data":"","first_seen":"2026-02-12T21:09:52.571417Z","last_seen":"2026-02-14T09:24:23.205844Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/tr-_8aK4b6t.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c9e6db0bbae2f06584f8ec90d96a6fe","sha1":"d0f5fb65b8ba7f0dc04dd0a0a2e41a0140727aec","sha256":"db6191cefa0291f71ec6b795b48497f047effddfa9941f1b7d3cf2387600939b","sha512":"7a4c2c0c28d6d3102733fcfaf95bc776bd639b4674960bc83a8c0ae8bfd0dce549d700f719d469181cd428616914622ae16f579cc7f96621fe10041477f68c90","ssdeep":"","tlshash":"8931a44c2946eaf2870159878c2f1f04f40c2b087036f1619be0d521bab09ee807eb3e","size":1459,"data":"","first_seen":"2026-02-12T21:09:52.663913Z","last_seen":"2026-02-14T09:24:23.199878Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/InternalDataspotTracking-CCL-ross.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa64f56221103e57d49f5599c4a8aa69","sha1":"5ae2681e283628791bc1adc563efad2768c68fec","sha256":"e1831c14ddeb3409bf6b8a5872e2a472a89f0b8da0bdc4cf5af7cc3d3dd7b6aa","sha512":"caf2d93c16b7768f1a6e6e1d10c2f5f68b52e0a5260b32cc3f623000d416f34e9c981401f963090ebdc6ad748c1233eb26a818e46b767550125261536eea7734","ssdeep":"","tlshash":"6d81841fdc3c08b0b060cadc5837d566856c3c96a690dcb060378eaa621fe45d7f6e97","size":4012,"data":"","first_seen":"2026-02-12T21:09:52.763203Z","last_seen":"2026-02-14T09:24:23.249387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padisahbet.winwingames.io/anjou-js-proxy?seal=57db31a6-b244-4076-95bc-5ec10ac25b3e\u0026domain=padiisahbet801.com\u0026t=1771061029940","fqdn":"padisahbet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80f3433a8ab07d3110a1a3e394bde3c3","sha1":"ce64686f7e2eab303078233eb4e12447e93e8b60","sha256":"d1260f89b02d133372fdd34b84afb3b96b165bf80613ae5ece6eba77aead4bbf","sha512":"3cdd6599f27cdfb188fe9cfcc7ea612297f2cbb1e8621cbc8e8ad5ac21fcf3aa4cdb8384f361c28fa26efec4e70b21a85409cd7818d9075299cd705335f2586c","ssdeep":"","tlshash":"b15140586ca011f62752eb9b6aae30e9e761815f3d804cceb5207ca8fd44e25d1b9239","size":3063,"data":"","first_seen":"2026-02-14T09:24:23.239457Z","last_seen":"2026-02-14T09:24:23.239457Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/userJWE-BKTDW0tM.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b13936be56673374416cff69516fb5c2","sha1":"281c349087db341076334b8cac9f2f51e9d073ed","sha256":"adc14e213ffb164e40aa2f2e4b737c51e2a5690584170421628adcf1951e7469","sha512":"3b6531c07bd6744a5e9d21a9283f056a72425aafbf781332d5fb4ad2f3577d120988803716dabf9da94afb467164f3cb0be4175bff03709dbf243b7699a6b7c3","ssdeep":"","tlshash":"a9c0c0db0cc411f7c5582c801015dc13c230391863d8d3825b0c93ea7b5100bf20ca10","size":193,"data":"","first_seen":"2026-02-12T21:09:52.758847Z","last_seen":"2026-02-14T09:24:23.216719Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/BetslipButton-CiR__ZA1.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e55dfa16372e45cc735f245b352d713d","sha1":"c47d7ff257b4e770a1a5b5b49902374d1cbf10d6","sha256":"a071304bb6e8713bb7d122406f002d2543eb6e3339894f95f1500d5d3e9ae110","sha512":"3e81f0623c870d348f7a73d6085a3c3f419f6ebfce791850b504050362354ba1adcf5f60ccfbda57541f54b034e977ccc542ac0d6f243e91068b89b8cb930853","ssdeep":"","tlshash":"33e0f1878949c2fa0bc609c131028221342769fca344f491c0bd2de23b74996c45fa7f","size":418,"data":"","first_seen":"2026-02-12T21:09:52.634939Z","last_seen":"2026-02-14T09:24:23.180268Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/InformativeWidget-BQZOZXx0.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08b0a016532cf01e03b37b17a2168850","sha1":"eaeac0ee3088429323920adb0915548f969ef60a","sha256":"bf6b146d786e759c49d5f942cf745af9cd7d5f5c6366b28c2d681301338ac664","sha512":"e0408a2d64b69803d31c22f4892f9a98766427497a04237cdc5680421d834c4e26d7a7f416829318724efa75c5b7ba9c82c92d90714c0bedfa018386daff1815","ssdeep":"","tlshash":"84116581e291d63ef06604c84716505465227ed8cf38e8fd84623008d474d0ebaeafad","size":1021,"data":"","first_seen":"2026-02-12T21:09:52.597015Z","last_seen":"2026-02-14T09:24:23.218285Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padisahbet.winwingames.io/","fqdn":"padisahbet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f41d1e4d97b84611475e360067eefdf6","sha1":"861a9416db45d0c7512b6fa5d4b7f866981022d7","sha256":"4a25f346fac8b64c46732172c4139a5bbcb2de920ad0e648b1e8e6c73cc11983","sha512":"57d09b13a155e2d3cb3a97693c7008761d107223ee93f7fe7b37f61fe12c517c6f5c91f3c6b37e0e971cc92d24dbab5dc830f6daed33c349a9d68a94ab148bbf","ssdeep":"","tlshash":"e6511c3606b31421036b206d37abe316b23a9243354ce945be9d93015f85f79e9b2bde","size":2494,"data":"","first_seen":"2026-02-12T21:09:52.796373Z","last_seen":"2026-05-19T18:11:41.517595Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-Duf0mDX4.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b55f8290681601bbc6c8c90e7a47df59","sha1":"1b60a5c7eca5fad708dc007d466eea7af1569ef6","sha256":"bf8905992c41b7edb8144673aeb5bd2886d3505e8f6dfd41975b94be2902f482","sha512":"ba7e2544fc515daf634f0af2694f927ecad54f557c569cb0748648a98e24734ac0395240f77bd8ded812f1b39d3998bbe7afff1544b01c7f31cf80ceaad9ac4c","ssdeep":"3072:mEwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:JwhFHU4HNwFH7MoOWexZFHV","tlshash":"59f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","size":157556,"data":"","first_seen":"2026-02-12T21:09:52.64838Z","last_seen":"2026-02-14T09:24:23.178277Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8557807572bfae8e9e2dceeaf9356911","sha1":"072efae1cc1897dbb46e313f8e59b92085f3d652","sha256":"87c065bb840a19b0c2f8e01dffa7198479e3fde3349c2ae6356ffbe3f767e3b9","sha512":"b0e95a4fc42a8d656c2cd333bf6558cefd296f5f22b858132a86e795dc33cb44aabd2675b64a9545ca40be832f6fbb7885e9ac8c1f5e4702c564d372bb1326f7","ssdeep":"","tlshash":"cc413eb93786bcb200f96233d6af771734f5d072d4018c10272adc896ebdd6a41a6c6d","size":2134,"data":"","first_seen":"2026-02-12T21:09:52.77272Z","last_seen":"2026-05-19T18:11:41.493748Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ccdb5c90ca32266cf2f0dbc529a4d0a","sha1":"b5f1e3778e02c35288757de9d6c61047ec1b281c","sha256":"17c9c1105a89db5665e481ebe28fdb9367bd3f60932ba946d691cd4f63fe6e86","sha512":"c74cbfed78cd5a07d1ffe8fbb19e1954eed654aef214c9bb7c4cb1080014355da3af09c071b904e8a1dbc885d245197a403b068d3537d0168f4eb53cdd6df460","ssdeep":"1536:Jwk6ey/PIZHo+DqA55l6DbJZ8VUbzIYbRd:Ae2Iqol6Dbn8gIY/","tlshash":"e273f8916a04f03776bb45ae65d1e2047af99405fcb34854f42cc8804fe7d4f2ab7aba","size":79889,"data":"","first_seen":"2026-02-03T04:25:08.402639Z","last_seen":"2026-05-16T03:25:17.333694Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/LiveChatAdviser-R3KXQ0gv.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3336a29ccac5102abd384f79f263046","sha1":"5792d3b95a11d722bbbb0e4a064a82a450a81ebc","sha256":"c5685c9f11e1041cbc5b179e9be5cf2cab1ef198b825905775709dddc1bb850f","sha512":"057733683b987409a7b1ee7f1787836a4ff653a817ea596380cbd1c3d45e8d81d00a727c0b199bfebd68a79d6adf28a4a835f2cde19e44c5dc15f07f9c5520a1","ssdeep":"","tlshash":"43112fa5b0c2a3fd66ab188dd76a2043600a4ea4c12d0db6807b16601a6ce1aa30eed4","size":862,"data":"","first_seen":"2026-02-12T21:09:52.583059Z","last_seen":"2026-02-14T09:24:23.236318Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-DAR-PkJu.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"416071668a4412b0cab0d01ebfd63416","sha1":"a40ed3f48c7ace3dab59016948a4fbd950f013b7","sha256":"2ba6a2c41098d31ca356ef0617cea5a36a1c92e5e358c09f2a8b52a0e50ceebb","sha512":"c73f062f66024b79d841e98609a7aac5a92441d63eb9fd488592ac5d7a04818dd8ea9ed38af9271f418cf9ef648dbe6207920c8834f81a7e0775303b4b129a9b","ssdeep":"6144:/feL9y0h4R78o8e4YHIALoh6wj9Sd51jjVvFaxIRcDGRD6On:/mJy0h4R78o8e4Yo/j9e5xaxIFROQ","tlshash":"9a240ac4b274b0a556e594d4502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","size":221144,"data":"","first_seen":"2026-02-12T21:09:52.665211Z","last_seen":"2026-02-14T09:24:23.143285Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/LiveChatInc-C6OuKUDo.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58f629a6faddd3fc72278baeb983f1ed","sha1":"515f595d7642c8aaa1243ea7fb899cc1dce26d80","sha256":"3671644581febe73702157ece06c008d325cf5b0172bc627065f12a32ac3f614","sha512":"f9a978a4041e17e623a4a029381bb0caca5d9c4f6276ab1e753eb8aa7eb982690c5f36904e319fba4ddc8026ceb1c58d63ae2572af797c204a5a49238404c1c9","ssdeep":"","tlshash":"045132dec03cb4b092aa67e1323f7b4f7116671ad4048c31656c4b0af22a4cbc163aca","size":2920,"data":"","first_seen":"2026-02-12T21:09:52.594294Z","last_seen":"2026-02-14T09:24:23.128814Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/FavoriteGamesButton-BdWkzlac.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9919a95214db33d32757db03b82be25","sha1":"1a777db56991716e2c1b745f81ed595950579f67","sha256":"38f4e5a0788fbd6eeb1617a30d066cb2a2294b5e982177b67ac3cfdf85d4e7f0","sha512":"d99602a241ca41360fb0ce0e7fc6de0cb83e23c9747ee6a0a11e1f8eff537742bdf03e8b6bc4ecb21796570ebca65846a594576e0afec94e86757adbfab1cc1c","ssdeep":"","tlshash":"5ce0a307904ad2f93bc717d02513c024242ab4bce748e09080d915943971467c55e96f","size":427,"data":"","first_seen":"2026-02-12T21:09:52.611007Z","last_seen":"2026-02-14T09:24:23.232123Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","size":6791,"data":"","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","size":75107,"data":"","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P9XCM3NJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fdcd6e8fd83168502c0b2ddc3b55321","sha1":"3524c10ea61652c5f65076d75d6ec3d76971fbcf","sha256":"138bc7ebb906200de6898bfbdafd1c450503b63d4927f586e6373d5c7613ed62","sha512":"a14acff495431066f6386de2e70d5895bc61d2da293cbf1714aab2c41cfbd1ed4c304fee1693b224670144153b43bc98ed534838f01be67279af06d4b6bed919","ssdeep":"6144:Mk5UjqMmBYPpw8wENN8gMuSgP14j9VkC4BGGZT:MkPjBYPgmN85H4B3p","tlshash":"b97429cdb3d6746243a3a478403f114bb17a68a2f84cd894f186d8d42e74aae4277f7d","size":359071,"data":"","first_seen":"2026-02-14T09:24:23.118599Z","last_seen":"2026-02-14T09:24:23.118599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"703f8bd040461e1f65b690e030915702","sha1":"5c0a3ab0d8a22c25074015a0981caff762a40e04","sha256":"67aef808b97b2b8180edfcc4f9fa0dc9ab5c58b5e86ef538eec7ff6b572ef318","sha512":"3b6f5fba0c279ab97d04705be277863ae70a96f6d65a55da6f8f3a4c7062dd8c3832b9ba22a114157bc380d1b70624714d2779d51745cc10687f35c66045e0e4","ssdeep":"","tlshash":"7d0123bd33a6b110f251121f87afa71474915029184280029576d8bc796be63b4f685c","size":673,"data":"","first_seen":"2026-02-12T21:09:52.776335Z","last_seen":"2026-05-19T18:11:41.512332Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b91fb4d36bcc15b5911e676da812d80e","sha1":"544f4e1c87bd2c60dc63cae161986122496c1ede","sha256":"befc9be725b835e63b35f5c1d708f239d48cd8d23b1d430452286f997df06ada","sha512":"3d1a6360df99446aa092f9aca39582dca0c92babb32f4a796adbae56862d2739590aa54f7a01d612f18f27220dfdb213c13f2024b39cf70f688b89eefc2841be","ssdeep":"1536:EnCBo5ri/D4ivMPcYYbey4UjnzUSwppTPiD16on49d:ECBo5u/cJzy4Wn7p6I43","tlshash":"c6a339da7282b03453f786e7a17fa212b3391918340d8420f17ced6a395a987d177f6e","size":99247,"data":"","first_seen":"2026-02-13T09:22:56.43592Z","last_seen":"2026-02-16T10:34:18.024192Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/___vite-browser-external_commonjs-proxy-C9hg4xCX.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"78d2bf2a56f53b9ade3c5cd6ad4349d8","sha1":"b9dec07ec757f6fd77e0716687bbf6f0014aa9ac","sha256":"c6ab270d779ab004269296b1b174e198d4e4bce4fb2be386cf198d7b4e414857","sha512":"7d42fd9d1dc37b84dc6d7ba6009f65ac19be83cf9fa6683e677ac9161105296500fcacf96a2a35098c3a5677b9aeaef7a6a5637d2feb181aaee83d71569e68d4","ssdeep":"","tlshash":"0ac080552754dcb4618b1d8296159401d54c4d7eb3f4f5e0fb088e55020798f6278f57","size":178,"data":"","first_seen":"2026-02-12T21:09:52.587821Z","last_seen":"2026-02-14T09:24:23.215149Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"header-iframe.vercel.app/","fqdn":"header-iframe.vercel.app","domain":"header-iframe.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5030b7f3b5dfc2185431db3ac1676d8","sha1":"66a7f3f9c2ced2571920165e815ff92feac622c2","sha256":"2ddd117a9203131c7376c433df2dcf5fdf1b412fb4c8fd3493b2da0e80aeb05a","sha512":"09cb6c64664dc5b58bf4d07d0c24fc907e51654007bcc95e8a7b1376a471ce27556700535cd3b93dcf9d7e59f6f572623b957ddf07c141316d8af21f1dee0204","ssdeep":"","tlshash":"e531125f6452283458ab7eaea77fb209b83310078402de017c5e8d40efa4a775b29ddc","size":1816,"data":"","first_seen":"2026-02-12T21:09:52.783522Z","last_seen":"2026-05-19T18:11:41.530906Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/CasinoGame-DLF1BSvR.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d4debb005a2b2fa83f54bebf107c2ac0","sha1":"2373c594337d76c0ead023621f356cba41299704","sha256":"210c8f3b498a4b825142ca6a8ca0081533c8241217c495d31ff20b2cdaa043cd","sha512":"ba1852aed6c90a0752453d518f50b41b0dbe45221d0979636c25d08dcdefa81b027fdf349d5df9a9af56a63d14da003890fada7883bfce7eef0c7db022d68cd2","ssdeep":"96:juytJ4U5ySp8LCdaUKZUBbiRx2VZZ9L6u/T+x2mZ97vCbeKbcFSvu:aytCU5yihd1dBrDeiKJuMFMu","tlshash":"e6c19705e020ef7db9360cca986f1029b8192fd2de194465e47da839367c11db266bdf","size":5827,"data":"","first_seen":"2026-02-12T21:09:52.731749Z","last_seen":"2026-02-14T09:24:23.195839Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/AiPromotedGamesWidget-DQlZ-xNQ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce6d86745a8088618bc5c6a32767ed1f","sha1":"177eb730614376dbd9aee5dd3e69691c673f4eaf","sha256":"1c854329659b37f2f0549833fbad8ffc3333f147c4c88cb9f1ac9cde70b2ed83","sha512":"d5cfd9b2392c05ceb4c163e7982a9264f04aff5bbc8d8d1590729c50c4969727c0d87d00ff4135fa8795180c75154ede28749dd4163a5f2dd4732ca91caaa4cc","ssdeep":"","tlshash":"3341312fb01dc9bcb26c0aa09694b74994117bbcd719e0e8b6ff5a01732409d63b9f41","size":1963,"data":"","first_seen":"2026-02-12T21:09:52.622279Z","last_seen":"2026-02-14T09:24:23.207709Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a782c32d9c4fc86f4640c68ea78d1b2","sha1":"2515023399d94bf13fe2e8f8a7283a07c537a2e1","sha256":"d8e1a5266612afa216809a363eee027bbbfa3bbcf95ef311d2635ea3376045b1","sha512":"bd1051073fec95e9ae24d2e05adbc8251e6a04a4642844f2af2ba9ca1bd75c9911aa117d15464f379331c8ec040ca90eeff02f88213be62e3f2426fb8c508dba","ssdeep":"","tlshash":"edb0120fca516044036270290bb725073b9722d74d00a0a1bf8e85803f9d54f59963fd","size":117,"data":"","first_seen":"2026-02-12T21:09:52.777704Z","last_seen":"2026-02-14T09:24:23.301197Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"615d5777a09d444acf447bcebb5b8ee7","sha1":"b818020963d6c8a37fce63dc43a36c85b5357729","sha256":"8b027b890e8ba65700bbddd8c565089a6f2588b45b652b985407c54352ce1e8e","sha512":"a628a8658322549ea9bfb891636d213287f8012b9eb14f6a23981f0332d2ecd5c5148e5fb4599411a3c697cfd0f65c38e148c89f9482c5d1194b807908b61940","ssdeep":"","tlshash":"4021706b67013034f4a9177ab67b93cdb212712d8b1381c08b659438b52cd88307beb8","size":1322,"data":"","first_seen":"2026-02-12T21:09:52.785934Z","last_seen":"2026-05-19T18:11:41.527783Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdcff5bd60779f00cfcd2ce6b239782a","sha1":"438ebe1e4705bf0d531740fd7156b58dfd0b323b","sha256":"ef12169d3ced6ef5102821ae1c118a3e304fb8fb6f17ff8b942e77a14d7cce2c","sha512":"2eaeb4e25b9b25e91bd4d415053db4787f247c3cd340f6173734f2118c53409263b691a5d1950d2c13ad2ed86a31d23b51ae0413db722d84d4b2c6de6a3d9d88","ssdeep":"48:pzkrYXtE9Tgyjn5GdIr2ndssXEcGFHtvx853FBKU3j2GN2GlB6B4/c4D4SfuDZLy:hKtTjIdIrUeJqFSg2if9fGZLaMBC","tlshash":"e691519092f0043901a354ad6beb6e2a36545543ef0ea9013b8c4be00fce59bdd735be","size":4580,"data":"","first_seen":"2026-02-12T21:09:52.779056Z","last_seen":"2026-02-14T09:24:23.305644Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/19454832/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-06-08T16:18:50.73373Z","times_seen":27953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/WagmiConf-A39JFnij.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39f279cc9b9e6f0f0686ecfc979bb58b","sha1":"61e519b19569be622f0e57a1ae9f20b3c54f3e6a","sha256":"cd446851272c55ff37e9c7a7f59356432dd0c94894560cf00cff717c68b92e93","sha512":"f9f6872b08832709ee1a753e65d3a7136eaee6b884dcf3fdefe51f58a58100c57412d4f87f34b12f32d6312c5afe2e3eeaf2dbbd7a5a87e11cd2ae517f3de046","ssdeep":"1536:CYj2Caz30CdwD7ZajZlOxjMij4Yx6uxO7kaUhvFSEy7XUF3waG1RGYBsEUt0s5Pa:iCaMRx5xO7TUqYEUZ5PUR1K/XGl","tlshash":"f2a35ad07196b46103a74ae008bf440bf139ac34200e565cf269ecde79b96e99277f7e","size":100979,"data":"","first_seen":"2026-02-12T21:09:52.643492Z","last_seen":"2026-02-14T09:24:23.213482Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0ac4c5c04753abf285b9d77e3f9d8b8","sha1":"ce5ed33d5c0cfd83b4e752208db4136681c3d2ec","sha256":"1de5aea3de3feb92131c428591bb796ec1164d5800f38e16fda160ac950ba180","sha512":"7634463125d63fdd0181994626caddf2b6b399c7b40a62f4a39563b21ec28f65749896e7d3bd2da8f932ab89314a10a217fb93c27d64c0187f15adf47d19b9d3","ssdeep":"","tlshash":"0a011689fc42707696963228763bfa07516312255884a4335dfdc36fef31d87811368c","size":844,"data":"","first_seen":"2026-02-12T21:09:52.793562Z","last_seen":"2026-02-14T09:24:23.315933Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/walletConnect-CiycSUBb.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","size":1998,"data":"","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index.es-Cxue2lTo.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37d752e0756903c37497978f9edd44b2","sha1":"99cc1741de9a2abbbafb7caf46f3885de871703c","sha256":"c07218a36a98d1b47ed255dc810bbe3c1b9e84dd61c9de255193aec472830bb0","sha512":"e319b631ceeff5f2dba791764f8f81a3086ac5b67c0cc861c547d9ebd604d2635a247ec3eb6769ed862cc9bd3aaa5a0309a51ff900f0f425c2733bc871b6ab3d","ssdeep":"3072:dzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6Uvh:dz77jdU/7sJJMcvYisoljSFN1Nd6Uvh","tlshash":"f354fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","size":295236,"data":"","first_seen":"2026-02-12T21:09:52.658803Z","last_seen":"2026-02-14T09:24:23.135438Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/withPanelButton-Dloim7i1.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ef65121ec98a2473a86f9af94e614d64","sha1":"79d256cd63e311d01fb8d34afdc0542e9b162af7","sha256":"7e01b026fcaf01e33730f5ae46cb025329160ed8967d757ca24460ad1c06c6e5","sha512":"73d454cb8fc55f79b1e9965a2aba004a33ff347a9f8a3a37f3f4fd36082faca671b6237bc6dd346ed12f8a59da2f4cb6b0a7ecd6ababe73e8f65955680325a3d","ssdeep":"","tlshash":"3211f0f4f580a9f2e4c41088577b2cb2319a32c9dce1049021a6c8e91fa8449965e9aa","size":1089,"data":"","first_seen":"2026-02-12T21:09:52.7015Z","last_seen":"2026-02-14T09:24:23.202085Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/FastTrackTracking-YZUMgKRl.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18a96559ee1b22e1bfb5531cd3177b19","sha1":"1948acdf6acc6dc1ebcc60646dea5a4b447cc9c6","sha256":"43ed162458351c6f1f2c2b3749c5c1da4f3711a1b67d287b0d9f78c0c17d8a50","sha512":"e9f6a6514ea570cbdab86fddd4dcaf5c050321451dc68790b5bc12ab7c46b9753d0f57a0ffbdb23e757cbf3ad14f4c3b6a7c4536b3ebadbe1eb45e8a0df403db","ssdeep":"","tlshash":"ef21750f40d583a47c804d8de3e7a261953d6875711ec4e1f07a0bad3f0ca6683dac97","size":1322,"data":"","first_seen":"2026-02-12T21:09:52.568277Z","last_seen":"2026-02-14T09:24:23.137379Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/FavoriteGamesContent-Bs2efduZ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ff9fb905fbd76406fb3fe56778fda67","sha1":"95e5991cd8fb3a8ce3b7eca2f8209d3444400f1a","sha256":"50d15e490b03e1b796dd12cf890123efee2dd09c0e3f82a771573266d7d3c70a","sha512":"a9420678c99b688b97c3d7b3354a2f70d183845499ec6a8798b3a106d130fd4d99445bdcb196a2b0a4767ad9ab243d0ac203bd2c6f1aea79f56e9e25fb3d6777","ssdeep":"","tlshash":"dc51971100415ffcbade9ed96e2a80a04c76074c5146d17dae799f7e3029a507137ff9","size":2827,"data":"","first_seen":"2026-02-12T21:09:52.687425Z","last_seen":"2026-02-14T09:24:23.169727Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=491961","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6680b1845a2a5170d2004fdcd6056f1","sha1":"b743ad736be425098af82bf4c6d2be444f17af3e","sha256":"c180b54bb91629142dc5ec4bc8ee716ee0a69e90fb85b2f96aef958b6309f51f","sha512":"1c8162e833149151755f982653ac2aba12a9a3db8a15c0f66561baa11946583e4f117f7b16b8d875f204392a27d2ca4d96458929c623501338ef52de719dfddc","ssdeep":"24576:cl/V6m/dl/W7q8iNDePKHQCQr5aVbYrEN8L5EnAql/fR263nBP2n:clN6m/dle7q8iNDePKHQp5aVbYrE+L5H","tlshash":"b6157c9072567434c3b795a160be020c723d5f42740ac598f2bc99ea2fd789662bbf7c","size":951509,"data":"","first_seen":"2026-02-12T21:09:52.574579Z","last_seen":"2026-02-14T09:24:23.244378Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onesignal.com/sdks/OneSignalSDK.js","fqdn":"cdn.onesignal.com","domain":"onesignal.com","tld":"com"},"ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09282956186c8515ef0d208902803581","sha1":"ea83b81c9955b3e983a7bef75714a9cefa904151","sha256":"ec8b1b07980996f574075e1b7e895d5d47794b9dcf345a68d60fbb17034f7bef","sha512":"39bf696c593e20bd86ae8994eb8e767b6c7fa6fa029f94b5dbc145cc30dc9460bcd5544f0182a79e4befc85df960b30dc53d7b435db24463f0e91d82faa4cd10","ssdeep":"96:/AQneVFrK3RJ1oauMhLBiobXf1JqZ8zZDV81uZIJqEKIZft4JqxCYZX7+Aroq3I3:o8Noqhtig1XzZZWuZIUsft40pTrU3","tlshash":"0512449bb970b5f253d358f6802f210ae27b993894b9a4905b85c4e09c7161f4337f6a","size":9204,"data":"","first_seen":"2024-07-22T22:24:59Z","last_seen":"2026-04-28T18:33:33.656306Z","times_seen":13514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf67e7b643a88879713d46b094e06af2","sha1":"9c0a107b424e84bb865f3a928ea4a732c6c9f479","sha256":"aa242e0f379aba6f4e11a64403e5a298b01e9295a964d85234e320b8830cd2d2","sha512":"8141a7bd9831b8d96e27f7d22a799ea0902eed52b6a8835db446845717d87d7af5b7f1a1b5e11535a6e2957612049cd3e64c01c1f1a8cb9d28ba23cdb8ab57ee","ssdeep":"","tlshash":"a1e0f14f713671e14c4cb839de3314d58873170209b160001f8bd0c8ed0071f4161c6f","size":389,"data":"","first_seen":"2026-02-12T21:09:52.792092Z","last_seen":"2026-05-19T18:11:41.522124Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/NotificationsButton-CU_XrVSZ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cab2bff6dda01c5b7caabeb90103a52e","sha1":"8927a4ca8e2f197b302bdd5158963815d7379fcb","sha256":"8159133786b33125a85a25c536d4cf16feb9218169a57667d478b984c398ab2d","sha512":"2241b98c7149d5813da44ce11e73d955dfed30121e694f4cb7426e82cab780c4c745b0e9583a6b272d578fbea16fcfa515c62f6f492078d2c3caf5fa73524d3d","ssdeep":"","tlshash":"b5f02647a555d8b41bc3065073379011243f787cde06548040e72cd51370067c55f94f","size":558,"data":"","first_seen":"2026-02-12T21:09:52.677569Z","last_seen":"2026-02-14T09:24:23.226884Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/if-defined-CWaLTnLW.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","size":53241,"data":"","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/useOpenLiveChat-Dk2MTIdu.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b8b39af18932736280584cdf3c824527","sha1":"c41bf26c204cc179a042101737021bb2e50df90d","sha256":"0da81c81dd3aaa1294d06b41149d6a534ffd78285fd14490aa0b4bef3d9aa8c0","sha512":"ba1411120bae35873f9b6bf0b69511f67d9759e98fb19a84e989d4bb186ab8a5084db7200bbd1b5f9f8ee839f5ca102aa1327a891dc7a075e7803f4c100f2a92","ssdeep":"","tlshash":"edf0e1cb4594ae7c80c08ec0505fa5f46b3417d4700dc541a4ba7cd9586490186ba887","size":583,"data":"","first_seen":"2026-02-12T21:09:52.724694Z","last_seen":"2026-02-14T09:24:23.130628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RC9240401Z\u0026cx=c\u0026gtm=4e62b1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"75567175cfe5894794ac9b5a3bd448c7","sha1":"7773f8595d67c4ca8f9e3e3ba792ff49937db121","sha256":"5314b78d27352b28554eede68317a67560e341ce4552b3ee68b10b84268db63a","sha512":"ef3d13c94e9c337c8d02a6959732be9373bb06acb2cbe6c5e485a829e17ff879b73928281575f3312f9b40fcea453098f0ae6005c8aa003884afe5738919df6f","ssdeep":"6144:MNjNMmwzYRrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:mjwzYRSmIP8G44BSa","tlshash":"d9a419ce73d674225296f478503f018ba57b24a2f49cc89af189cce42d74a9a4277f7c","size":450755,"data":"","first_seen":"2026-02-14T09:24:23.154341Z","last_seen":"2026-02-14T09:24:23.154341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/71748/avenir_roman_12.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://header-iframe.vercel.app/","date":"2026-02-14T09:23:50.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /s/71748/avenir_roman_12.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://header-iframe.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: font/woff\r\ncontent-length: 62208\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 05 Feb 2022 02:00:58 GMT\r\netag: \"f300-5d73bbd13351e\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 62811\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fmpl539isFb8MZbdrULFzjTp6yIZr5st8nK2cEKAXvqe2d8MrcDn3oSXZqmt5kySIPFiCdH6Ff6e3gAIj1w%2B3P0h%2FZ794k0kGrOMbxdXnlnDwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb824f7eae2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62208,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 62208, version 0.0","md5":"71d6caa0cd2c63e37c215f4ada537720","sha1":"0ab9ec0dfc69d856f193bce5e7e405727606f6a5","sha256":"fd5ce0629282aa77441460a01ee321520036dad49877efb19e03a3e465f2afe3","sha512":"9bcbaf7b0c6e2c9f42181b6d4761b981e32bc103cdb053c7710ba0fb741e2428f303e7496791b8df6fd1399138d1f554a2e48584d83a5020a253d8465da8da61","ssdeep":"1536:Ep5+LFsMDFLhPL54r0+C5P6I4XSiM8SZ9I07NKWh/4x:E3SyMDphPKgN5PUSiM86W0c","tlshash":"ee530235dc7d0a21fc73b8b91ecfb44ca8b075d287babc8105a468364dc91be15aad34","first_seen":"2023-05-12T10:01:27Z","last_seen":"2026-05-27T17:27:15.054855Z","times_seen":92,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padisahbetcom1.wordpress.com/wp-content/uploads/2025/11/dmca.png","fqdn":"padisahbetcom1.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.12","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 19:45:24 GMT","end":"Tue, 07 Apr 2026 19:45:23 GMT"},"fingerprint":{"sha1":"E5:FF:13:22:D9:BE:73:43:C6:DC:CC:38:4F:29:33:5D:19:F9:00:69","sha256":"F7:09:98:48:31:28:EA:BE:EE:9E:C7:0B:23:66:B1:33:A4:14:26:EB:BA:98:BE:B2:72:58:B0:D3:63:56:6C:54"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/dmca.png HTTP/1.1\r\nHost: padisahbetcom1.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 13506\r\nlast-modified: Tue, 25 Nov 2025 13:10:30 GMT\r\nexpires: Sat, 20 Dec 2025 15:09:55 GMT\r\nx-orig-src: 01_mogdir\r\nx-ac: 27.arn _dca HIT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 103, 8-bit/color RGBA, non-interlaced","md5":"ef81af91a6331c918ae4f2b5d1e88cdb","sha1":"ec0a4faed2c68f6c6d69af939718f96a2efac79d","sha256":"1fa07dbc06b2530ac11fee1cd9e0fd0152714cd47ac2a0909448f22095c097eb","sha512":"21cca381ee279bbb858c5c772f5c58e43ef03ff57c243ba82458ca8843479c18eed208dcceba3a068418a7f148aeef9e79b80a5775c4d5facb2adfb85b1b4cde","ssdeep":"384:XxrSv+UZR3mkSpYVH3puTyqu5I+2t/DLHIGJ:hmvRkpwIhu2+2t/vI6","tlshash":"b152d07165fd1aefea567d3e1ce520fa8c75d600cc50abfb0681c560b4a60c174f162e","first_seen":"2026-02-12T21:09:52.615474Z","last_seen":"2026-05-19T18:11:41.187145Z","times_seen":8,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":15,"dns":33,"connect":7,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_5508_1022_89949b95a9fc23776fa23080aa246b6c.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.748Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_5508_1022_89949b95a9fc23776fa23080aa246b6c.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T09:23:43.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; path=/; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pW0keq9fHvhlfL%2BYd4giIf5%2FOBP33IZX6vXyM2g9WxiEcLQlN1XFuqhv8s20TSH0jhlxfzl%2FYdyKlCMIj%2Fyz3%2F0VyjPlDY1aiMZ8uh7Z5xOdng%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdb82243923516a-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12223,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (672), with CRLF, LF line terminators","md5":"9451b3e2b7c101cdcd6c7294967f6556","sha1":"5eeeb18c77316b305bf79e063cd94831544611e5","sha256":"17f2f56e8285bd1a7771d16ee9ea744a605693051f222f4b441037773ea4a0eb","sha512":"24b89818bdb29d292ee03d5e263e91797abf981f7c37e4a68070951c956e653888b840a0ad346a6eda8091aaaedce9ccac8a0c550a526157f795c193c1707dda","ssdeep":"192:RajX10pqR+/Ad96Zsh1zkfsytDF5mmot8CWfJX4To2mJjAJm29x28wM8RfmkDDeR:Ra50pL/741zkHF5m/s7JmxCM0d8","tlshash":"f342b623e581082a317252587b63fa1ef7a65203d30156327afd53a61fb22dbcd6397c","first_seen":"2026-02-12T21:09:52.714078Z","last_seen":"2026-02-14T09:24:23.115693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":93,"dns":68,"connect":8,"send":0,"wait":604,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P9XCM3NJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtm.js?id=GTM-P9XCM3NJ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 09:23:44 GMT\r\nexpires: Sat, 14 Feb 2026 09:23:44 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 14 Feb 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 120467\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":359071,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16728)","md5":"3fdcd6e8fd83168502c0b2ddc3b55321","sha1":"3524c10ea61652c5f65076d75d6ec3d76971fbcf","sha256":"138bc7ebb906200de6898bfbdafd1c450503b63d4927f586e6373d5c7613ed62","sha512":"a14acff495431066f6386de2e70d5895bc61d2da293cbf1714aab2c41cfbd1ed4c304fee1693b224670144153b43bc98ed534838f01be67279af06d4b6bed919","ssdeep":"6144:Mk5UjqMmBYPpw8wENN8gMuSgP14j9VkC4BGGZT:MkPjBYPgmN85H4B3p","tlshash":"b97429cdb3d6746243a3a478403f114bb17a68a2f84cd894f186d8d42e74aae4277f7d","first_seen":"2026-02-14T09:24:23.118599Z","last_seen":"2026-02-14T09:24:23.118599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":105,"dns":11,"connect":7,"send":0,"wait":31,"receive":26,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geoapi2.bcapps.org/?type=json","fqdn":"geoapi2.bcapps.org","domain":"bcapps.org","tld":"org"},"ip":{"addr":"185.162.230.7","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:46.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcapps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 09:36:05 GMT","end":"Thu, 19 Mar 2026 10:35:56 GMT"},"fingerprint":{"sha1":"CD:00:D8:E6:1C:8C:4D:50:5D:7B:DB:D5:93:A1:49:B3:1E:64:C3:4C","sha256":"0C:B5:AF:F1:E2:51:2B:B9:9B:B2:92:53:9D:A0:F7:B3:9E:18:07:CC:EE:56:B7:A8:0C:05:9D:EB:3D:12:2D:98"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi2.bcapps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:46 GMT\r\ncontent-type: application/json; charset=utf8\r\ncontent-length: 192\r\ncf-ray: 9cdb823908ec2678-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=UjiHf0_.s0u8W0o.0RybTsPi4IB5KNgbcc.l6NpQ6T0-1771061026-1.0.1.1-QvQe4W5xkqUIW5U.xJ406D.Rjj6pIM1OGKkGiJ8edxoC02e24Z4ljEKIkAGuREXBSyP2XOVbizwIgeYnYvB0xbgP2jrONua.._xS72SlGDI; path=/; expires=Sat, 14-Feb-26 09:53:46 GMT; domain=.bcapps.org; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/json; charset=utf8","magic":"JSON text data","md5":"2b56dde1e32f82f5d6220623949831b5","sha1":"9496a786a378f62510b9d7adf9abb9d442fdc3ed","sha256":"7149713c66c2a474e52f175428e0a8bb1f8dae647d4bade191bfaea1d39335a3","sha512":"4facea875c203cc06be58bfef5c6160ae5f7936071854aeb1ed695213859ce6ad33f00d2991797ed603ab933b9c23f469d722af81fc492a4265c4ab2f1c30fc2","ssdeep":"","tlshash":"c6d02e3d084e8f0a7f6aa29c824ee23b12762189c38a168086d6eeb0c1c6b9a7140840","first_seen":"2025-07-09T11:12:24.499941Z","last_seen":"2026-03-12T21:32:59.837128Z","times_seen":1835,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":40,"dns":22,"connect":1,"send":0,"wait":61,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/SystemBetCalculatorContainer-CX9u-UKQ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-CX9u-UKQ.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 475\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rm208fkyIbQoC%2FHnAn3EzYNBgfm27S1D4N36zEzgxyn63lj3%2BeLeu7Zg1WmsMHoS%2BLBu8M%2FjcVq5%2FN%2FHdJ1K8rvIRvsShWnSC6nxlmfDI3Ccug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82488e3095bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":940,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (520)","md5":"47e50f5b2cf0686b114e31847dbe750c","sha1":"9b7f336cbf6ccf716d2b579f4bbefc05f67923e3","sha256":"7cc63eadbcd0f9c3b9446d393211c1b4c3f31c57ac3596bb404f17c7b277d4c5","sha512":"b101f79f2ed5ba1b692ea1a378ad32837a05baa2fbaf53b01f40cbbf3b5d8342bfcf2538767a6b589408ee7962dcfa17c939cfd0b3221c7fbeeb98363ebcbea2","ssdeep":"","tlshash":"6b11dc626368cd75c48e0fa2089590840df00708690cf528b2b54d3ca01589283eeff7","first_seen":"2026-02-12T21:09:52.632184Z","last_seen":"2026-02-14T09:24:23.122227Z","times_seen":2,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1\u0026recommendedIds=6db5c2cd78ea5a09e820b7543dacc90bf3b1727e5bbaddff544b301de1f74f39%2Cc57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2Cecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdb824a1f96723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4368,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1594744c430c14575dd987b06663f8af","sha1":"6ae3a00b9045083fc80dba950b908f9e7513e211","sha256":"db922d127c83813e54ac9a7e4fb61318bdc34765fde199edd3859da07f9b1a04","sha512":"6dbc4888f6eb430e5c148b063707a5488e01f7a4ffef184ac67db37cb847c0d69eff429b0c1bd3122ca4b1594229d6f4f600497011a876d5ddaada4d1fb9569f","ssdeep":"96:nNSNbh/YiOQxX+1A2teUB7SOMVMrhIa1WUqrZurozkhLQtwN:8OQVqfhSPbUK6J0i","tlshash":"ec9110b79f444a5e2b2407c9702d3e9c855e250bcbc09ceaf0c0cf2984f9eb967559a6","first_seen":"2026-02-01T05:09:11.282943Z","last_seen":"2026-06-06T21:30:11.817911Z","times_seen":246,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":45,"dns":22,"connect":1,"send":0,"wait":69,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.padisahbet804.com/","fqdn":"eu-swarm-newm.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:57.032Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://padiisahbet801.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: a95LtwzQVgMEpmSaQ3mKcw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padisahbet.winwingames.io/","fqdn":"padisahbet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: padisahbet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PQbjZkpQirYEx1RQSGg%2BFYcF3TV9pmQEvLTLN0uecTv1XwNJSUYzutacz%2Bsi90M0Sr71VaQYW7YlqKn0xQbaG38MzXME6oJCpw%2FR7dTdvoH1TUfXP4MhFU%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdb82482b13e07c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2827,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"765e758d69611d0055a8a2bfd20fa496","sha1":"3bce9bf76145cf44cbd28ca4370aa11cac2cc8f3","sha256":"804e01d0232fb214f5fad0c479dad8c035935f4e5712260e50d2fbe71426767c","sha512":"9a2f2954ec5b5f814794f7ecd500b9eee4fa33c2d102557f5c6f16b7835d380adfcf18805d112d6a228738db3c8d20a7f0709e8fca27af783ed42cc7a1c922f4","ssdeep":"","tlshash":"67514f3645b21421436710693babe31ab22ad283328ce9447edd93015f85f79d8b2bde","first_seen":"2026-02-12T21:09:52.606395Z","last_seen":"2026-05-19T18:11:41.387791Z","times_seen":15,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":78,"dns":41,"connect":8,"send":0,"wait":64,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/LiveChatInc-C6OuKUDo.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/LiveChatInc-C6OuKUDo.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1142\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XdNCJ93Y97OrN%2BEv%2BI2%2FNc29fBgxFhEGa%2FXCjhi%2Bin2stFsZQAnv2UNLW6uq5ZmesW7s%2FNGjUZkZtSeshFw1RIQvDQG6Ly%2Fw8onQUGIJdkSpMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82489e3a95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"58f629a6faddd3fc72278baeb983f1ed","sha1":"515f595d7642c8aaa1243ea7fb899cc1dce26d80","sha256":"3671644581febe73702157ece06c008d325cf5b0172bc627065f12a32ac3f614","sha512":"f9a978a4041e17e623a4a029381bb0caca5d9c4f6276ab1e753eb8aa7eb982690c5f36904e319fba4ddc8026ceb1c58d63ae2572af797c204a5a49238404c1c9","ssdeep":"","tlshash":"045132dec03cb4b092aa67e1323f7b4f7116671ad4048c31656c4b0af22a4cbc163aca","first_seen":"2026-02-12T21:09:52.594294Z","last_seen":"2026-02-14T09:24:23.128814Z","times_seen":2,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_17473_1022_cd0832da8db84492b962f38639ea72d0.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.755Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_17473_1022_cd0832da8db84492b962f38639ea72d0.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/useOpenLiveChat-Dk2MTIdu.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/useOpenLiveChat-Dk2MTIdu.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 339\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOx%2BpLFnnRJlKv0zRE8AAcMhltec7Yyjp%2F9KXFRzjeu7qqqTwWX7A7G3GQb7UxBvNdsewn%2FaAHLvGsHiIPS1gX97PVYYjWtw7YJ9ylOQw8KssA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82488e2f95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"b8b39af18932736280584cdf3c824527","sha1":"c41bf26c204cc179a042101737021bb2e50df90d","sha256":"0da81c81dd3aaa1294d06b41149d6a534ffd78285fd14490aa0b4bef3d9aa8c0","sha512":"ba1411120bae35873f9b6bf0b69511f67d9759e98fb19a84e989d4bb186ab8a5084db7200bbd1b5f9f8ee839f5ca102aa1327a891dc7a075e7803f4c100f2a92","ssdeep":"","tlshash":"edf0e1cb4594ae7c80c08ec0505fa5f46b3417d4700dc541a4ba7cd9586490186ba887","first_seen":"2026-02-12T21:09:52.724694Z","last_seen":"2026-02-14T09:24:23.130628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/77c1d3dd-0213-400a-f9cc-bfd524c47f00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1404\r\ncf-ray: 9cdb824c2a6c723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfvWH7-l2WGZEJvxD_-cbyo5fufmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=722+3 c=0+3 v=2024.10.6 l=1404 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"434c7550a1a937d1e7e8bb8416691d9b","sha1":"d837654b42d1474560a5698cfac3514209cde2c2","sha256":"5f0f065528ec2543e34a03df1cd588b4c4ce7764d1ff62e67cec0677f638c549","sha512":"eefe6cf29ea82af55070456f2bf2cf1ab3c3328938ea092695f0a25370e6cef7ed1da43633a4548b22b46d7d7a87253ef01b2c01847ea84725cd4acc7be813fb","ssdeep":"","tlshash":"9f21e6a32c3914ddefa65f1485a00d8dff03c1a5983ee3d896e83548e5788da6ca00c2","first_seen":"2024-12-05T15:42:26.602777Z","last_seen":"2026-06-08T13:06:58.369135Z","times_seen":2569,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/tPH3Zgnp/padisha11.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /tPH3Zgnp/padisha11.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19668\r\nlast-modified: Tue, 16 Dec 2025 15:22:40 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 640x360, components 3","md5":"6d7ecb1f9b9077425696a72d73c10f11","sha1":"af1680d0a869593b507c1d5bcfa4e408da3cab0d","sha256":"db7e5c90698f40b2fe4ec5b8ae3913315638c4f13528cd78eb0afd941c7cdb4f","sha512":"96db9886409f549e60c2e1c529077576ee92f35aa481a995930c645efc897328c65b67391a8b0e2076d186f1fdc5c2f79f7582af2d7b7a7c9b70d767c306a48e","ssdeep":"384:8TNOmaH9nDdQgSgI3CgxX5nI9m3CupzYDMJFadUR4GYIMYQ14vS/a:8wHdagSg+x0SpHGuR4GpTV","tlshash":"a892c006a75e45c8f2d64df6e2808e8aafc1d95b32b05b6bddddd1f099272ca88c0534","first_seen":"2026-02-12T21:09:52.699816Z","last_seen":"2026-05-19T18:11:41.30093Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/useOpenLiveChat-Dk2MTIdu.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/useOpenLiveChat-Dk2MTIdu.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/LiveChatInc-C6OuKUDo.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 339\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zot86XipRLZIdpYfyQZ7lnXAg%2FooJeTgrcPNh7mSOxDWIiV%2FpMtz1u7bw2UYBVrI4OnmN349t%2BQh%2B0ElLm77MKfYsZnssvCjTdkfmrRMgesGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb824d9eff95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":583,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (582)","md5":"b8b39af18932736280584cdf3c824527","sha1":"c41bf26c204cc179a042101737021bb2e50df90d","sha256":"0da81c81dd3aaa1294d06b41149d6a534ffd78285fd14490aa0b4bef3d9aa8c0","sha512":"ba1411120bae35873f9b6bf0b69511f67d9759e98fb19a84e989d4bb186ab8a5084db7200bbd1b5f9f8ee839f5ca102aa1327a891dc7a075e7803f4c100f2a92","ssdeep":"","tlshash":"edf0e1cb4594ae7c80c08ec0505fa5f46b3417d4700dc541a4ba7cd9586490186ba887","first_seen":"2026-02-12T21:09:52.724694Z","last_seen":"2026-02-14T09:24:23.130628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/71748/avenir_roman_12.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /s/71748/avenir_roman_12.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:23:45 GMT\r\ncontent-type: font/woff\r\ncontent-length: 62208\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 05 Feb 2022 02:00:58 GMT\r\netag: \"f300-5d73bbd13351e\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjcmS7UE1%2FVk8pjQD6CAwG5wclK6CSHPjk3Qh%2FEShHO8MnWmk3ZwJEP%2BwY5Ee9jSS39MYxPhf2Td9vRKVm96T8%2BfZXfZ3WbBxnAXS8G8RR7AOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb822e38e52f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62208,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 62208, version 0.0","md5":"71d6caa0cd2c63e37c215f4ada537720","sha1":"0ab9ec0dfc69d856f193bce5e7e405727606f6a5","sha256":"fd5ce0629282aa77441460a01ee321520036dad49877efb19e03a3e465f2afe3","sha512":"9bcbaf7b0c6e2c9f42181b6d4761b981e32bc103cdb053c7710ba0fb741e2428f303e7496791b8df6fd1399138d1f554a2e48584d83a5020a253d8465da8da61","ssdeep":"1536:Ep5+LFsMDFLhPL54r0+C5P6I4XSiM8SZ9I07NKWh/4x:E3SyMDphPKgN5PUSiM86W0c","tlshash":"ee530235dc7d0a21fc73b8b91ecfb44ca8b075d287babc8105a468364dc91be15aad34","first_seen":"2023-05-12T10:01:27Z","last_seen":"2026-05-27T17:27:15.054855Z","times_seen":92,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":21,"dns":1,"connect":0,"send":0,"wait":91,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index.es-Cxue2lTo.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index.es-Cxue2lTo.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/WagmiConf-A39JFnij.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 82069\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRMk0qTEQ%2FBkFkD7KHLiDWUW%2FIXzPYxqmQJ07bP8%2Feksq9Hdl9DMWpYGNecqaouN4n7KRXgGddz7JRXIDA6NqemVQkEGDybzI5uhDAX45ZefWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82448d9895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"37d752e0756903c37497978f9edd44b2","sha1":"99cc1741de9a2abbbafb7caf46f3885de871703c","sha256":"c07218a36a98d1b47ed255dc810bbe3c1b9e84dd61c9de255193aec472830bb0","sha512":"e319b631ceeff5f2dba791764f8f81a3086ac5b67c0cc861c547d9ebd604d2635a247ec3eb6769ed862cc9bd3aaa5a0309a51ff900f0f425c2733bc871b6ab3d","ssdeep":"3072:dzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6Uvh:dz77jdU/7sJJMcvYisoljSFN1Nd6Uvh","tlshash":"f354fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-02-12T21:09:52.658803Z","last_seen":"2026-02-14T09:24:23.135438Z","times_seen":2,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/FastTrackTracking-YZUMgKRl.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/FastTrackTracking-YZUMgKRl.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 609\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0BZqv%2BOy6qF7eJHFMEB%2BU9IhCTrm4TS1pyGYiiCGv6kiNUi4JsklWGSH%2B44q%2BfRclcu09guajvuiIRxCAgnElW5YYUXlG5INnYtzmtQHeG03cw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82488e3695bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1321)","md5":"18a96559ee1b22e1bfb5531cd3177b19","sha1":"1948acdf6acc6dc1ebcc60646dea5a4b447cc9c6","sha256":"43ed162458351c6f1f2c2b3749c5c1da4f3711a1b67d287b0d9f78c0c17d8a50","sha512":"e9f6a6514ea570cbdab86fddd4dcaf5c050321451dc68790b5bc12ab7c46b9753d0f57a0ffbdb23e757cbf3ad14f4c3b6a7c4536b3ebadbe1eb45e8a0df403db","ssdeep":"","tlshash":"ef21750f40d583a47c804d8de3e7a261953d6875711ec4e1f07a0bad3f0ca6683dac97","first_seen":"2026-02-12T21:09:52.568277Z","last_seen":"2026-02-14T09:24:23.137379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"57db31a6-b244-4076-95bc-5ec10ac25b3e.snippet.anjcdn.org/54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png","fqdn":"57db31a6-b244-4076-95bc-5ec10ac25b3e.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padisahbet.winwingames.io/","date":"2026-02-14T09:23:50.169Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /54f396e0-b046-49b1-9cb3-0c69281d7ea9-beacon.png HTTP/1.1\r\nHost: 57db31a6-b244-4076-95bc-5ec10ac25b3e.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padisahbet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":105,"dns":2,"connect":1,"send":0,"wait":0,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-D3bGYEet.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-D3bGYEet.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1301\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XgD0uwXe7AIOdJhfSJ12UKDQA18xIA9GfH1FXUBTihVup4WhmsGYmZGfoK%2F78VXDtrBRXnAuH4S3zbY6pC8PeXHNX2q8B5eAEQybl51WTtH6bQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb824eef2a95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2922)","md5":"926c847723e7d230b7277ba06fc8e9b7","sha1":"4e02fa4876ace3ba750293fb5b14d7e491a54367","sha256":"aa074fd5b8138e08c4822a637695ea243e3fca94541769ddfdedc63ae3878062","sha512":"4a243c541aa31179c2d6b970c025da8c9ce5d4615d87be45637e93c81470d5727910addf4a94dc7d2bfa2a8dfa0144a5ca1731b9d57ea4f5221bc39c416d7a42","ssdeep":"","tlshash":"b65131c76042d7b8bfe708e6419b10b074374e5cfe1a449082be15864958792e35bf4d","first_seen":"2026-02-12T21:09:52.638462Z","last_seen":"2026-02-14T09:24:23.139172Z","times_seen":2,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_19617_1022_832f9f584029f31b824755948d3c443b.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.749Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_19617_1022_832f9f584029f31b824755948d3c443b.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/payments.json?v=01/08/2026-09:00","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:46.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /payments.json?v=01/08/2026-09:00 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 7149\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8hREZIkYqdiSjvCN9SQ8d%2BJlSxC4e5%2Fqyj4eml4ccOcLC%2FN5%2BLL79Zdfzq%2FdBhLv5Yb2PmV0OJGnkQB%2FgbEMZKKXX9mvzaawDCr%2FKg%2BfmaDLuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82384bd395bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":111971,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f148b852c3fa3bafb538f4521e76914b","sha1":"d00e068daffc1c48ebc3627e129f3bd3763101cf","sha256":"15a7ad107082e512402689b8c48d184c751ac744fb9d2669c3ab03594ab67af1","sha512":"d7cc833a4719748a8c02788acace34cabc7267b1c3c168aa87f77497170836c95691bbe02994654dab068b5b283a50cbf6331b0061352bb84d693f180126bbed","ssdeep":"768:AtrjDY6If4PQ1ZMelFhsP/wReAs2Mfy6rolXrXRpeiGTUk5jDVow:R1FDN06BRpeijQH5","tlshash":"27b330a0e42a0cd31985b0a8387e530b7674929f9f28bd9a775cdd6e1fce40e5c74278","first_seen":"2026-02-12T21:09:52.627521Z","last_seen":"2026-02-14T09:24:23.141046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-DAR-PkJu.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:47.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-DAR-PkJu.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 58498\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Be93wTIdD6eiMKEjkOqUJ0DyvFo4uW6cFAN9w%2Fcgp7%2Fb53qHa2pFKeB6y9RYWXvsYlwyyofTQ5y%2FzBn8sjU5cOIwkhkvyQS6InY%2Bn0ux4Xu%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb823cfca295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"416071668a4412b0cab0d01ebfd63416","sha1":"a40ed3f48c7ace3dab59016948a4fbd950f013b7","sha256":"2ba6a2c41098d31ca356ef0617cea5a36a1c92e5e358c09f2a8b52a0e50ceebb","sha512":"c73f062f66024b79d841e98609a7aac5a92441d63eb9fd488592ac5d7a04818dd8ea9ed38af9271f418cf9ef648dbe6207920c8834f81a7e0775303b4b129a9b","ssdeep":"6144:/feL9y0h4R78o8e4YHIALoh6wj9Sd51jjVvFaxIRcDGRD6On:/mJy0h4R78o8e4Yo/j9e5xaxIFROQ","tlshash":"9a240ac4b274b0a556e594d4502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-02-12T21:09:52.665211Z","last_seen":"2026-02-14T09:24:23.143285Z","times_seen":2,"resource_available":true,"data":null}},"time_used":856,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":739,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/svg/Promotion2.json","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.116Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /svg/Promotion2.json HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/events-DGycpgSD.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/events-DGycpgSD.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index.es-Cxue2lTo.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2034\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucCNAngML6p2zXfFbjEEDIl0qAU5UepuEK0Dzn5%2FylIXAPHGwscn0cL2EKspspW%2Fag4h6SH7O%2FQkTB5k6ClQnEsk8Y2vRuWQL0ur3npDVkCCHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82499e6995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"2c2d1aba64f2ec39e8ccadfffba377be","sha1":"b760045fa3fff4c67d39c82d7b8c7c1d8b60a662","sha256":"e059549e26e71dad947f4444e07bcbddec30cc27cdf28f8cf4085d1002ff7fcf","sha512":"fec61a002b501439777aa9fbd58ae4e03933a1c17655786b59ba1932b966f369a6ecf185a455e37e7ec779ab36ed3c486931ae0e8e3beffa64f50ef0b5cbdfed","ssdeep":"96:tRd9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:tR3IM2sWMtBq6n3PzH","tlshash":"f9c143ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126b78","first_seen":"2026-02-12T21:09:52.693658Z","last_seen":"2026-02-14T09:24:23.148033Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/loader/fasttrack-crm.js","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /loader/fasttrack-crm.js HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 13:55:13 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: X9ovE_PVlm7QTMnZs7pgGdxk3XrTsm57\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJg6EP9rQ%2F%2F8n28UP9SAOluVE4alDMLLQjAVSin0omb%2FeRvBNcaKokl7ApWImOq%2BcWsjIdCRKPengqaVpKoRateuBJtiM86N71aToyl396qaqxb8sj22rp80n7c8ZQ%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5e29eae3156522edc7886df59287259c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: sRDbkR-LbAlPYSqnaE6V9Xu1Ra9iJHQJQ1F-Cv0unOc8ZGgj6wq3og==\r\nage: 4017\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"0e62b669f80928b5dac9ece193256095\"\r\ncontent-encoding: br\r\ncf-ray: 9cdb824e8d4b23eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0e62b669f80928b5dac9ece193256095","sha1":"a04e0c32df6e15dd5621258cdab16ca08361d27a","sha256":"cd306f0e4ea334dc0a9ab35e3e6c3c73a34876b8d8be27330916196042a1437d","sha512":"930f28be027cbe059bedfe820c6920d8668380c8aef844a15c140de8e907d2be6c5eb38470f0809709bf8d2d0cffd411c61a92a1fb1592503d59e24ff8350cc0","ssdeep":"192:/XKuPlMK5EbbbCUuUD7Z4ac2tMOx5YemndU25i5ObHwxaf6pedviiA:vKEiw8nbxDt4atx5Ye4ymr//A","tlshash":"e5e10e5c29f394610a93351f033be125f3b6e533221eec41b9dc8968af54667caa7d88","first_seen":"2026-02-12T21:09:52.600201Z","last_seen":"2026-04-14T09:08:05.84184Z","times_seen":66,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":48,"dns":34,"connect":1,"send":0,"wait":19,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RC9240401Z\u0026cx=c\u0026gtm=4e62b1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-RC9240401Z\u0026cx=c\u0026gtm=4e62b1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\nexpires: Sat, 14 Feb 2026 09:23:50 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149261\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":450755,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"75567175cfe5894794ac9b5a3bd448c7","sha1":"7773f8595d67c4ca8f9e3e3ba792ff49937db121","sha256":"5314b78d27352b28554eede68317a67560e341ce4552b3ee68b10b84268db63a","sha512":"ef3d13c94e9c337c8d02a6959732be9373bb06acb2cbe6c5e485a829e17ff879b73928281575f3312f9b40fcea453098f0ae6005c8aa003884afe5738919df6f","ssdeep":"6144:MNjNMmwzYRrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:mjwzYRSmIP8G44BSa","tlshash":"d9a419ce73d674225296f478503f018ba57b24a2f49cc89af189cce42d74a9a4277f7c","first_seen":"2026-02-14T09:24:23.154341Z","last_seen":"2026-02-14T09:24:23.154341Z","times_seen":1,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.padisahbet804.com/","fqdn":"eu-swarm-newm.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:52.019Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://padiisahbet801.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Ns+753mwlu2TxWhf7psM6A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/pageBuilder/pageBuilderHeaderInfo.json?v=01/08/2026-09:00","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /pageBuilder/pageBuilderHeaderInfo.json?v=01/08/2026-09:00 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/tr/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 175\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJfZPNS9WZX%2F7Bs68pFfwK1dfI%2Fa3OFsMCPv%2BbY58y3QpJYg4AqUUCjeMPiRJlQApUceYkBcQY2JyMQoSlDeEkpHFr1XI%2BbTFU39pvQhEYqseg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb8247fe0195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"670e85ac3e91c5c0dd6c1b2fad98180f","sha1":"a7bb8f8316946ae5a0607a15917d0cb38e7b5353","sha256":"6d8dcb478a5d83b7cbce287aab7e096a5cb74ae8053efed35b4d9c273a0e80b7","sha512":"72a5c20d01df5ac91ab947ef9c1252d8070a95a06511119267ea659ac40f9511978ed27a66ea21a7146b94fe13815ec50bf5133fde67919aa6eec1cc184a65b6","ssdeep":"","tlshash":"96d02b3aac00fd7873d4d413e290a7802000a409d744485c8cee9f6f83fd3991091b57","first_seen":"2026-02-12T21:09:52.728016Z","last_seen":"2026-05-19T18:11:41.278483Z","times_seen":17,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/pageBuilder/homepage.json?v=01/08/2026-09:00","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /pageBuilder/homepage.json?v=01/08/2026-09:00 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/tr/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 645\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGl2CgF7LRK6jYPC9mtMlCnkvwLIJ34VCIvLtBOkrasxTKTQFU8WnFfr4dNbxaeKAX4VK%2ByDyk7b8wHptkj3FLKgGFFMZT5eMq%2B9Jm8K99salA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb8247fe0395bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3703,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4046e4af2401f535b8d581ac16dffe8b","sha1":"529ba6c99d268ae3654995cdca057706e56bb976","sha256":"6ced68f2d4166add625b949990148bc3bd1e3273d760cdb5458691b942ed2f62","sha512":"aa4d46b2843c79159a09d07cd6b674841214776d2cb323bc647fba0a62f31741093ef2cd28db72ba53969fdf368b3783c7937f9aa102f5cb38d240121370bdf8","ssdeep":"","tlshash":"b5710f3d6800deb8b360c732d28237825656c979db845c5c9cedda18d2fe2da1584fbb","first_seen":"2026-02-12T21:09:52.761536Z","last_seen":"2026-03-23T13:26:58.912118Z","times_seen":5,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pamimage.com/images/1766060325854-ruya-giris-tfglbo.webp","fqdn":"pamimage.com","domain":"pamimage.com","tld":"com"},"ip":{"addr":"172.67.151.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pamimage.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:44:37 GMT","end":"Sun, 19 Apr 2026 22:42:06 GMT"},"fingerprint":{"sha1":"15:86:94:A5:FC:60:49:5F:4D:6E:13:0F:D7:52:5F:07:90:C1:9B:6D","sha256":"57:9F:C9:92:DE:FE:3B:38:17:37:E1:39:AF:28:C6:6F:1B:E1:F5:8F:11:98:3E:AC:19:A3:D4:69:2C:A2:4E:A4"}}},"request":{"raw":"GET /images/1766060325854-ruya-giris-tfglbo.webp HTTP/1.1\r\nHost: pamimage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1006\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 12:18:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6943f125-3ee\"\r\nexpires: Fri, 29 Jan 2027 16:11:39 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 1357929\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NneyEiI1ftDxt9%2BEmjlzdG1yjxLXKCdyJaD9GNQb5ksuTd4o4Km4MJAEEvOABAuFJQ%2BHKy9i2YakTHpU3dtNJJNxbJfxc6YNsCClXQ%3D%3D\"}]}\r\ncf-ray: 9cdb8248d85f5864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36f5b7e1a4e0a8b1c17fd4ca047c5aff","sha1":"e07d850c1e22fa488a7d7e4b2676587046e7b37e","sha256":"1a663c8a284a55730aee64667cad69e7c0c7a5909c3fbf0a46f21103daeb60aa","sha512":"27fff2a04ec0f865d614f6edc396b93c273ce3e5a55fd4818f97f0fd12645553b74d962969fb43fed1a85a889a88054ee25437ace4b9f602e98223361c83b05c","ssdeep":"","tlshash":"871198792e58aaa9f4ce03207e4b4fe505774b49bce9db323f528634454e508ac81947","first_seen":"2026-02-12T21:09:52.743533Z","last_seen":"2026-06-01T03:07:11.870997Z","times_seen":18,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":96,"dns":61,"connect":8,"send":0,"wait":18,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/Lh861cZt/234525435.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.6","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /Lh861cZt/234525435.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33651\r\nlast-modified: Fri, 09 Jan 2026 12:38:46 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33651,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.10 (Macintosh), datetime=2026:01:09 15:38:34], baseline, precision 8, 400x100, components 3","md5":"3651c06d05a90727a00b502ff6493278","sha1":"3c25a9cbaf77cfafa76d53f299322db1cbfcf144","sha256":"02b545cfa1304fee7a9d7c18a2e5c5091ab3470c56df29ffb9861d0069d7abb3","sha512":"3bf9a82d3e7ea033bfa0ed582a9a9bd8d295903abc3b119432d92c6d36caf3ef3cf4217bca3fe60cbe1e3dcc767392eb17950bc6126de92d93db9ca83c680191","ssdeep":"384:JDHRe/iXDHRvnQ5GHf1NCnTDQ9h3lqgfwuXc/Bo9Uf9Owu52w4/BwTsMVm8sJMHw:JDH4/4DHZWs9fwlt9bzzqYMQUjDg","tlshash":"42e28d7a92b2ff12f9d50c78a361de8602111d580bdf0142bc9edbc6bbb1955b42f1c6","first_seen":"2026-02-12T21:09:52.578639Z","last_seen":"2026-03-23T13:26:58.990121Z","times_seen":5,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":58,"dns":0,"connect":24,"send":0,"wait":26,"receive":32,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/FastTrackTracking-YZUMgKRl.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/FastTrackTracking-YZUMgKRl.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 609\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SFS2YJOiI0XwevTUktUfFRSF1ERua6BN3rWvptzHS2uGwr86EoeV4nNdUSgLTg%2FJWCjHH%2F1JbqRFu4rY3QDVxVnBJByxUR6%2FHrAWW%2BDAVofMhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82487e2895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1321)","md5":"18a96559ee1b22e1bfb5531cd3177b19","sha1":"1948acdf6acc6dc1ebcc60646dea5a4b447cc9c6","sha256":"43ed162458351c6f1f2c2b3749c5c1da4f3711a1b67d287b0d9f78c0c17d8a50","sha512":"e9f6a6514ea570cbdab86fddd4dcaf5c050321451dc68790b5bc12ab7c46b9753d0f57a0ffbdb23e757cbf3ad14f4c3b6a7c4536b3ebadbe1eb45e8a0df403db","ssdeep":"","tlshash":"ef21750f40d583a47c804d8de3e7a261953d6875711ec4e1f07a0bad3f0ca6683dac97","first_seen":"2026-02-12T21:09:52.568277Z","last_seen":"2026-02-14T09:24:23.137379Z","times_seen":2,"resource_available":true,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":675,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/api/public/v1/tur/partners/1022/components/header_info/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.162Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/public/v1/tur/partners/1022/components/header_info/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/menus/app_menu_1022_tur.json","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /menus/app_menu_1022_tur.json HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 1707\r\nlast-modified: Sun, 11 Jan 2026 06:18:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSrc%2F7%2BrAZbh4mFi4kO9wREikCv0Lle3qWMrF74XY9XQ4Q21BzN4%2BxnL2fyUneR1sh8RQVl2E57DNngbcm5zjz%2B69hosTB8uv0Cb2Tsd3vorHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb8244dda695bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15068,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15001), with no line terminators","md5":"aa3ffe2c1eeeb71fb40d024b744ffcad","sha1":"37ee7be51d51eac6b0ff5549fa69255e2c41d7fb","sha256":"7f6af2d6612e4d3bbcd1b965fca787cd1c076a87084b8419444e55d8aefb5ce7","sha512":"9ba5184a876b854c37e7e7466e4814c8cf60c45fa77fac66a0a5f5ebbb56c0a5c4d11e6f9e1047d7f99006e781d9abba9ebe9147e716e0685686c805c805a290","ssdeep":"384:EvORRTIQvu9LwlwNvvufBDEXnsdKDvSFVzQZiHBxBNFI+6JvNyRiEV9vmyvoi:SORRTIWu9LwlwJvufBDEXnsdKTSFVzQO","tlshash":"ab623702f00d4976d35c3e00bcc76e5b948950996c9d19409d8e86cecbda4afdeca6eb","first_seen":"2026-02-12T21:09:52.740302Z","last_seen":"2026-03-23T13:26:58.99281Z","times_seen":5,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/fonts/default/Roboto.woff2?v=36","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=36 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index.D0Lg3jkJ.css\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:23:45 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWwxh32KKhf3859WBUV2Be%2FmDPlRGdQktisM%2F9eSFki8JclHWJ3cgQ6WSwSE7wbXfg5aBR1J3lSrLalPTh5OvzjrZR4N%2BTg6iZSfowBYqzGi2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb822e0a0295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-06-06T23:43:56.100029Z","times_seen":2788,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/fonts/default/Roboto.woff2?v=36","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /fonts/default/Roboto.woff2?v=36 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index.D0Lg3jkJ.css\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 64248\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:23:45 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVrab%2FFyQEWoyoyzSGzzsLy5FKj%2BnWt52H5YEkYAqzv6Rmd7vU6DnQ5QrZBHZgbqdhzVdPIyON55m3%2FsxfOlhrdbG4VKmBi6wLFPag1jlCPReg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb824d2ee895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":64248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64248, version 2.0","md5":"b65b078c2f62cb030e8faa332896afec","sha1":"d5af06e579dd5f400f803b4e24bc1020740b0b8a","sha256":"594544184c059f885e1499c36a4147c3d3b41ce4f50252ac245a3a5faea6c72f","sha512":"34c06275b329ac62dddd6eb3981ef47d022d4e841c6a2659b9c648e77caf58277c91d1aa1b1bc432cbaccf9e3a7c89e67a3f41c940637942e692c90db9d910e1","ssdeep":"1536:T4FysiYyiqM4dWrgU2Tx5hpx1/VjrHS+92eTa:T4FyPY+rEATHH/xye2","tlshash":"df5301e2be45d926afc2dbeca3bd561c210eddbd2480d11717d5eaa002c1dbaf07c252","first_seen":"2023-04-17T11:05:44Z","last_seen":"2026-06-06T23:43:56.100029Z","times_seen":2788,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/api/public/v1/tur/partners/1022/components/1741/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.984Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/public/v1/tur/partners/1022/components/1741/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/api/public/v1/tur/partners/1022/components/3275/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.990Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/public/v1/tur/partners/1022/components/3275/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/FavoriteGamesContent-Bs2efduZ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-Bs2efduZ.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1187\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QzNR0m%2B83woJCYG5kej4GWL%2BfFxr9oRIdsnxIZyxU715P%2Bcwjb3PdCfYFEE457gPrXwQ0PMBos%2B9cxHF8yeN53a6JD9ZUXWQmtVbCTUae%2FXeLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb824eef2f95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2827,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1710)","md5":"7ff9fb905fbd76406fb3fe56778fda67","sha1":"95e5991cd8fb3a8ce3b7eca2f8209d3444400f1a","sha256":"50d15e490b03e1b796dd12cf890123efee2dd09c0e3f82a771573266d7d3c70a","sha512":"a9420678c99b688b97c3d7b3354a2f70d183845499ec6a8798b3a106d130fd4d99445bdcb196a2b0a4767ad9ab243d0ac203bd2c6f1aea79f56e9e25fb3d6777","ssdeep":"","tlshash":"dc51971100415ffcbade9ed96e2a80a04c76074c5146d17dae799f7e3029a507137ff9","first_seen":"2026-02-12T21:09:52.687425Z","last_seen":"2026-02-14T09:24:23.169727Z","times_seen":2,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/loader.gif?v=1764600528","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:46.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /loader.gif?v=1764600528 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:46 GMT\r\ncontent-type: image/gif\r\ncontent-length: 253731\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 21:08:12 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:38 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 130533\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oISfp4zQK83TWofKOHlWcOLek6URCc5%2FNhSnNoYmYdyssXuLOV1qJ9N52%2F17WcfeTb5Ugi%2F8mZJCzG502i4%2BpkjVNb%2BQzMNoXc4SohwRnkFlMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82348b4295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253731,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 120 x 120","md5":"4b2b811d9ee5ec4093b8d7bc798a5a99","sha1":"622950c1c7798ba5c8ce9c20fbf1e976700ed568","sha256":"ec8e76f34fc974083a6ffeb5924abf16980e9b5f1caefcdd83e1c6faeafc8c2e","sha512":"a75511879776b83385d296f980d9e9f76c70ec9b4cc225675d7885c48c07a715cb262a860f662f8e85d6ed4ba75715c461d14c59603de7151cc30693c182ee38","ssdeep":"6144:lARhk5sAbmpXQmpyy1Rio8HRQGSCPlZ4j+4jr:iRSO6mpyy198xQG7ydr","tlshash":"ff44012142be1d89e7bfad719f6ece70201858f245312639b74ef8f9718222c1c9b567","first_seen":"2025-09-03T14:22:22.240133Z","last_seen":"2026-05-19T18:11:41.236466Z","times_seen":17,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-Pb0kLhjw.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:47.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-Pb0kLhjw.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5863\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uODw5I2ZbK5UKRdttirkMt4h5bTHDzCONRAa%2F22xxbyxacwZGLhXBMXA%2FLlm%2BKWlqbN1ktI7VSVT57Zbz%2FNHJRMSWwfVfs89i7E4eIndEIltsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb823cfca595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"6a84aa1da1a71063830bdf2e881ef454","sha1":"34f58120ceef75932032c0bfda06c94d3130c181","sha256":"5854246759af34b1ced58c72085fac024406f1bc4c841d10085dd1c24e5fa547","sha512":"6791df393f7e75afbd78c96fa2eea557a39cfb3b4c4b1f94e404d176ba1cf4b8c13b4aede1cc3632bd12b0d6c87d99009c4f4eb414097edc5d3cc9a1b58352f6","ssdeep":"384:dhxMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ0:dhxMci408FFnJrIjE3D/OY2E0xqpc1NV","tlshash":"5982fad0e3b4f7a642e86add80392074f2248c28347dd0f1b6b6edda70664ca856dd37","first_seen":"2026-02-12T21:09:52.656149Z","last_seen":"2026-02-14T09:24:23.172312Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1073,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/menus/footer_menu_1022_tur.json","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /menus/footer_menu_1022_tur.json HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 1249\r\nlast-modified: Sun, 11 Jan 2026 06:18:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8gKlq2wkZtYr%2BEP%2Bdf1ugJVtwnFRlAcoMLO8jJ3d0qLYcUgnmcdUqWJbqsgux6cT8Np3FzhyyClSU3Kowuweks95gRmI8AbR51X1M4fkRbJK9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb8244dda795bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10496,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (10413), with no line terminators","md5":"706349be3b478a50e27c0dc30b8102c8","sha1":"91b689d61e06961c5924b131fbb32fd6138c9f45","sha256":"c449b5b639c1d59f00838df9c1744fe82bb2f45867a7dcbe2b12f472a087696b","sha512":"e11cf0525eb31315d790cae266b616321301eccc467c04db10b9ebede7f5d987efca8ba77de1659a51991151dfecc4c5613daf0f21eb3b3f0b68bc4e86c8e91e","ssdeep":"192:mSkLLnkBLuka6Lwk03kOLok/2k5kpk7SkVLrkGLYk4LFkpLKkkLXknwwk1SkUL03:mvXkFrhFJA9/TWm7vRI4NyStnm0k1v2G","tlshash":"d7225912f00d5976d3483e00bcc7bd5b848d509e6c6d49519d4d8bcdcbda4af8aca2eb","first_seen":"2026-02-12T21:09:52.689116Z","last_seen":"2026-02-14T09:24:23.174228Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAssetImage/692ed6ba-e569-459a-556a-776476829e00?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 628\r\ncf-ray: 9cdb824c1a12723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfaRKjj98wG78-Q94g8ciN3whHfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1019+1 c=0+1 v=2025.6.1 l=628 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"07a8ca43077147f4b93899efbe31ed8d","sha1":"bb87180866adc635991e4867c8222fc4387331ba","sha256":"b22b238c613c9bfcf13e8340213b734fea3bd0b9b2fe67648e3ba6decc104e89","sha512":"6d9a2235c65c224e78bd78025eacb630cca9bc9c4a838fd540de031cca2e8c442460eae186359cb98dcb1f1eb867414c6b5b77c78a2f3e1be6f6f36b254111c4","ssdeep":"","tlshash":"90f062be0d21c29ae04842881a0c6c5da472a9b9fb4424c4eaa5f7a67c0319433a54b0","first_seen":"2024-06-15T18:00:08Z","last_seen":"2026-06-08T18:05:25.252562Z","times_seen":2280,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AJRbA5XKNrndagMOEtsu3EJDmxYsvTU3MBsBt7sG19L5he4Cu86HdeoFEjvPD7SfNuREuIqDSDRRfNgQ8sVptg\r\nlast-modified: Fri, 13 Feb 2026 09:21:56 GMT\r\nx-goog-generation: 1770974516435725\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 99247\r\nx-goog-hash: crc32c=CPqDKA==, md5=uR+002vMFbWRHmdtqBLYDg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 32221\r\ncache-control: public, max-age=28800\r\nexpires: Sat, 14 Feb 2026 17:23:45 GMT\r\ndate: Sat, 14 Feb 2026 09:23:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":99247,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"b91fb4d36bcc15b5911e676da812d80e","sha1":"544f4e1c87bd2c60dc63cae161986122496c1ede","sha256":"befc9be725b835e63b35f5c1d708f239d48cd8d23b1d430452286f997df06ada","sha512":"3d1a6360df99446aa092f9aca39582dca0c92babb32f4a796adbae56862d2739590aa54f7a01d612f18f27220dfdb213c13f2024b39cf70f688b89eefc2841be","ssdeep":"1536:EnCBo5ri/D4ivMPcYYbey4UjnzUSwppTPiD16on49d:ECBo5u/cJzy4Wn7p6I43","tlshash":"c6a339da7282b03453f786e7a17fa212b3391918340d8420f17ced6a395a987d177f6e","first_seen":"2026-02-13T09:22:56.43592Z","last_seen":"2026-02-16T10:34:18.024192Z","times_seen":164,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":101,"dns":71,"connect":1,"send":0,"wait":2,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-Duf0mDX4.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-Duf0mDX4.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 39025\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7RW6LOs8vxJAILJm9bB%2FfM%2FuA9JqKvHCU0SqYksxHKujE%2BJT961h%2BLGsxjQfLW9bmULN0y1o0QY1Of4zyiJZ0lHQQ999fDkSS4Ih5%2FslrLr1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb8244dda995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b55f8290681601bbc6c8c90e7a47df59","sha1":"1b60a5c7eca5fad708dc007d466eea7af1569ef6","sha256":"bf8905992c41b7edb8144673aeb5bd2886d3505e8f6dfd41975b94be2902f482","sha512":"ba7e2544fc515daf634f0af2694f927ecad54f557c569cb0748648a98e24734ac0395240f77bd8ded812f1b39d3998bbe7afff1544b01c7f31cf80ceaad9ac4c","ssdeep":"3072:mEwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:JwhFHU4HNwFH7MoOWexZFHV","tlshash":"59f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-02-12T21:09:52.64838Z","last_seen":"2026-02-14T09:24:23.178277Z","times_seen":2,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":488,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/BetslipButton-CiR__ZA1.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/BetslipButton-CiR__ZA1.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 283\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHf1ZmuEvfFYUfi%2FyxPExA%2BhwFnqZhYkcwieFSvGAvj9FvmcemaggYNvmh6CiylHGtZuZChCpf6UkgsPHdJ842YWl1ssGGJ5ncwL3IttpLmLhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82488e3795bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (417)","md5":"e55dfa16372e45cc735f245b352d713d","sha1":"c47d7ff257b4e770a1a5b5b49902374d1cbf10d6","sha256":"a071304bb6e8713bb7d122406f002d2543eb6e3339894f95f1500d5d3e9ae110","sha512":"3e81f0623c870d348f7a73d6085a3c3f419f6ebfce791850b504050362354ba1adcf5f60ccfbda57541f54b034e977ccc542ac0d6f243e91068b89b8cb930853","ssdeep":"","tlshash":"33e0f1878949c2fa0bc609c131028221342769fca344f491c0bd2de23b74996c45fa7f","first_seen":"2026-02-12T21:09:52.634939Z","last_seen":"2026-02-14T09:24:23.180268Z","times_seen":2,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/a38db32b-8291-4d25-9aae-4bf4b6e6f300?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2444\r\ncf-ray: 9cdb824c1a22723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEskOIKWizVhJrvVnrMlrV9p-fmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=19+0 c=6+17 v=2023.9.8 l=2444\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b44902a539b26f42ca501a8fc2eca9a","sha1":"c9156f826c8af47c13c4e95a4953987d2c34a74f","sha256":"e1473cf463a4e737486548692bef2ff33e1435ccb7b1d4d9e4428371b57a2666","sha512":"2dd9d9716c420f8d993a738149c8ed8a18bb8ee2034cadb05c3743cbab9ecb9eaabfa064be34e53fad571e80eeebdf7292cb9811a369dd67d51da327fd80fef2","ssdeep":"","tlshash":"db513db78f5778c0ec5c0e4b60017a48e401be0053f0e18caab51dd2069c629d371a8b","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-06-06T21:30:11.65097Z","times_seen":1640,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/casino/getGames?partner_id=1022\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=35\u0026limit=4","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.995Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /casino/getGames?partner_id=1022\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=35\u0026limit=4 HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-RC9240401Z","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-RC9240401Z HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\nexpires: Sat, 14 Feb 2026 09:23:50 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149203\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":450744,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"a7123e730156e2678bfb3f102932806f","sha1":"a3633c8688e8260f3fe892fd608150261c69d266","sha256":"42940d31a5bef72fd2f0ac89ed7b5cc7317b7f537b56456b38f242c25b443b14","sha512":"3724d0280e4838f4dc9350413d4da22bf286f3d283b1b6d1c1fe0f5babd9c11545e7402d43a084a73f69013df306b9123bb205f1f64c2b8a0bd3ca77567cdec0","ssdeep":"6144:MPjNMmwzYRrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:ajwzYRSmIP8G44BSa","tlshash":"6fa419ce73d674225296f478503f018ba57b24a2f49cc89af189cce42d74a9a4277f7c","first_seen":"2026-02-14T09:24:23.183445Z","last_seen":"2026-02-14T09:24:23.183445Z","times_seen":1,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-app.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-app.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jD3YWZG5NtFt4BcajB7OMpiBQ.UUxxmD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bpu6AiwgpZby4f8t68UzMCbCf0xNfWNA7uVVRw%2FxO7wgC3mZWvXTj2gw9uyTXfGQBAun4IPysbKByAI%2FYtMkwszAy3lJvOhQNfnLohvWq0ZRLzTjDhPKLCYE9n6GAw%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 6b590e690e32695caa633ab770319d74.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: wiup6uJ8rIbdecm6iSMlG2e-zcGa_50mB-NKMYyfgoAYUYOUB9ywrQ==\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"c2b96460440b1358a43a511913fcc46a\"\r\ncontent-encoding: br\r\ncf-ray: 9cdb8252993776ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":75107,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2b96460440b1358a43a511913fcc46a","sha1":"815bc669e0c05413dd3618b44e995de5200098b8","sha256":"6a86bcf9466e23eb5dd702ffae4b53f730cde0c3a160ccfff8afca7169cd7c98","sha512":"64c88dfbdb85e2b328f8e690a4829accddbc943dfe479a4210ddf28c872f5fccedd46f23c525e2653f27d6e3d24aefaac7d9500f8027c0f08ab2be0abbe58d13","ssdeep":"768:HQzjpSkGROiRfEu8T3eSwKo2hWN0Kh4yPaw6ANGp2u+A47WFfVVoO4kC:wHpSbROiVJ88hawKV+A47OVo2C","tlshash":"4773b88db1d2badd4de32021535b3604f23b1974542bd484f7acedd52a28b0be227b6d","first_seen":"2026-02-12T21:09:52.719393Z","last_seen":"2026-04-14T09:08:05.884309Z","times_seen":63,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index.D0Lg3jkJ.css","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index.D0Lg3jkJ.css HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 98992\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:23:44 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcuSWg0bLtp9nZVQZ%2Bm7zg%2FRjuhZzsS0imCz7yUZ572jl4d83cKqOmO07clZmIkzOvhDvYsZcLiagWigTO0sRTfZitmQ9NvtW6oDcPlDNLnQjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cdb8229190295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556208,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (62126), with no line terminators","md5":"a6ca82055b1069f7945126c8b63e4d0d","sha1":"2eee6e082b0242eb9fbd333afdbacbec5ffe06fa","sha256":"142a89a524ec95e746f8cd8f37ebe1e93737ea4042c6e6d0d59d52fb66312bb4","sha512":"32799f54f3fb9e32280b137ea9aa27105302a6a5d75163054dd03dff52baa74fad15ec9f77da4a4c1cf3194e2e352a5da520c0477068a6e77345e08f021af248","ssdeep":"3072:bXTqmaL/L6Zt4lM9b7qIoO5To6IZpbUeBr0iA8SaQFukUVZc:bjqmaL/L6Zt4lM9b+PO5E6ERFkcZc","tlshash":"f7c4d8a1968822f87b37d61f93d1b39cb024f061d9521e6ff58a212dc6d67900263f7e","first_seen":"2026-02-14T09:24:23.187214Z","last_seen":"2026-02-14T09:24:23.187214Z","times_seen":1,"resource_available":false,"data":null}},"time_used":689,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/dynamicallyStructuredPages.json?v=1771061100000","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:45.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /dynamicallyStructuredPages.json?v=1771061100000 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 274\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxhqrYvunpbkavX4dSLzejJi7BJiemSkLMsa%2BbK4QirL%2BI73InR%2FBc3mkICZ8nNoYGrgVsNv9Mi3BM0u8j2YGTr6xObW%2FEaChTET36xo45Z8XA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82310aac95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":764,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"61ff5ed77b867ea7b436a21eb8e5ab4e","sha1":"91488963a9157554638375ada821c4bb44b12dd2","sha256":"8329002355bc98821e6757dc86bd87104c3f79ab3fa48db2435c5d3baf0ec870","sha512":"e93a660a89166b2b4f17735c7ed67f95b3b333006596634a735da5159f605181c8a74bffe6924a82feef888aea5bab127c2aaf77685cd27efbd0d71b9d888456","ssdeep":"","tlshash":"2001493d3c10ceb4f7a08862d58167809992e576c7880c5c2cdeeb19c3ad24e1441b7b","first_seen":"2025-05-24T17:16:20.011585Z","last_seen":"2026-06-08T11:36:24.275836Z","times_seen":2738,"resource_available":false,"data":null}},"time_used":1027,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1027,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/header.json?v=01/08/2026-09:00","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /header.json?v=01/08/2026-09:00 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/tr/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 142\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrXvPfPAXeh82AMY9sgcmqtN2yD0wwXEonxfLgXjtLdbEvsPHXhnFKPM5wuTJ67DNGNkIzuJ0Ilfg1wCZtv9%2BvUUja%2B4LW9sbLIZ2itJIO794w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb8247fe0295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"91a8898a46e306437d02cf167376bdd6","sha1":"32091e74d404239ddf7704dcd5dcd7651b2bcd2b","sha256":"577f712e43c00ed45eb78706758e4867aa66feb62c69a59a58016230180e4343","sha512":"169b36eb2bb6254e6832f4b99426cfea206cc78885dacad55e133a08603314c743c97744888478f149a6952abd956d701c8a98e61c32a5de7f6b0e5a4df0b30d","ssdeep":"","tlshash":"f9d0a739ec10ea7473a0c413d180a7801140e414d744485c8cdde95a83ed7991480b67","first_seen":"2025-09-03T14:22:22.403768Z","last_seen":"2026-05-19T18:11:41.190933Z","times_seen":19,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":627,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/api/public/v1/tur/partners/1022/popups?type=per_page\u0026platform=1\u0026country=NO","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.171Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/public/v1/tur/partners/1022/popups?type=per_page\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/19454832/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:45.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /global-mapper/lc_license_id/19454832/region?jsonp=__lc_region HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nuber-trace-id: 51d48a6fbb501e57d09896d9858319b8:7997f84b61b10dc4:0:1\r\ncontent-length: 35\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 14 Feb 2026 09:23:45 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-06-08T16:18:50.73373Z","times_seen":27953,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":77,"dns":59,"connect":1,"send":0,"wait":136,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/translations/tur.json?v=1771061100000","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:46.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /translations/tur.json?v=1771061100000 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 63063\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Bfz8fQiXAbOxe7D3jt0%2BsUisqDDC%2FvPJ%2B51J7%2BxsYWwRE3MrB0OJipt2br7vpQdVscIKRHrrsFbdfoI65XLOCn2pZQmQN2QMkfeS9N0uJ1idw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb823a8c3395bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":201901,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"628a11bb71aee33be2d654b1e63186c6","sha1":"bc19bcc515774f2b85e5cfe4e9191c60f270cd13","sha256":"48d8f01be13163b2d88b087bec1f6b469b2380b84f28dd3d904b6e0feb741b7d","sha512":"f33272d1f2c092aca341cae6b79f9615c7c5c4b45e252a1b8447d8e0044c32b934edb4393c279807b9c9bec89212de9f578fe0b02e48115b1dbc95e1db2e5a3a","ssdeep":"6144:vcUR74A84U4aeXThYo0o2MH0lbEhyNXj0odp+yKjO53K:v5REA8PQlP0lbEANjLdpzK","tlshash":"38145c05586e3cfd976207ce74de8e66b0fa0383d150e456edadc63a238c767d26b908","first_seen":"2026-02-12T21:09:52.747086Z","last_seen":"2026-02-14T09:24:23.192168Z","times_seen":2,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padisahbet.winwingames.io/check-auth","fqdn":"padisahbet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padisahbet.winwingames.io/","date":"2026-02-14T09:23:49.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /check-auth HTTP/1.1\r\nHost: padisahbet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padisahbet.winwingames.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QfIVHIB%2BNLr5Ee1jxGT1RYKo2XPtex78x%2BwLU4r9sbsuPo9lzfV%2FvkVui2KRDNh%2FeWBDMVQAlBV0Xjp4KfuZxosHN2Gw3YuabzOAKlSCACj2c0h9G8zbVs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdb8249ebf4516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0d0ef894fa1c5fc383cce96e2d857de6","sha1":"fe19a48e71f224e79f27804ed7d5632c065e5de3","sha256":"0b3443a9377c829f10dc4dbc281475c7bf89f141d56af637ad5c59b74d00b2ca","sha512":"988a2be034f9f80c25a7cdcbd2659e4310baea3e590b0f9fe75ac9d0d7b1d90a8e8b07f33fde07627f3f61eae405d36f9afd6cbd20061b3088ab844a0821abf7","ssdeep":"","tlshash":"4c70000202000222ea80000803002a3388008838832020200008a02000230880002802","first_seen":"2025-09-21T05:18:37.922942Z","last_seen":"2026-06-03T04:20:31.934463Z","times_seen":90,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/CasinoGame-DLF1BSvR.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/CasinoGame-DLF1BSvR.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1992\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5ok0%2B9cCcESJjaOOQT6YE%2F6YL66yZ0g7uC1qUiZxY%2BzWRfqdlHQBs8EAznruFePM3q0noz6GhVWUL6Zi1B96Pd4B%2FqB2Isg9VdS8PIOeqPqlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb824c7ece95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5827,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5552)","md5":"d4debb005a2b2fa83f54bebf107c2ac0","sha1":"2373c594337d76c0ead023621f356cba41299704","sha256":"210c8f3b498a4b825142ca6a8ca0081533c8241217c495d31ff20b2cdaa043cd","sha512":"ba1852aed6c90a0752453d518f50b41b0dbe45221d0979636c25d08dcdefa81b027fdf349d5df9a9af56a63d14da003890fada7883bfce7eef0c7db022d68cd2","ssdeep":"96:juytJ4U5ySp8LCdaUKZUBbiRx2VZZ9L6u/T+x2mZ97vCbeKbcFSvu:aytCU5yihd1dBrDeiKJuMFMu","tlshash":"e6c19705e020ef7db9360cca986f1029b8192fd2de194465e47da839367c11db266bdf","first_seen":"2026-02-12T21:09:52.731749Z","last_seen":"2026-02-14T09:24:23.195839Z","times_seen":2,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.hizliresim.com/pel6895.jpg","fqdn":"i.hizliresim.com","domain":"hizliresim.com","tld":"com"},"ip":{"addr":"172.67.154.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hizliresim.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 23:05:33 GMT","end":"Wed, 01 Apr 2026 00:04:01 GMT"},"fingerprint":{"sha1":"46:B9:45:32:A4:00:21:12:4E:AA:75:12:74:1C:64:59:39:57:FB:A2","sha256":"9F:DB:5A:3E:8F:DA:1B:B0:3B:F1:71:25:F7:06:02:BA:3A:B9:03:A7:9A:9B:87:33:9A:17:0D:AF:C6:7A:CE:3B"}}},"request":{"raw":"GET /pel6895.jpg HTTP/1.1\r\nHost: i.hizliresim.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 218668\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"910a48baf906cd45967771276e68a9ac\"\r\nlast-modified: Sun, 01 Feb 2026 02:04:16 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\nx-amz-meta-e2iid: 28782ae\r\nx-amz-meta-erid: [838 777 411 3 657 715 219 234 269 100 480 596]\r\nx-amz-request-id: 189162ACEC2AD858\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-amz-meta-mtime: 1766095742\r\ncf-bgj: h2pri,csam-hash\r\ncf-polished: vary_header_present\r\nage: 756401\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVSH%2BeF%2FvKaY61vs0RDdhKfdl5ZdKKtpSC7vYhX4CDX%2FiIWpyFpOwQTcaCUvmb%2FQ3QzBvtIKVNIN1VZXHtJK9515sfHiMllEWsVMRwq4e78%3D\"}]}\r\ncf-ray: 9cdb822e7f8b95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":218668,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.10 (Macintosh), datetime=2025:10:28 01:21:54], progressive, precision 8, 1080x1920, components 3","md5":"910a48baf906cd45967771276e68a9ac","sha1":"aeba41087bb6267e7071728257ea2202086c4244","sha256":"939b915f4f1dd74c940cbd53e3a5f48b80245028f37c5269023b37c93df6b577","sha512":"48d9620b695f4974a9715a4da92581c2310d4d8d88133efee47d4349ae18281c90d49c134dd1e35ef0e181e6ee3c74e9ab39846ece8d307384c9066ebcb3e1df","ssdeep":"6144:xBU3Qe11PxAIIFMj0jVRdjcHEMvsGPERpCsUgthq6:xBm111IFMILdj7Mv7PEuf6","tlshash":"ea242376ea67cca6ccd8943e4529e02d4241dfaecfbfd905764c3511bf3aba42464870","first_seen":"2026-02-12T21:09:52.618097Z","last_seen":"2026-03-23T13:26:58.96399Z","times_seen":5,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":73,"dns":35,"connect":8,"send":0,"wait":18,"receive":30,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/tr-_8aK4b6t.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:46.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/tr-_8aK4b6t.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:47 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 809\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jux1RXercGRcxANyy%2FnLA4daiw5I19PDMDGumwYjfwls0QDg00pbqYk8flZZeGcJ1QaFA11rxUp0elIQ4x6k7jWkBqvPttLUF2F8m5QytHanw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb823a9c3695bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"2c9e6db0bbae2f06584f8ec90d96a6fe","sha1":"d0f5fb65b8ba7f0dc04dd0a0a2e41a0140727aec","sha256":"db6191cefa0291f71ec6b795b48497f047effddfa9941f1b7d3cf2387600939b","sha512":"7a4c2c0c28d6d3102733fcfaf95bc776bd639b4674960bc83a8c0ae8bfd0dce549d700f719d469181cd428616914622ae16f579cc7f96621fe10041477f68c90","ssdeep":"","tlshash":"8931a44c2946eaf2870159878c2f1f04f40c2b087036f1619be0d521bab09ee807eb3e","first_seen":"2026-02-12T21:09:52.663913Z","last_seen":"2026-02-14T09:24:23.199878Z","times_seen":2,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/withPanelButton-Dloim7i1.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/withPanelButton-Dloim7i1.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 512\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NMndW209o5PVTZXh7biNSfBQph5dGAn6ZQ%2BjKnIvOiQmsuDpj9lJhnDUEsXzW1%2BHQ2MMTpElbEdgOXuu2aJUHT3%2B6lbXH4n6EVePF1F8Bh0%2F4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82487e2395bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"ef65121ec98a2473a86f9af94e614d64","sha1":"79d256cd63e311d01fb8d34afdc0542e9b162af7","sha256":"7e01b026fcaf01e33730f5ae46cb025329160ed8967d757ca24460ad1c06c6e5","sha512":"73d454cb8fc55f79b1e9965a2aba004a33ff347a9f8a3a37f3f4fd36082faca671b6237bc6dd346ed12f8a59da2f4cb6b0a7ecd6ababe73e8f65955680325a3d","ssdeep":"","tlshash":"3211f0f4f580a9f2e4c41088577b2cb2319a32c9dce1049021a6c8e91fa8449965e9aa","first_seen":"2026-02-12T21:09:52.7015Z","last_seen":"2026-02-14T09:24:23.202085Z","times_seen":2,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: 9cdb824c2a81723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-06-06T21:30:11.571202Z","times_seen":1649,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onesignal.com/sdks/OneSignalSDK.js","fqdn":"cdn.onesignal.com","domain":"onesignal.com","tld":"com"},"ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.onesignal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 13:36:29 GMT","end":"Wed, 18 Mar 2026 14:36:27 GMT"},"fingerprint":{"sha1":"30:5A:B5:12:D2:73:F9:E3:9B:92:07:27:01:B9:79:94:0B:4C:2E:65","sha256":"F6:62:1D:69:EF:68:3F:83:1A:DD:B1:33:27:EF:0B:A3:C6:AE:82:29:6B:B3:2D:77:F4:6A:CF:36:2A:AA:C5:6F"}}},"request":{"raw":"GET /sdks/OneSignalSDK.js HTTP/1.1\r\nHost: cdn.onesignal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:44 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\netag: W/\"09282956186c8515ef0d208902803581\"\r\naccess-control-allow-headers: OneSignal-Subscription-Id\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 706\r\nexpires: Tue, 17 Feb 2026 09:23:44 GMT\r\ncache-control: public, max-age=259200\r\nset-cookie: __cf_bm=13hOqimr9oq1eT6zmpn5keuZIks2U2EexK_t03dNyeY-1771061024-1.0.1.1-vdJor8ltECSuFHCbvcyLUqqb2rpL.c3MIjS.K66u85VykmJoqeo6DgTZz7WWoD2UaJQRKHAoqq8pt4bejfdrf6BW_z634Y9QGGr2z.GPRww; path=/; expires=Sat, 14-Feb-26 09:53:44 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nserver: cloudflare\r\ncf-ray: 9cdb822dad1e783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":9204,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9163)","md5":"09282956186c8515ef0d208902803581","sha1":"ea83b81c9955b3e983a7bef75714a9cefa904151","sha256":"ec8b1b07980996f574075e1b7e895d5d47794b9dcf345a68d60fbb17034f7bef","sha512":"39bf696c593e20bd86ae8994eb8e767b6c7fa6fa029f94b5dbc145cc30dc9460bcd5544f0182a79e4befc85df960b30dc53d7b435db24463f0e91d82faa4cd10","ssdeep":"96:/AQneVFrK3RJ1oauMhLBiobXf1JqZ8zZDV81uZIJqEKIZft4JqxCYZX7+Aroq3I3:o8Noqhtig1XzZZWuZIUsft40pTrU3","tlshash":"0512449bb970b5f253d358f6802f210ae27b993894b9a4905b85c4e09c7161f4337f6a","first_seen":"2024-07-22T22:24:59Z","last_seen":"2026-04-28T18:33:33.656306Z","times_seen":13514,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":38,"dns":20,"connect":1,"send":0,"wait":21,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/TabItem-zkEF3Idw.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/TabItem-zkEF3Idw.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 234\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W0kA0lwSHuJvTlwBk3NXjIZzLBXfL9mg6jtlu2eeMpXrIR2q7m6UOL6iQ%2FNYdsvAqEqBfc55eVQvd9vs40rK8arZRyHY9NfggB7wuZNOSxVjIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb824eef2e95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":413,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (412)","md5":"e59e36887f8fcd88c5d20ac121a95ffe","sha1":"68438ecbe8dfff1e718e44016f3ed72127e55415","sha256":"529d42530d7220d8394807642b9cdd073370ca9378fcd4a90aeaea470dfdc647","sha512":"84910f6aac0ade165c65d2d9612be6ee4855474b5e14c6a2e7671395722e8b62023d5823a5a680a8fa3e32eb28349e0a188efcb562e0ac0dfae5bfcadc30bfcd","ssdeep":"","tlshash":"b9e02b42a020f3f5982b44d6d67e94c7721219dcda5588e6a1a22040072e521f74ff8e","first_seen":"2026-02-12T21:09:52.571417Z","last_seen":"2026-02-14T09:24:23.205844Z","times_seen":2,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/AiPromotedGamesWidget-DQlZ-xNQ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-DQlZ-xNQ.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 972\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=01ae%2BjG07Em7vy0uOiVCIv77WkG2M8EdEWG0ivorDRB0z8xpSDA%2BkZrOih%2F4Axgz3TMk9ope68XjNm8PxzIGTo4xx0kyPBjZA9XSdGPEjM%2BIsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb824f3f3f95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1962)","md5":"ce6d86745a8088618bc5c6a32767ed1f","sha1":"177eb730614376dbd9aee5dd3e69691c673f4eaf","sha256":"1c854329659b37f2f0549833fbad8ffc3333f147c4c88cb9f1ac9cde70b2ed83","sha512":"d5cfd9b2392c05ceb4c163e7982a9264f04aff5bbc8d8d1590729c50c4969727c0d87d00ff4135fa8795180c75154ede28749dd4163a5f2dd4732ca91caaa4cc","ssdeep":"","tlshash":"3341312fb01dc9bcb26c0aa09694b74994117bbcd719e0e8b6ff5a01732409d63b9f41","first_seen":"2026-02-12T21:09:52.622279Z","last_seen":"2026-02-14T09:24:23.207709Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/walletConnect-CiycSUBb.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:47.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 964\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7m8ChzWdL23pFEcc6z0ih%2Bubhb6aPUPX64UT3SVuIgDgoSyZqvnAUmDBFSq%2FRtWb0BSWXrhLxkiQGsJ1tnBOr3r0Z7Rz6Gzr22DZashd8hzY9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb823cfca895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/logo.png?v=1764600528","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /logo.png?v=1764600528 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 16525\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:23:49 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxiWWCmOKfTEUfOL2pw2puGwfu7VhGBlxIsYyMj0xMqZ6TojLHSEhEIFiHqn82r0aMgI2lZaK47b817pFiaQTtXTeL3XK0JMCpQA%2BhiJWC9Jqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb8247cded95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 72, 8-bit/color RGBA, non-interlaced","md5":"08b5523f483dce24fa4a5f23bd32d259","sha1":"bbd1fefd69d8680a3e89026ea10cdcd6206fc55f","sha256":"4cceeccd1aaac6fe743535143a1675747f3acd041649dca3e728bf70091b5440","sha512":"53ce41943ff531d4e6b290b63362fbe27f2b9107c3c89ccb7a965a4e39c128ed181223bc075cc9357b04c4be1469346a21f24e7dcd245d40bc1a7f30f905cce2","ssdeep":"384:zpUYnY66WrAZhwTzK5gC6yYu1i6of8u8rPYRN6jE1C:1Uqz6WcTwXW6rugpU5PYDyEY","tlshash":"0472d0229517815275103394e4b855eede333e6d0708bd93aca2fe5f20e021e7529f2c","first_seen":"2025-09-03T14:22:22.27358Z","last_seen":"2026-05-26T19:32:43.195134Z","times_seen":42,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":740,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/api/public/v1/tur/partners/1022/seo/page?platform=1\u0026country=NO","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.166Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/public/v1/tur/partners/1022/seo/page?platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/GoogleAnalyticsTracking-BggHLP3v.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-BggHLP3v.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4699\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0PAie2KhzgDd1dEWTUQUFmg2JQN0ZaamzDJ8pIlp4jooB170n0D0hiLlJrnYLsCmySxh0V%2Bw3lrMqlUiE0ZvQznM00iN3vyPtBIIhfyiBOJB8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82489e3995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13981,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10435)","md5":"8769303a44940be9dcde3e019bf2c71a","sha1":"63fb4f5488aba940d5d2e8e4b3a7e076a4cf35a8","sha256":"e7e2eb94f84ce69a4e39f604fce348c8e3db3f565fdf2a40d7ff21bcab8e30f7","sha512":"adb5c3ac0d0064d0fdb95a18f646e157920dac6fdbe72a3e18a7c2eeefad944f6274ead7b07af3240ff737650659f0e86873e9c66d7d9b4dfafb9644290e44c1","ssdeep":"192:tMwtlZTRNRnqTdCTbxbHXCT75hrxGE0IZshp127DNhV6Wh52I5gQwpvuF:tvlZZmdCNCwEYUhptIuF","tlshash":"c152c69c32adb0b282df6054587f320bf1755910a458f480a265fdb46ef8c9f52abf36","first_seen":"2026-02-12T21:09:52.620335Z","last_seen":"2026-02-14T09:24:23.211046Z","times_seen":2,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/BetConstruct-Icons.Bc7YesUK.ttf?krqdvb","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/BetConstruct-Icons.Bc7YesUK.ttf?krqdvb HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index.D0Lg3jkJ.css\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 467989\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:23:49 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7guvPAKGfZZn5YJ97DtFJHdmq57CHboJUjD5zBM29pSzDxS58v2ZM5OninuBt7Aav3WJgRqr1Fb0VFhFqbPSVQ0EXEFklQPwIxy05dUVYLZMfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb8248ae3b95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":903740,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, BetConstruct-Icons","md5":"397009c27e5053bb6a972733234a1be4","sha1":"1222cec05f1749694c21b02ee78372abe7f80a56","sha256":"132780945c24246bcf8e288c60f6c3e6f601c23f2283fd46627e7895f84723a1","sha512":"c06a8f16974af071c8d4289917ad24eec10db060c43d8882213f96c7b81eafaad7634caa1ab98a807155fc836f4ae633e62d10ee84f85491437928b12fdbe09f","ssdeep":"24576:8MyN42S4YtdOEEF52XCpHVOj9yQcCL6L3GeM:lB4lnEfeM","tlshash":"11154c0b630edfca604261d30c56a01b8dd6e2095b3b9716fe8d9d24d261be44d3e7af","first_seen":"2026-01-21T04:02:17.070953Z","last_seen":"2026-03-23T14:49:47.191395Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":482,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_3578_1022_e5f4e814b78bfe9f1d9848966bb99fcd.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.756Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_3578_1022_e5f4e814b78bfe9f1d9848966bb99fcd.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/WagmiConf-A39JFnij.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:47.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/WagmiConf-A39JFnij.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 33241\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmf4dsozsvmnNf88YvPe3adizwO6MHws%2FnOOtksE3TeyfQJsLIB9%2F3hkgDnRd5%2FBxqzotmaR5tIoYK45dht5z7YM22n5f4vbNJj%2BcNPSexkx6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb823cfca195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":100979,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48215)","md5":"39f279cc9b9e6f0f0686ecfc979bb58b","sha1":"61e519b19569be622f0e57a1ae9f20b3c54f3e6a","sha256":"cd446851272c55ff37e9c7a7f59356432dd0c94894560cf00cff717c68b92e93","sha512":"f9f6872b08832709ee1a753e65d3a7136eaee6b884dcf3fdefe51f58a58100c57412d4f87f34b12f32d6312c5afe2e3eeaf2dbbd7a5a87e11cd2ae517f3de046","ssdeep":"1536:CYj2Caz30CdwD7ZajZlOxjMij4Yx6uxO7kaUhvFSEy7XUF3waG1RGYBsEUt0s5Pa:iCaMRx5xO7TUqYEUZ5PUR1K/XGl","tlshash":"f2a35ad07196b46103a74ae008bf440bf139ac34200e565cf269ecde79b96e99277f7e","first_seen":"2026-02-12T21:09:52.643492Z","last_seen":"2026-02-14T09:24:23.213482Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/___vite-browser-external_commonjs-proxy-C9hg4xCX.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-C9hg4xCX.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/WagmiConf-A39JFnij.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKBhEJzSDTxkKAr%2FJ3WGcWvMry0empEkUO%2Bh681JWbZqUUlVjfwfNmi%2FoyW%2BEpX2EW2wktQak9z4f3XEHpu87UtFAu4fnOdt1xi8k5sTDuEJJQ%3D%3D\"}]}\r\ncf-ray: 9cdb82440d8495bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":178,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"78d2bf2a56f53b9ade3c5cd6ad4349d8","sha1":"b9dec07ec757f6fd77e0716687bbf6f0014aa9ac","sha256":"c6ab270d779ab004269296b1b174e198d4e4bce4fb2be386cf198d7b4e414857","sha512":"7d42fd9d1dc37b84dc6d7ba6009f65ac19be83cf9fa6683e677ac9161105296500fcacf96a2a35098c3a5677b9aeaef7a6a5637d2feb181aaee83d71569e68d4","ssdeep":"","tlshash":"0ac080552754dcb4618b1d8296159401d54c4d7eb3f4f5e0fb088e55020798f6278f57","first_seen":"2026-02-12T21:09:52.587821Z","last_seen":"2026-02-14T09:24:23.215149Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/walletConnect-CiycSUBb.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/walletConnect-CiycSUBb.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/WagmiConf-A39JFnij.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 964\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lj%2BfMuOWhdpcZfsxa3ZNZ3H6Ml90r%2F0MsORwOzRl4a8n3Y45Bi6M3iHnxMfGXaboy7eNo0mcha4OXt4dyrCHgKF8jNGueFQHKeVJ2rpn%2FCgq0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82440d8695bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1997)","md5":"da47465662d5f1b88313ef72ebb29b9b","sha1":"e0d2fd5d0504d57d4b24f518b22952d2c988a7fe","sha256":"3bab1d05ac548fa6a9da34691fb10a9952e78e39de56d9db8e707490f5693803","sha512":"0caccce9e0a63d128acb707352cf961d8f203ab6088a491971a415a6902229d366a19c5983aa951831611446a97d432ac6eb2fa0aaba7cafee0d82e68688bcb2","ssdeep":"","tlshash":"cc4153ed9a14e4fccd74d1801ac9a709a0268ec6b40d40cb71cd912f0ffd4aad546b27","first_seen":"2025-03-03T02:49:15.275081Z","last_seen":"2026-06-06T21:30:11.623634Z","times_seen":1659,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/userJWE-BKTDW0tM.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/userJWE-BKTDW0tM.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtPTTEdgAmzUSa3YetzL178lzxJOEDkpUtpeX95ejeZf4uGa51qf06Zobnwc3wskGXoC5WEjgQWjkFCBlh2qW6iqWcU4YPkHjPh7nQl8OsDSsg%3D%3D\"}]}\r\ncf-ray: 9cdb82487e2995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":193,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"b13936be56673374416cff69516fb5c2","sha1":"281c349087db341076334b8cac9f2f51e9d073ed","sha256":"adc14e213ffb164e40aa2f2e4b737c51e2a5690584170421628adcf1951e7469","sha512":"3b6531c07bd6744a5e9d21a9283f056a72425aafbf781332d5fb4ad2f3577d120988803716dabf9da94afb467164f3cb0be4175bff03709dbf243b7699a6b7c3","ssdeep":"","tlshash":"a9c0c0db0cc411f7c5582c801015dc13c230391863d8d3825b0c93ea7b5100bf20ca10","first_seen":"2026-02-12T21:09:52.758847Z","last_seen":"2026-02-14T09:24:23.216719Z","times_seen":2,"resource_available":true,"data":null}},"time_used":631,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/InformativeWidget-BQZOZXx0.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/InformativeWidget-BQZOZXx0.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 570\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSPN8JPKL5UUYaz0tVp%2BeTQK%2F8Ee5vAv0xwEHghXzTlaVUR2afkATFF2mbeh4gFc1M9f9eaH6KAzCVsfeMtxVSDNnBG6sDXAvtP4gNbDer2JwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb824c7ecf95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1020)","md5":"08b0a016532cf01e03b37b17a2168850","sha1":"eaeac0ee3088429323920adb0915548f969ef60a","sha256":"bf6b146d786e759c49d5f942cf745af9cd7d5f5c6366b28c2d681301338ac664","sha512":"e0408a2d64b69803d31c22f4892f9a98766427497a04237cdc5680421d834c4e26d7a7f416829318724efa75c5b7ba9c82c92d90714c0bedfa018386daff1815","ssdeep":"","tlshash":"84116581e291d63ef06604c84716505465227ed8cf38e8fd84623008d474d0ebaeafad","first_seen":"2026-02-12T21:09:52.597015Z","last_seen":"2026-02-14T09:24:23.218285Z","times_seen":2,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-CjSfBsBO.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-CjSfBsBO.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/GoogleAnalyticsTracking-BggHLP3v.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 937\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5obOWreGJH9VVZ79Z3DSnqHMVKanuJO1Ou13SlL1YsQ8bpQ6Qe%2F0%2FaS%2Fvt%2F6boXBbTI9dMNHAN%2FSPgmFY3Sdpd7QuRC%2FYGCyiH8IlzVNKD0suQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb824d8ef995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1281)","md5":"7b4a4bbad5c5a6f160ef0669023415e7","sha1":"4553d91dc7fabe659f52f9d337504dc9f0e0cb21","sha256":"f2f06f2521b54be5af175ea4d2c71933defa31b68b59321c2b0aea2cb5b4a169","sha512":"1f1d9541f5754254b899661ce589d667f61a5f29fb4285d49c6fe96aa73408c48c37c392292d348d0106b0cf118dc8b02a9f7cd91b6252f89277483f91ce7c44","ssdeep":"","tlshash":"085152d63e929cb0529681a52a7fd2593163352ca104a470feed98986f20e47c902eed","first_seen":"2026-02-12T21:09:52.684155Z","last_seen":"2026-02-14T09:24:23.220187Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"57db31a6-b244-4076-95bc-5ec10ac25b3e.snippet.anjcdn.org/sealassets/614dfa1fe02993a11dcc974dd43ba7d7-padisahbet.winwingames.io-a10ff276019c64f0d92d5323cf5b27035103470902aa850296c76b6764357e5683acbd16f3e93a879de0a9bca12527f2-c2VhbC5wbmc%3D?status=valid","fqdn":"57db31a6-b244-4076-95bc-5ec10ac25b3e.snippet.anjcdn.org","domain":"anjcdn.org","tld":"org"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padisahbet.winwingames.io/","date":"2026-02-14T09:23:50.167Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /sealassets/614dfa1fe02993a11dcc974dd43ba7d7-padisahbet.winwingames.io-a10ff276019c64f0d92d5323cf5b27035103470902aa850296c76b6764357e5683acbd16f3e93a879de0a9bca12527f2-c2VhbC5wbmc%3D?status=valid HTTP/1.1\r\nHost: 57db31a6-b244-4076-95bc-5ec10ac25b3e.snippet.anjcdn.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padisahbet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":114,"connect":1,"send":0,"wait":0,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_17501_1022_ced27eef922ab064c03709952fec4f12.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.752Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_17501_1022_ced27eef922ab064c03709952fec4f12.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pamimage.com/images/1766060349278-ruya-kayit-1gp8kj.webp","fqdn":"pamimage.com","domain":"pamimage.com","tld":"com"},"ip":{"addr":"172.67.151.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pamimage.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 21:44:37 GMT","end":"Sun, 19 Apr 2026 22:42:06 GMT"},"fingerprint":{"sha1":"15:86:94:A5:FC:60:49:5F:4D:6E:13:0F:D7:52:5F:07:90:C1:9B:6D","sha256":"57:9F:C9:92:DE:FE:3B:38:17:37:E1:39:AF:28:C6:6F:1B:E1:F5:8F:11:98:3E:AC:19:A3:D4:69:2C:A2:4E:A4"}}},"request":{"raw":"GET /images/1766060349278-ruya-kayit-1gp8kj.webp HTTP/1.1\r\nHost: pamimage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 736\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Dec 2025 12:19:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6943f13d-2e0\"\r\nexpires: Wed, 10 Feb 2027 08:17:21 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 349587\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQWkjoPO3U9JVev3jrRMTg9Ndr6Cz2qAyl38s0qfv8w4AptI2QPMP8x1fybNgdpdTUzW7%2FevvOxNPKdnXclQRIqkCb7vOaL9o6dYYw%3D%3D\"}]}\r\ncf-ray: 9cdb8248d8665864-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":736,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2291da8402322264758fffbbd0fc7a9d","sha1":"8139ddc784a8dd84637d861deb5bbf167ec5465b","sha256":"5095b631abb1d687ed96854601e12a861308978104cdc0f8f6c004f8c48ae861","sha512":"7825b0b78df52abec0a34861a8d4ecdf94b5476618f4ccf948e44ce0bb7d48a7d78310e76dab2c4a4dbc19045e0059364f76591f61f962cb59c19dae180ac234","ssdeep":"","tlshash":"fc01b532df680c7dfc8a7c3b11e58ba10c90e036c8a02d624f781cad048db80ae7b24c","first_seen":"2026-02-12T21:09:52.67157Z","last_seen":"2026-06-01T03:07:11.859588Z","times_seen":18,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":95,"dns":62,"connect":9,"send":0,"wait":19,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padisahbet.winwingames.io/public/proxy2.js","fqdn":"padisahbet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padisahbet.winwingames.io/","date":"2026-02-14T09:23:49.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /public/proxy2.js HTTP/1.1\r\nHost: padisahbet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padisahbet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 09:23:49 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtlxhtUwBZJSC%2BfCF8T4%2BRlxVtCEXaQbQhy8FhigWhlnvq4zAtSzL2zuWBfkSzcG7PKJmkYf0%2BbDCbyWj1CS9tfuBsS2M1Z2iVc4jiXV88Vkpfv%2BA1Yo%2FrA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdb824b691f516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19500,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b41727e3bb910f357362f457cd790afe","sha1":"377822d23e102ffd0ccfff02bc27c63ab5e6a155","sha256":"179e54650e8fdec7e1bd16f132dd4d626b119a6a746288083f770307b8ebc050","sha512":"191d6ef739cf7a53b6b575b15db98bc666afdd2e27a13db067ea23af7b7f62df6b519c413fe99306127bde94665c935b5f802ea6305c6a7b7e8349b05b5c3dca","ssdeep":"192:0eJp461ScOtSD3FfjmfO6goK78IANjSLsZPiSLrBEpKYehsKs841+yUV22hhCsrq:lJ/Sk8fhPVEQGrUFAvRZIgUlM","tlshash":"c992860e92bb2123447334bc978ba146bd1150971d0acd847f4ce394bf85b6eb6b27ac","first_seen":"2026-02-14T09:24:23.223307Z","last_seen":"2026-05-19T18:11:41.39824Z","times_seen":10,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index.6hr6LgI6.css","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index.6hr6LgI6.css HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/tr/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 394\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:23:50 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dj0%2FAaseVkWTboTK%2FIpE3xeOf1SbZ%2FLvW%2FvgG4KGaEnKk9N7swDLmiyrFUArnWIe3%2B53OnWVRLz6J97IlLteILff3kvdYO9jhLY5Ic%2Bs7h6EiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cdb824e5f0f95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1252,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1251)","md5":"d03ad7d634db584e4aed770123954f9b","sha1":"eacfeacdafdf8738f325cba4cd9352bad2829a4d","sha256":"7dc01c1d9e89862143b3c4cc81a2255e63cdb8412bf7421061819919fc2c6bf5","sha512":"e4641ddc5f100aec535f0f87f4b4cf617ff4fe450de4ed993b3681bec62023646689f9f12edc7b03c4dbf21e0b98081e4e8dd5b0b0a13970fd25946f953bde37","ssdeep":"","tlshash":"f0218ad7190b14feba73a6bf454346ebe5238c5bce63114ab6c21729c4827a2422245c","first_seen":"2025-10-29T09:08:38.623149Z","last_seen":"2026-06-08T11:36:24.390416Z","times_seen":1241,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-D3bGYEet.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-D3bGYEet.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1301\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OpfonHa5mqm0qnUSfdLEDT2ju33LlppeojYt14atNOYGC%2Fst4XG993oeK7Mz3dHBBP3hAJxS%2FBrf%2B1LQWBFrqsbPg%2B7cyCWEgQzNYT5tHWY%2Fkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82508f6d95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2923,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (2922)","md5":"926c847723e7d230b7277ba06fc8e9b7","sha1":"4e02fa4876ace3ba750293fb5b14d7e491a54367","sha256":"aa074fd5b8138e08c4822a637695ea243e3fca94541769ddfdedc63ae3878062","sha512":"4a243c541aa31179c2d6b970c025da8c9ce5d4615d87be45637e93c81470d5727910addf4a94dc7d2bfa2a8dfa0144a5ca1731b9d57ea4f5221bc39c416d7a42","ssdeep":"","tlshash":"b65131c76042d7b8bfe708e6419b10b074374e5cfe1a449082be15864958792e35bf4d","first_seen":"2026-02-12T21:09:52.638462Z","last_seen":"2026-02-14T09:24:23.139172Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cms.padisahbet804.com/storage/medias/padisahbet37/media_1022_fb3e299db239954bc396bf4d4efb7dc2.png","fqdn":"cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.731Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/media_1022_fb3e299db239954bc396bf4d4efb7dc2.png HTTP/1.1\r\nHost: cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_13143_1022_b26d260c8d179521fada2c682f7d072d.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.753Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_13143_1022_b26d260c8d179521fada2c682f7d072d.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_17478_1022_475ef14d62dee62bb5d10267f27b3a42.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.757Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_17478_1022_475ef14d62dee62bb5d10267f27b3a42.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/___vite-browser-external_commonjs-proxy-C9hg4xCX.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:47.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/___vite-browser-external_commonjs-proxy-C9hg4xCX.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeUkjbnMq3bwrNzigQd95OuJQp2UH1GNU4mVymfamcVpmCqfo1aiAFwruNEd0b21Nr3jiAJM8ZUzeytrnlKrGMLmXb3iiEupAP7GqO0u6m8UlA%3D%3D\"}]}\r\ncf-ray: 9cdb823cfca495bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":178,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"78d2bf2a56f53b9ade3c5cd6ad4349d8","sha1":"b9dec07ec757f6fd77e0716687bbf6f0014aa9ac","sha256":"c6ab270d779ab004269296b1b174e198d4e4bce4fb2be386cf198d7b4e414857","sha512":"7d42fd9d1dc37b84dc6d7ba6009f65ac19be83cf9fa6683e677ac9161105296500fcacf96a2a35098c3a5677b9aeaef7a6a5637d2feb181aaee83d71569e68d4","ssdeep":"","tlshash":"0ac080552754dcb4618b1d8296159401d54c4d7eb3f4f5e0fb088e55020798f6278f57","first_seen":"2026-02-12T21:09:52.587821Z","last_seen":"2026-02-14T09:24:23.215149Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1085,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/AiPromotedGamesWidget-DQlZ-xNQ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/AiPromotedGamesWidget-DQlZ-xNQ.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 972\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QdRnQi6XiAKNrZdePd0Ept%2Fh%2F%2FiWjhGzoTuDgCeu%2Fx4lTnnqQELGcKOBr9p4XGFB4HNRgLkYMOpj9VQX%2FXIX7E7%2Fx4H6US8kScKU7d%2BdpPSlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb824c6ecc95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1963,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1962)","md5":"ce6d86745a8088618bc5c6a32767ed1f","sha1":"177eb730614376dbd9aee5dd3e69691c673f4eaf","sha256":"1c854329659b37f2f0549833fbad8ffc3333f147c4c88cb9f1ac9cde70b2ed83","sha512":"d5cfd9b2392c05ceb4c163e7982a9264f04aff5bbc8d8d1590729c50c4969727c0d87d00ff4135fa8795180c75154ede28749dd4163a5f2dd4732ca91caaa4cc","ssdeep":"","tlshash":"3341312fb01dc9bcb26c0aa09694b74994117bbcd719e0e8b6ff5a01732409d63b9f41","first_seen":"2026-02-12T21:09:52.622279Z","last_seen":"2026-02-14T09:24:23.207709Z","times_seen":2,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/api/public/v1/tur/partners/1022/components/45284/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.516Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/public/v1/tur/partners/1022/components/45284/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_17246_1022_51f0446ae6dee0ef02918f23193f4b8b.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.747Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_17246_1022_51f0446ae6dee0ef02918f23193f4b8b.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/TabItem-zkEF3Idw.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/TabItem-zkEF3Idw.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/FavoriteGamesContent-Bs2efduZ.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj; _ga_RC9240401Z=GS2.1.s1771061030$o1$g0$t1771061030$j60$l0$h0; _ga=GA1.1.681602900.1771061031\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 234\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMCBAJoOL9xUGHBO6UfeXR5As2gU2E9jh0gHRsi%2BiPiZrNGk9sgAdPMhQRRnDCd7khQxBe0J5ylshAeXn2u1MsP0fvxgrobhix1M3ELYpa8c%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82523fc195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":413,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (412)","md5":"e59e36887f8fcd88c5d20ac121a95ffe","sha1":"68438ecbe8dfff1e718e44016f3ed72127e55415","sha256":"529d42530d7220d8394807642b9cdd073370ca9378fcd4a90aeaea470dfdc647","sha512":"84910f6aac0ade165c65d2d9612be6ee4855474b5e14c6a2e7671395722e8b62023d5823a5a680a8fa3e32eb28349e0a188efcb562e0ac0dfae5bfcadc30bfcd","ssdeep":"","tlshash":"b9e02b42a020f3f5982b44d6d67e94c7721219dcda5588e6a1a22040072e521f74ff8e","first_seen":"2026-02-12T21:09:52.571417Z","last_seen":"2026-02-14T09:24:23.205844Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19454832\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fpadiisahbet801.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__7ey4mtcgpaj","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:45.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=19454832\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fpadiisahbet801.com%2F\u0026channel_type=code\u0026origin=livechat\u0026implementation_type=manual_channels\u0026jsonp=__7ey4mtcgpaj HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 126\r\ndate: Sat, 14 Feb 2026 09:23:45 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":126,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"ddd5ee2c2dde8b6a5f4a8e289d4d98cd","sha1":"b0838235f4858bdfbcb43ef484a00d9d9c701fbf","sha256":"70d22772f70e9ead17e7d2877977014cb50ddcb43625df5f23e015d98b21168a","sha512":"48f291077a3dd149587a326f3a6acb7249eb1f3170eaf67346f99e89cf02735721916476ca58229ebcb0bea63e58b391e9c93cf8b9fe58ac7ae2f3c833831358","ssdeep":"","tlshash":"9fb02bb3f7339a341a0df30348081086b01c40c4000a399970c45220810d5c84340b05","first_seen":"2026-02-14T09:24:23.225636Z","last_seen":"2026-02-14T09:24:23.225636Z","times_seen":1,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.padisahbet804.com/","fqdn":"eu-swarm-newm.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:47.004Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://padiisahbet801.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: pT6ihB4neSA++pmPrF2Djw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/NotificationsButton-CU_XrVSZ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/NotificationsButton-CU_XrVSZ.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 350\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=adJ%2BG5ztLDsD1mRP9sQ8SbiAHErp4AbgM6Xilx7qb890f8rqlZGDyS6ZJD%2Btv3ToUTheZHyx8GHG3L7ulJaod2DTURVv1pQxV5NgsHrV4FTL8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82487e2295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"cab2bff6dda01c5b7caabeb90103a52e","sha1":"8927a4ca8e2f197b302bdd5158963815d7379fcb","sha256":"8159133786b33125a85a25c536d4cf16feb9218169a57667d478b984c398ab2d","sha512":"2241b98c7149d5813da44ce11e73d955dfed30121e694f4cb7426e82cab780c4c745b0e9583a6b272d578fbea16fcfa515c62f6f492078d2c3caf5fa73524d3d","ssdeep":"","tlshash":"b5f02647a555d8b41bc3065073379011243f787cde06548040e72cd51370067c55f94f","first_seen":"2026-02-12T21:09:52.677569Z","last_seen":"2026-02-14T09:24:23.226884Z","times_seen":2,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/if-defined-CWaLTnLW.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-Duf0mDX4.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 19472\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Hgrczv9x0hA1ZLabQr0PFpXnuDnc9QcxWAQ1xrM63c9QZwEb2vLEwQUg%2B2yJ3SUZskDamp08uJleMKL5wlJHX7dsUDNDSkxRbJUyFJNWUMQWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82499e6895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/js/fasttrack-crm-chunk-vendors.js?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BjgPl3QA5IK1JuZYhXx185roQriMTjA2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLxi%2BpvuMGnJRmjZ1MKlcyT%2BLtTsVYOBb29WQISOJKFe%2BlUYWxBZMKT%2FRU%2B9qp7LE0Lf8hzOugPa6iNFXS%2B5MPgymdnUM7BlaETaseOl3wgKeaSqVZQGDlXSPYkzWw%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 797e08d987207122bff536abc6502d6c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: rOJ0pp1xsv1sGxJzpKcXFMOhJCgHgaIWJ53CsmtYQwDU1K9PuWavAA==\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"a2363889186e23777b4b704661794f3d\"\r\ncontent-encoding: br\r\ncf-ray: 9cdb82502cb176ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1831195,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (36723)","md5":"d72176a94663edcd8e337cff2f0b3aa2","sha1":"9be183b10e22d5dd2facf3c5042ac805f70b3ba9","sha256":"5987deb26f962d8f07433f6dcfc1ae94128987c1539eb9e7f13203dfe0bdf5e4","sha512":"475c7ff90d511c39eb82fd947a0efd734365efa4a6395d3c4aa5af3ed9ee50890dac4f6a4d6b0352f6cfd65f2dedf8fe06ba8281fa1ef4245ffa6fee1784c39d","ssdeep":"12288:xF7enjH0MKs25Bg1qgn+w7b7EqGDeuPLK3c8WsIJS8oqIpCFaFIpSAJyze90iBaY:xgjH0MKseBgJn+wT8ZI3I5Z7yk","tlshash":"fb358388299ef3500957e0e7e03b2d48d12ec525f84ba8418f71d7b36ab6357e3ade11","first_seen":"2026-02-14T09:24:23.228875Z","last_seen":"2026-02-14T09:24:23.228875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":99,"dns":7,"connect":4,"send":0,"wait":143,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.26.18\r\nx-jsd-version-type: version\r\netag: W/\"13811-tfHjd44Cw1KIdX3p1sYQR+wbKBw\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 09:23:44 GMT\r\nage: 25532\r\nx-served-by: cache-fra-eddf8230135-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21347\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79889,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48901)","md5":"5ccdb5c90ca32266cf2f0dbc529a4d0a","sha1":"b5f1e3778e02c35288757de9d6c61047ec1b281c","sha256":"17c9c1105a89db5665e481ebe28fdb9367bd3f60932ba946d691cd4f63fe6e86","sha512":"c74cbfed78cd5a07d1ffe8fbb19e1954eed654aef214c9bb7c4cb1080014355da3af09c071b904e8a1dbc885d245197a403b068d3537d0168f4eb53cdd6df460","ssdeep":"1536:Jwk6ey/PIZHo+DqA55l6DbJZ8VUbzIYbRd:Ae2Iqol6Dbn8gIY/","tlshash":"e273f8916a04f03776bb45ae65d1e2047af99405fcb34854f42cc8804fe7d4f2ab7aba","first_seen":"2026-02-03T04:25:08.402639Z","last_seen":"2026-05-16T03:25:17.333694Z","times_seen":576,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":51,"dns":1,"connect":26,"send":0,"wait":27,"receive":5,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/lodash-B2ykpnJz.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/lodash-B2ykpnJz.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 57582\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sykR7%2BQP4%2BRjcz2l%2B90fvA1KaxlWKHCDGwB7Cw%2FPrt5q0ENhG1aa6ok1xk5w%2BAPMUs7LENkaC5x46DbG0hAjlb%2BySgW8pDjpAGuVrG%2F1is28Ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb822df9fe95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":164651,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34865)","md5":"c6842a63ee365c3acfe1f72ca308a063","sha1":"4dbc52f9fd6f6afae3b5e1e00ccee61cad8a96ab","sha256":"03a5c0c386bcde5ff9addb345a31b66ad332a11efaeeb9896fb1cc1f45822edb","sha512":"7fde0dcb8c25c76a112e0fae6757f1947db8c2098246bff81d9994cbc01fa9b9defd18729c770f5ce98c1b235dad96c58b6d9fbfb8ceaba248bdc94ea36c1c68","ssdeep":"1536:Q520uwaecP3RKJ3/seniln10ohXRFSNN/as/CeDwqnNdJfhjDzJm+JJ6iD6/AThJ:QgkcGnIfFSb/amjyiDPThMI5qeJvb5","tlshash":"8df3a1c835d7f0a183a7287440bf084ff23ead65a84cd054e1aae0dd7db89199277e6d","first_seen":"2026-02-12T21:09:52.662056Z","last_seen":"2026-02-14T09:24:23.230921Z","times_seen":2,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/tr-_8aK4b6t.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:46.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/tr-_8aK4b6t.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:47 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 809\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=byOEPtCwB5mGTqwdGOtYTF1ND%2BCjwA6DJJRNE%2BYXn4sIGl0UuDf%2FmG9HZFETypI88IALIfULgzFVXRzf6a605npideEa9Iz%2FkFYdd6iOd0IHgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb823a9c3895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1438)","md5":"2c9e6db0bbae2f06584f8ec90d96a6fe","sha1":"d0f5fb65b8ba7f0dc04dd0a0a2e41a0140727aec","sha256":"db6191cefa0291f71ec6b795b48497f047effddfa9941f1b7d3cf2387600939b","sha512":"7a4c2c0c28d6d3102733fcfaf95bc776bd639b4674960bc83a8c0ae8bfd0dce549d700f719d469181cd428616914622ae16f579cc7f96621fe10041477f68c90","ssdeep":"","tlshash":"8931a44c2946eaf2870159878c2f1f04f40c2b087036f1619be0d521bab09ee807eb3e","first_seen":"2026-02-12T21:09:52.663913Z","last_seen":"2026-02-14T09:24:23.199878Z","times_seen":2,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/FavoriteGamesButton-BdWkzlac.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-BdWkzlac.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 283\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgTcsj4Cf5tAdDF8mVaehKpvXEb2zYTgtsOF%2F4nu0CvZYrQJhTnd3OkMBkdkA%2F4rIB%2B7cDW%2FcOYo5%2FJQxg%2FAmL4C0KGaBg08SIS9tqeB74TOiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82487e2495bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":427,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"f9919a95214db33d32757db03b82be25","sha1":"1a777db56991716e2c1b745f81ed595950579f67","sha256":"38f4e5a0788fbd6eeb1617a30d066cb2a2294b5e982177b67ac3cfdf85d4e7f0","sha512":"d99602a241ca41360fb0ce0e7fc6de0cb83e23c9747ee6a0a11e1f8eff537742bdf03e8b6bc4ecb21796570ebca65846a594576e0afec94e86757adbfab1cc1c","ssdeep":"","tlshash":"5ce0a307904ad2f93bc717d02513c024242ab4bce748e09080d915943971467c55e96f","first_seen":"2026-02-12T21:09:52.611007Z","last_seen":"2026-02-14T09:24:23.232123Z","times_seen":2,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/PromotedProductsWidget-DA3bpxxz.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-DA3bpxxz.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 830\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=reuyZXjfNMEGPV5GIDtZm0okdP5svyCVHauB9pQ4xkFugbquMIjqfYfU3tH7YJVouj%2By5k0OBloXuaj1WxVo8T2sYL37948Uk08fJzxt%2BjCXRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb824c7ed095bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1701,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1700)","md5":"9a526a3a9c60347bc73abe851e0f149d","sha1":"ae9c7fafc93eaeeb820b06531fb76b01bf3c11e1","sha256":"221aba9eb73c3ab424d4e205818ea6af4f2ae7cf9cb683fcf1571008a9aefb5b","sha512":"9a2461afefb8c185aee2a2c22a52ab967ef34286e91d37aeb6f5a1976c6379e0accedb12aaf4539e6fbc4d248f361646da1fedc4bf58f742703ab9d9ec1c3d26","ssdeep":"","tlshash":"163110cad534a37df27d0cfc020511c53a177d28dfb589a1e0aaac06d039815ba16fac","first_seen":"2026-02-12T21:09:52.666928Z","last_seen":"2026-02-14T09:24:23.233468Z","times_seen":2,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dataspot-int-bucket.padisahbet804.com/configs/0d79a1fe51ef5514953ebaacaa376f3c.js","fqdn":"dataspot-int-bucket.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.038Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /configs/0d79a1fe51ef5514953ebaacaa376f3c.js HTTP/1.1\r\nHost: dataspot-int-bucket.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/api/public/v1/tur/partners/1022/components/2919/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.515Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/public/v1/tur/partners/1022/components/2919/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-C75pT7xi.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-C75pT7xi.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 468119\r\nlast-modified: Sun, 11 Jan 2026 06:26:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 3\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FOrYIgNGhjKTUqSnT0s8K%2BloL8yFtH%2B6JjtRi9gqJhpqlleonpfZXdZCwC0c06j9MqMyPBcwPb2re%2BuNCvZpUkpRX6CQ6gmzvlvF5biJu0oOzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82448d9395bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1939981,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1081)","md5":"80a7d7642ddbffb8f31edf1adc6c20cf","sha1":"bc2003743c20af63627e6c0cbe11ae951eb183b2","sha256":"640a19ac4be4387fad821f745a78433567a1742d7f24d1fbc0d865dcd9850add","sha512":"28c99d0d4ea30183476c852f2ae7cc3c087e9d36337454a968daff37d60404e312c51f70c9443bbb1021c14bfd11533a208cddd4ba67feede9c2d7615078218b","ssdeep":"12288:t6blhyHtjf76C93FQQrVgbTj5absfH3ZVPE80o:tHtjf7P93FQQrVgj5vH3bPE8D","tlshash":"6525a34aa6f628319223f1791e2fd4053a25890b1d88fc583b9c96545f4c83e93f6fed","first_seen":"2026-02-12T21:09:52.625492Z","last_seen":"2026-02-14T09:24:23.234776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/LiveChatAdviser-R3KXQ0gv.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/LiveChatAdviser-R3KXQ0gv.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 461\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xv5FycPufv1JLJfPh7F%2BvH%2FeQGv%2F4IloA8xekEyZWty1t1sG%2BdvHmGjTmRPz3yhwO5Mzxc8G7ehmAcbnHv%2FpSWXVt5BOY10%2FoAWXWIk%2B6SXsag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82488e3595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":862,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (861)","md5":"c3336a29ccac5102abd384f79f263046","sha1":"5792d3b95a11d722bbbb0e4a064a82a450a81ebc","sha256":"c5685c9f11e1041cbc5b179e9be5cf2cab1ef198b825905775709dddc1bb850f","sha512":"057733683b987409a7b1ee7f1787836a4ff653a817ea596380cbd1c3d45e8d81d00a727c0b199bfebd68a79d6adf28a4a835f2cde19e44c5dc15f07f9c5520a1","ssdeep":"","tlshash":"43112fa5b0c2a3fd66ab188dd76a2043600a4ea4c12d0db6807b16601a6ce1aa30eed4","first_seen":"2026-02-12T21:09:52.583059Z","last_seen":"2026-02-14T09:24:23.236318Z","times_seen":2,"resource_available":true,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":643,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/PromotedProductsWidget-DA3bpxxz.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/PromotedProductsWidget-DA3bpxxz.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 830\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JX%2B4WPmuXmaKL3NyQxfa4HsRVfAMMIlp3xQ%2BKip3alHFTznA0bMtkPkAwhGutl51Y61L%2FfDPErDCpZX1wh8U7FRmfjMwtRm2RgRzaS0dmVaR%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb824c6ecb95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1701,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1700)","md5":"9a526a3a9c60347bc73abe851e0f149d","sha1":"ae9c7fafc93eaeeb820b06531fb76b01bf3c11e1","sha256":"221aba9eb73c3ab424d4e205818ea6af4f2ae7cf9cb683fcf1571008a9aefb5b","sha512":"9a2461afefb8c185aee2a2c22a52ab967ef34286e91d37aeb6f5a1976c6379e0accedb12aaf4539e6fbc4d248f361646da1fedc4bf58f742703ab9d9ec1c3d26","ssdeep":"","tlshash":"163110cad534a37df27d0cfc020511c53a177d28dfb589a1e0aaac06d039815ba16fac","first_seen":"2026-02-12T21:09:52.666928Z","last_seen":"2026-02-14T09:24:23.233468Z","times_seen":2,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geoapi2.bcapps.org/?type=json","fqdn":"geoapi2.bcapps.org","domain":"bcapps.org","tld":"org"},"ip":{"addr":"185.162.230.7","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:47.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcapps.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 09:36:05 GMT","end":"Thu, 19 Mar 2026 10:35:56 GMT"},"fingerprint":{"sha1":"CD:00:D8:E6:1C:8C:4D:50:5D:7B:DB:D5:93:A1:49:B3:1E:64:C3:4C","sha256":"0C:B5:AF:F1:E2:51:2B:B9:9B:B2:92:53:9D:A0:F7:B3:9E:18:07:CC:EE:56:B7:A8:0C:05:9D:EB:3D:12:2D:98"}}},"request":{"raw":"GET /?type=json HTTP/1.1\r\nHost: geoapi2.bcapps.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:47 GMT\r\ncontent-type: application/json; charset=utf8\r\ncontent-length: 192\r\ncf-ray: 9cdb823accde2678-OSL\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=JvB60lSzOnvWh4fUmZwZ3FGknMNgGsMLMZpTS3qRQ1Q-1771061027-1.0.1.1-fHk2tNhx_6TSUpuib24qSH6F0Kuj0OdSx40ZIsEJCUYD9309TfLfCOUdd3o95jUqo5ax7m5yILU2Q0UGnupRA0GpCjl7GqZTye0TlzMlRb0; path=/; expires=Sat, 14-Feb-26 09:53:47 GMT; domain=.bcapps.org; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267,"size_decoded":0,"mime_type":"application/json; charset=utf8","magic":"JSON text data","md5":"2b56dde1e32f82f5d6220623949831b5","sha1":"9496a786a378f62510b9d7adf9abb9d442fdc3ed","sha256":"7149713c66c2a474e52f175428e0a8bb1f8dae647d4bade191bfaea1d39335a3","sha512":"4facea875c203cc06be58bfef5c6160ae5f7936071854aeb1ed695213859ce6ad33f00d2991797ed603ab933b9c23f469d722af81fc492a4265c4ab2f1c30fc2","ssdeep":"","tlshash":"c6d02e3d084e8f0a7f6aa29c824ee23b12762189c38a168086d6eeb0c1c6b9a7140840","first_seen":"2025-07-09T11:12:24.499941Z","last_seen":"2026-03-12T21:32:59.837128Z","times_seen":1835,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/GoogleAnalyticsTracking-BggHLP3v.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/GoogleAnalyticsTracking-BggHLP3v.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4699\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PoAm0t6t88I2FOHFSQiJA8Wux6oOw7H6SKHygtkiwsCbil%2BY0pIZFjPfBRcCvD0aFIWAdzJn4AeTp9mX1r%2Fu%2BGer6woY9WQg1Th4BTSmAg23Kw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82487e2a95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13981,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10435)","md5":"8769303a44940be9dcde3e019bf2c71a","sha1":"63fb4f5488aba940d5d2e8e4b3a7e076a4cf35a8","sha256":"e7e2eb94f84ce69a4e39f604fce348c8e3db3f565fdf2a40d7ff21bcab8e30f7","sha512":"adb5c3ac0d0064d0fdb95a18f646e157920dac6fdbe72a3e18a7c2eeefad944f6274ead7b07af3240ff737650659f0e86873e9c66d7d9b4dfafb9644290e44c1","ssdeep":"192:tMwtlZTRNRnqTdCTbxbHXCT75hrxGE0IZshp127DNhV6Wh52I5gQwpvuF:tvlZZmdCNCwEYUhptIuF","tlshash":"c152c69c32adb0b282df6054587f320bf1755910a458f480a265fdb46ef8c9f52abf36","first_seen":"2026-02-12T21:09:52.620335Z","last_seen":"2026-02-14T09:24:23.211046Z","times_seen":2,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets.json?v=1771061100000","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:45.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets.json?v=1771061100000 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:45 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=je1%2FQRxseqUPCQMg3hV1cqPGucYrOem2aON08xsdERzC2g%2FDZcWK8vZx9RY0Pq5Kuefp1z8GMC5tBde5hHvrzc%2BOmFS3Z0AN9p5zrdHEkG13SQ%3D%3D\"}]}\r\ncf-ray: 9cdb8230faa595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e4a17093b585dfd6cf886ff71f2bf1d","sha1":"197a9909a2ff152e90d3a4896e3dc566797d5233","sha256":"b481fb8c8b904e2a928348460a05631a124b5f4e26e7ff3fa9c6fb0f60c31479","sha512":"732b055bc49a1a0276316eea291126df37ce77110d94881fc16f65c0b6ceadbcb31d4d945fc49aa26f2a0372c0df9ab4297026eb99dec79471f7b4893c80d686","ssdeep":"","tlshash":"c1b0928c183984841347ecc8238d2a04c002d17f6adf0e5910032028c2e86bec180c04","first_seen":"2026-02-12T21:09:52.584557Z","last_seen":"2026-05-19T18:11:41.478919Z","times_seen":18,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":566,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padisahbet.winwingames.io/anjou-js-proxy?seal=57db31a6-b244-4076-95bc-5ec10ac25b3e\u0026domain=padiisahbet801.com\u0026t=1771061029940","fqdn":"padisahbet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padisahbet.winwingames.io/","date":"2026-02-14T09:23:50.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /anjou-js-proxy?seal=57db31a6-b244-4076-95bc-5ec10ac25b3e\u0026domain=padiisahbet801.com\u0026t=1771061029940 HTTP/1.1\r\nHost: padisahbet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padisahbet.winwingames.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vr%2BdPjp%2BhfVVv7JvXJAVBxOORziMZVDDhjt6KoyWAlgUJxaX4H0KK8gZQ5YeRUrsaNEZ9eHH16bKxua8%2B1XqFCIW3endyDbY%2BuUC%2Bwhwrk%2BP1yiQJnM8RJk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdb824d8828516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3063,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3063), with no line terminators","md5":"80f3433a8ab07d3110a1a3e394bde3c3","sha1":"ce64686f7e2eab303078233eb4e12447e93e8b60","sha256":"d1260f89b02d133372fdd34b84afb3b96b165bf80613ae5ece6eba77aead4bbf","sha512":"3cdd6599f27cdfb188fe9cfcc7ea612297f2cbb1e8621cbc8e8ad5ac21fcf3aa4cdb8384f361c28fa26efec4e70b21a85409cd7818d9075299cd705335f2586c","ssdeep":"","tlshash":"b15140586ca011f62752eb9b6aae30e9e761815f3d804cceb5207ca8fd44e25d1b9239","first_seen":"2026-02-14T09:24:23.239457Z","last_seen":"2026-02-14T09:24:23.239457Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_3193_1022_49d6b56a177f3edf98e4751406dfac25.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.746Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_3193_1022_49d6b56a177f3edf98e4751406dfac25.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/lodash-B2ykpnJz.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:45.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/lodash-B2ykpnJz.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:45 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 57582\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGn6XiAdC8Xwg2BwGIZcc9DFyQ85hNBudASKG0hJfI%2B4ECR6200bTrkQhqmGi5pSu6mkuPgICMxAM8NXeHvUEqhrMKGjCkNYSTJkoGC5Uazcwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82302a6f95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":164651,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (34865)","md5":"c6842a63ee365c3acfe1f72ca308a063","sha1":"4dbc52f9fd6f6afae3b5e1e00ccee61cad8a96ab","sha256":"03a5c0c386bcde5ff9addb345a31b66ad332a11efaeeb9896fb1cc1f45822edb","sha512":"7fde0dcb8c25c76a112e0fae6757f1947db8c2098246bff81d9994cbc01fa9b9defd18729c770f5ce98c1b235dad96c58b6d9fbfb8ceaba248bdc94ea36c1c68","ssdeep":"1536:Q520uwaecP3RKJ3/seniln10ohXRFSNN/as/CeDwqnNdJfhjDzJm+JJ6iD6/AThJ:QgkcGnIfFSb/amjyiDPThMI5qeJvb5","tlshash":"8df3a1c835d7f0a183a7287440bf084ff23ead65a84cd054e1aae0dd7db89199277e6d","first_seen":"2026-02-12T21:09:52.662056Z","last_seen":"2026-02-14T09:24:23.230921Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/CasinoPromotedGamesWidget.C4EXhwOE.css","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/CasinoPromotedGamesWidget.C4EXhwOE.css HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/tr/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 662\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:23:50 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6M4cQV4iwW0Kt21%2BNcyCtklzIw9Efe7iv9gEzzzUQW7MHTLi22C8LPfohIW363If53UK79QiDnvr8cyJaSsuNphDZQYklMVCihJLJHiZIDiQew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cdb824c6ec995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2812)","md5":"09fc6c8eb905c21c7a4d044090184cd9","sha1":"0a478ada055f03e4574894d8fd6b86ed30d5324d","sha256":"d1f596a53ce4b0c43d20611ff931c0858b5d6c4c987b2b546269e639543dc878","sha512":"6811084eefb8629224c5ae7d6806c7f2b220d131a02f0c1a0c44067d684da4c1676d4aaccf513bcca338af6608ba085696056a3b70ebd6274ca6992035c3772d","ssdeep":"","tlshash":"6451250f445b273af1134e60a2bd5ed66acb491bca3b4b7cacd86157c3096c2607397a","first_seen":"2025-12-25T01:12:57.08487Z","last_seen":"2026-05-26T00:51:05.438146Z","times_seen":291,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/71748/avenir_roman_12.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /s/71748/avenir_roman_12.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: font/woff\r\ncontent-length: 62208\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 05 Feb 2022 02:00:58 GMT\r\netag: \"f300-5d73bbd13351e\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7GiyB9zqeFFran4ceuz3M94LuI9E4O3%2FW18CvqnVX63AfTggCP%2BPDeegGNyv6P1jFd84%2BsKrm5sCH4i791nIC7qmP5qGqhURphFHfbkEqwptbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb824d2e4a2f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62208,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 62208, version 0.0","md5":"71d6caa0cd2c63e37c215f4ada537720","sha1":"0ab9ec0dfc69d856f193bce5e7e405727606f6a5","sha256":"fd5ce0629282aa77441460a01ee321520036dad49877efb19e03a3e465f2afe3","sha512":"9bcbaf7b0c6e2c9f42181b6d4761b981e32bc103cdb053c7710ba0fb741e2428f303e7496791b8df6fd1399138d1f554a2e48584d83a5020a253d8465da8da61","ssdeep":"1536:Ep5+LFsMDFLhPL54r0+C5P6I4XSiM8SZ9I07NKWh/4x:E3SyMDphPKgN5PUSiM86W0c","tlshash":"ee530235dc7d0a21fc73b8b91ecfb44ca8b075d287babc8105a468364dc91be15aad34","first_seen":"2023-05-12T10:01:27Z","last_seen":"2026-05-27T17:27:15.054855Z","times_seen":92,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/casino/getGames?partner_id=1022\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=28\u0026limit=4","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.992Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /casino/getGames?partner_id=1022\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=28\u0026limit=4 HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/casino/getGames?partner_id=1022\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=406\u0026limit=4","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.994Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /casino/getGames?partner_id=1022\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026category=406\u0026limit=4 HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/CasinoGame-DLF1BSvR.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/CasinoGame-DLF1BSvR.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/AiPromotedGamesWidget-DQlZ-xNQ.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1992\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nGNXcOksIH433e6cTs9Yblw5yxj1w4x5XrKWR1R%2FOOW02zyGy6riLNPNt3BjHVPehtDEVy1Qv%2FkvCSmGUW30l40zywPPBxrQi5%2BtiKAB%2FVHHYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb824f9f4d95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5827,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5552)","md5":"d4debb005a2b2fa83f54bebf107c2ac0","sha1":"2373c594337d76c0ead023621f356cba41299704","sha256":"210c8f3b498a4b825142ca6a8ca0081533c8241217c495d31ff20b2cdaa043cd","sha512":"ba1852aed6c90a0752453d518f50b41b0dbe45221d0979636c25d08dcdefa81b027fdf349d5df9a9af56a63d14da003890fada7883bfce7eef0c7db022d68cd2","ssdeep":"96:juytJ4U5ySp8LCdaUKZUBbiRx2VZZ9L6u/T+x2mZ97vCbeKbcFSvu:aytCU5yihd1dBrDeiKJuMFMu","tlshash":"e6c19705e020ef7db9360cca986f1029b8192fd2de194465e47da839367c11db266bdf","first_seen":"2026-02-12T21:09:52.731749Z","last_seen":"2026-02-14T09:24:23.195839Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/casino/getRecommendedGames?partner_id=1022\u0026is_mobile=1\u0026country=NO\u0026lang=tur","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.518Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /casino/getRecommendedGames?partner_id=1022\u0026is_mobile=1\u0026country=NO\u0026lang=tur HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/LiveChatAdviser-R3KXQ0gv.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/LiveChatAdviser-R3KXQ0gv.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 461\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sRaAbG7Tk653SPqfHyJLo8o9Jv2U2SfOO34T6FcvhC0qGtJl8yJeg%2F2EjcxD7UFNQnmErRSGbuZF3XnqEN9g0T6omjSlPB2SK6X8mCBZBgt84A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82487e2695bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":862,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (861)","md5":"c3336a29ccac5102abd384f79f263046","sha1":"5792d3b95a11d722bbbb0e4a064a82a450a81ebc","sha256":"c5685c9f11e1041cbc5b179e9be5cf2cab1ef198b825905775709dddc1bb850f","sha512":"057733683b987409a7b1ee7f1787836a4ff653a817ea596380cbd1c3d45e8d81d00a727c0b199bfebd68a79d6adf28a4a835f2cde19e44c5dc15f07f9c5520a1","ssdeep":"","tlshash":"43112fa5b0c2a3fd66ab188dd76a2043600a4ea4c12d0db6807b16601a6ce1aa30eed4","first_seen":"2026-02-12T21:09:52.583059Z","last_seen":"2026-02-14T09:24:23.236318Z","times_seen":2,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/BetslipButton-CiR__ZA1.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/BetslipButton-CiR__ZA1.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 283\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bTaft8LXi1Syt1KbkPhaZ1xy5CQM8MZ6DMBH9NM4AE6wXRefTAHTvlKi6WCiMR0mfNXugCy1QyOooCN7NM8volmRJBAmaVSqILKTDYmRVqxFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82487e2795bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":418,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (417)","md5":"e55dfa16372e45cc735f245b352d713d","sha1":"c47d7ff257b4e770a1a5b5b49902374d1cbf10d6","sha256":"a071304bb6e8713bb7d122406f002d2543eb6e3339894f95f1500d5d3e9ae110","sha512":"3e81f0623c870d348f7a73d6085a3c3f419f6ebfce791850b504050362354ba1adcf5f60ccfbda57541f54b034e977ccc542ac0d6f243e91068b89b8cb930853","ssdeep":"","tlshash":"33e0f1878949c2fa0bc609c131028221342769fca344f491c0bd2de23b74996c45fa7f","first_seen":"2026-02-12T21:09:52.634939Z","last_seen":"2026-02-14T09:24:23.180268Z","times_seen":2,"resource_available":true,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"header-iframe.vercel.app/","fqdn":"header-iframe.vercel.app","domain":"header-iframe.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: header-iframe.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3629\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\netag: \"c448d041d2a7bdceb35286c2775e16b6\"\r\nlast-modified: Sat, 14 Feb 2026 08:23:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qd85f-1771061030036-a621fde54835\r\ncontent-length: 2260\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6508,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (419)","md5":"c448d041d2a7bdceb35286c2775e16b6","sha1":"46d1d09f9088b248f8b04088535caef558170136","sha256":"68b6d5705849188eb2318a4909e8aeb10dc0f9d47e41fe672769775fba59133b","sha512":"d3b57747a7b6d39a423bd9004f250f98ef7fe89c9388040bcf313799712fec0926480ede7f9100198068748615f1a8b8aa5fae7ec91f303d139f5ffb9bac0e6d","ssdeep":"192:urjRIG8D0nRk/RiDaixeQ7fUW0y+PGfpgjXeOTyaLv2WUCWzip0U4WnM4AMcta:ur9IG0R7v2NCzDRc4","tlshash":"46d1c74fc1930411512746919bff3709f439902bd402ceaabede5690cf0dec447a1bae","first_seen":"2026-02-12T21:09:52.697903Z","last_seen":"2026-02-14T09:24:23.24184Z","times_seen":2,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":76,"dns":61,"connect":1,"send":0,"wait":10,"receive":10,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/casino/getGames?partner_id=1022\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026limit=4","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.991Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /casino/getGames?partner_id=1022\u0026lang=tur\u0026is_mobile=1\u0026country=NO\u0026limit=4 HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/userJWE-BKTDW0tM.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/userJWE-BKTDW0tM.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/FastTrackTracking-YZUMgKRl.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j2GaUJ4ThHZ2WzmzjyeE3FJgL6iQobs74Q8Fad6nTncxAnX0HQYcKc42YBan9I4Hx46YdpNagmMGtYadIMUYfVSKXi6c9BT9vbCIhIx2OgE5aQ%3D%3D\"}]}\r\ncf-ray: 9cdb824d9efe95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text","md5":"b13936be56673374416cff69516fb5c2","sha1":"281c349087db341076334b8cac9f2f51e9d073ed","sha256":"adc14e213ffb164e40aa2f2e4b737c51e2a5690584170421628adcf1951e7469","sha512":"3b6531c07bd6744a5e9d21a9283f056a72425aafbf781332d5fb4ad2f3577d120988803716dabf9da94afb467164f3cb0be4175bff03709dbf243b7699a6b7c3","ssdeep":"","tlshash":"a9c0c0db0cc411f7c5582c801015dc13c230391863d8d3825b0c93ea7b5100bf20ca10","first_seen":"2026-02-12T21:09:52.758847Z","last_seen":"2026-02-14T09:24:23.216719Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/avenir","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://header-iframe.vercel.app/","date":"2026-02-14T09:23:50.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /css/avenir HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://header-iframe.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 2008166\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 22 Jan 2026 03:34:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGYxdZO%2BSTBiSpqzyZyUehCXRfyKn7kfn0j0Dkqf5TxRlEWOAc2EdmCwpZa7x3i8EoY0pv3MMbpBuuzSFqjdQTCqQnfUJjN47C%2BSVJqZ1z7b1g%3D%3D\"}]}\r\ncf-ray: 9cdb824ebab51f50-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"73994015c3211ddb4141a8c2184faa15","sha1":"e81f7af4741a814126b3757a6b3ac38df5c134a2","sha256":"fc2d2df6e28ff97213346ba46a761eb462c08dba26aab906e30c7d1e3eee6e07","sha512":"a57b7fceac15f5e6f87b4a9c863fbdb5977a02c555762246e9cf9f41cbd6addf3d7e7b36b0db5f5795cf89ea86594ec986d214a24932d51f13a9f34423a5574e","ssdeep":"","tlshash":"efd01253589b6c4066300cce771f6a1a4d4f104b200ac5553bbd2d049fe252542c173e","first_seen":"2024-12-10T11:41:33.719624Z","last_seen":"2026-06-06T02:49:48.677841Z","times_seen":79,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/FavoriteGamesContent-Bs2efduZ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/FavoriteGamesContent-Bs2efduZ.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1187\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z4a1JmwlWZcPlQVWmPLbXdN%2FNT4VYu0hg1Oxx0%2BfmmslSB%2BQ3dnY7iUXtVuJ73h4zyFzAeobJBeix83L7qLOj9d9cKbtYf14yrkgt2%2B4vQj8vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb824eef2d95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2827,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1710)","md5":"7ff9fb905fbd76406fb3fe56778fda67","sha1":"95e5991cd8fb3a8ce3b7eca2f8209d3444400f1a","sha256":"50d15e490b03e1b796dd12cf890123efee2dd09c0e3f82a771573266d7d3c70a","sha512":"a9420678c99b688b97c3d7b3354a2f70d183845499ec6a8798b3a106d130fd4d99445bdcb196a2b0a4767ad9ab243d0ac203bd2c6f1aea79f56e9e25fb3d6777","ssdeep":"","tlshash":"dc51971100415ffcbade9ed96e2a80a04c76074c5146d17dae799f7e3029a507137ff9","first_seen":"2026-02-12T21:09:52.687425Z","last_seen":"2026-02-14T09:24:23.169727Z","times_seen":2,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/wc/rewards-main.umd.cjs?v=491961","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /wc/rewards-main.umd.cjs?v=491961 HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Thu, 12 Feb 2026 11:25:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: QdEgwaen9PlC2wurXYHZ.Lk754H4sp6S\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2B36PQiK1iuUQUzDsyVPrezwvMoTqVHMmPf1GfK7pv5VOr6pihMaWk5Og%2FDDbMN0QLPEedq4PR6fqxJN5m5mwtnw%2FBMusaLo3YmrRUP1f39TEMM6xnU4OeQF1ghH7g%3D%3D\"}]}\r\nserver: cloudflare\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 f3eb7b5e20267dea293dbfae056ecd62.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: BHagRAqWCYRzcGhh2OB-f5NslfEr_okyyO0mkDrKMhIaWf_q-zfY6g==\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"b6680b1845a2a5170d2004fdcd6056f1\"\r\ncontent-encoding: br\r\ncf-ray: 9cdb824ffb8d76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":951509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35724)","md5":"b6680b1845a2a5170d2004fdcd6056f1","sha1":"b743ad736be425098af82bf4c6d2be444f17af3e","sha256":"c180b54bb91629142dc5ec4bc8ee716ee0a69e90fb85b2f96aef958b6309f51f","sha512":"1c8162e833149151755f982653ac2aba12a9a3db8a15c0f66561baa11946583e4f117f7b16b8d875f204392a27d2ca4d96458929c623501338ef52de719dfddc","ssdeep":"24576:cl/V6m/dl/W7q8iNDePKHQCQr5aVbYrEN8L5EnAql/fR263nBP2n:clN6m/dle7q8iNDePKHQp5aVbYrE+L5H","tlshash":"b6157c9072567434c3b795a160be020c723d5f42740ac598f2bc99ea2fd789662bbf7c","first_seen":"2026-02-12T21:09:52.574579Z","last_seen":"2026-02-14T09:24:23.244378Z","times_seen":2,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":68,"dns":4,"connect":1,"send":0,"wait":151,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/flags.png","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/flags.png HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index.D0Lg3jkJ.css\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 94974\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:23:49 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bNwjZocmZz0fBf3YrZAAXrViQD2I%2FohFkNCf0SSx7MY0y1qC5N3aUDgNy%2B%2B8zSTSn2eZrhOwdu24q7IaIaJ1Fd6zHraKcr24vfnWtojCd4NkGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82482e1195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94974,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 17960, 8-bit colormap, non-interlaced","md5":"02c3b5af3d0ec1f21c51bf21a22241e9","sha1":"c39c097d704c754294e3fbed23b80e502054396e","sha256":"1c0578c469db9a3da5c0b6fa0258f99b2a2ac602d0027ab6fcb7b218c3acbb75","sha512":"bb097e3532e83aa4db8e8dd7cd16d95d83ae77f4cc19207f04f3b929ca695ebcd7f5730e9ea888763108c95028f40f81490a03093ef8d57665c6f4393091dc63","ssdeep":"1536:wxq8h3gUrI89XxfLcduXa08ucH+te2RIr8T8hKdPzgkjM+PDRzSKR2JLDpzm5NLX:Sq8h3e85FquXPAeExk8odPFg+tzSKe3M","tlshash":"509302ab06de36c6e10b2e9408902d3c720f65fdcba545ad497cc743d8e5a68d48feb4","first_seen":"2025-12-12T09:55:43.277784Z","last_seen":"2026-06-08T11:36:24.208609Z","times_seen":817,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/LiveChatInc-C6OuKUDo.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/LiveChatInc-C6OuKUDo.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1142\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kDnuuY8JbaG3Lwaq%2F02dc0DoP8QSWDwwCs35WxUqSo1XdtzMASvKExTcipwLHlwm76hZLONjB0pT1l6DzXyIAVrl1%2FKHAMMNfd%2BJ2Q4NxZEV%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82488e2e95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2920,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"58f629a6faddd3fc72278baeb983f1ed","sha1":"515f595d7642c8aaa1243ea7fb899cc1dce26d80","sha256":"3671644581febe73702157ece06c008d325cf5b0172bc627065f12a32ac3f614","sha512":"f9a978a4041e17e623a4a029381bb0caca5d9c4f6276ab1e753eb8aa7eb982690c5f36904e319fba4ddc8026ceb1c58d63ae2572af797c204a5a49238404c1c9","ssdeep":"","tlshash":"045132dec03cb4b092aa67e1323f7b4f7116671ad4048c31656c4b0af22a4cbc163aca","first_seen":"2026-02-12T21:09:52.594294Z","last_seen":"2026-02-14T09:24:23.128814Z","times_seen":2,"resource_available":true,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_17866_1022_6fa5d80a383b93c70e0eccc6224596ff.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.741Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_17866_1022_6fa5d80a383b93c70e0eccc6224596ff.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:51.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Lato:400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 09:23:51 GMT\r\ndate: Sat, 14 Feb 2026 09:23:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ae317c913d9f17e384174fcac1e95f49","sha1":"97048ceeff296795e17fc282e38d26d44fce8bad","sha256":"0250efe84de4fea78b47bed1e3367687b72cbad25fa556879acfd9adf33f6b24","sha512":"3be7c2d8b49c8ecfd8fbe46e0e57aec92fe696894da6243f6b9f0052461f28eaff9b6974068276cde565287efe54a8a16379b21a522dfaaad925fa38215bfcc5","ssdeep":"","tlshash":"ee41ce92096fb908db830cc212c97d32ef0f625064499935afff14d8bca7d699362b0d","first_seen":"2025-09-17T17:57:20.126253Z","last_seen":"2026-06-08T09:49:50.571001Z","times_seen":7396,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":116,"dns":1,"connect":21,"send":0,"wait":20,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-C75pT7xi.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-C75pT7xi.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:44 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 468119\r\nlast-modified: Sun, 11 Jan 2026 06:26:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2FLqAnsNZlrggj0xobZ7nr0UExgNjuDg%2BVMp5QgaIos9AHf%2BI9HA7p%2BXNi%2BKW5G0Lb5Q2IYPcdZuN%2FI9jTup63G97IQ5%2F6iO8BT3eX31Ek%2Bpow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb822918fc95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1939981,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1081)","md5":"80a7d7642ddbffb8f31edf1adc6c20cf","sha1":"bc2003743c20af63627e6c0cbe11ae951eb183b2","sha256":"640a19ac4be4387fad821f745a78433567a1742d7f24d1fbc0d865dcd9850add","sha512":"28c99d0d4ea30183476c852f2ae7cc3c087e9d36337454a968daff37d60404e312c51f70c9443bbb1021c14bfd11533a208cddd4ba67feede9c2d7615078218b","ssdeep":"12288:t6blhyHtjf76C93FQQrVgbTj5absfH3ZVPE80o:tHtjf7P93FQQrVgj5vH3bPE8D","tlshash":"6525a34aa6f628319223f1791e2fd4053a25890b1d88fc583b9c96545f4c83e93f6fed","first_seen":"2026-02-12T21:09:52.625492Z","last_seen":"2026-02-14T09:24:23.234776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-DAR-PkJu.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-DAR-PkJu.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/WagmiConf-A39JFnij.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 58498\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEoSovG1UOC0fQPKk7o5JoJy%2Fwv7VbFMO2DwX3vZgCnadxcRhciGDAN1DR%2F2gTgvY6KxOk70S0B5RcX%2BML0GZnawXR2h62iyeLRWxIZncO%2B1ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82440d8395bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221144,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37523)","md5":"416071668a4412b0cab0d01ebfd63416","sha1":"a40ed3f48c7ace3dab59016948a4fbd950f013b7","sha256":"2ba6a2c41098d31ca356ef0617cea5a36a1c92e5e358c09f2a8b52a0e50ceebb","sha512":"c73f062f66024b79d841e98609a7aac5a92441d63eb9fd488592ac5d7a04818dd8ea9ed38af9271f418cf9ef648dbe6207920c8834f81a7e0775303b4b129a9b","ssdeep":"6144:/feL9y0h4R78o8e4YHIALoh6wj9Sd51jjVvFaxIRcDGRD6On:/mJy0h4R78o8e4Yo/j9e5xaxIFROQ","tlshash":"9a240ac4b274b0a556e594d4502b1201f1347c56b00d80e8b6bd9dff7faa88d92eef3a","first_seen":"2026-02-12T21:09:52.665211Z","last_seen":"2026-02-14T09:24:23.143285Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/events-DGycpgSD.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/events-DGycpgSD.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2034\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BAeq1pngEVh9djSMxoVbuLs3KBVvZCACeRU8InmWFP6ZEhxI6Lsci%2BRIdcWiJojZ%2BHi1pkL1h4n2d5cOKhKM3lyQqQztjYhztao%2BLWTzOCLEHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82448d9695bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6141,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6140)","md5":"2c2d1aba64f2ec39e8ccadfffba377be","sha1":"b760045fa3fff4c67d39c82d7b8c7c1d8b60a662","sha256":"e059549e26e71dad947f4444e07bcbddec30cc27cdf28f8cf4085d1002ff7fcf","sha512":"fec61a002b501439777aa9fbd58ae4e03933a1c17655786b59ba1932b966f369a6ecf185a455e37e7ec779ab36ed3c486931ae0e8e3beffa64f50ef0b5cbdfed","ssdeep":"96:tRd9bkM29yWHs9qYfoJCOoRLRlqSpbDq6v3WZHbK3hMSNPaVqsVqH:tR3IM2sWMtBq6n3PzH","tlshash":"f9c143ccb38574b013e7d3abb07f520bf134a598740c5108b61aecf9696bd9a4126b78","first_seen":"2026-02-12T21:09:52.693658Z","last_seen":"2026-02-14T09:24:23.148033Z","times_seen":2,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/InternalDataspotTracking-CCL-ross.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-CCL-ross.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1469\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uvJTxN8v4xheDVPFrsoDQviiN6D0Ra%2BcwggbskLZoIJyH8hn%2FW9BYMzupLdNFUm%2BMjOI1pnImza1UIRz0Ee2agvvHT9pyZP%2B5QeGvsMzpvb6vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82488e2c95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4012,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4011)","md5":"aa64f56221103e57d49f5599c4a8aa69","sha1":"5ae2681e283628791bc1adc563efad2768c68fec","sha256":"e1831c14ddeb3409bf6b8a5872e2a472a89f0b8da0bdc4cf5af7cc3d3dd7b6aa","sha512":"caf2d93c16b7768f1a6e6e1d10c2f5f68b52e0a5260b32cc3f623000d416f34e9c981401f963090ebdc6ad748c1233eb26a818e46b767550125261536eea7734","ssdeep":"","tlshash":"6d81841fdc3c08b0b060cadc5837d566856c3c96a690dcb060378eaa621fe45d7f6e97","first_seen":"2026-02-12T21:09:52.763203Z","last_seen":"2026-02-14T09:24:23.249387Z","times_seen":2,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/withPanelButton-Dloim7i1.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/withPanelButton-Dloim7i1.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/NotificationsButton-CU_XrVSZ.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 512\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F5DWoI7xFSQYtMqtKx8fcD4K%2BhvjwfEhW5S7%2BEC9CfZWjwQyVmdJ0MmBbZT5ZcUt3PJAX39JnRBvu1cycbOkwIfivprZwil5Ul%2FB2O6wqZf68A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb824d5ef195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1088)","md5":"ef65121ec98a2473a86f9af94e614d64","sha1":"79d256cd63e311d01fb8d34afdc0542e9b162af7","sha256":"7e01b026fcaf01e33730f5ae46cb025329160ed8967d757ca24460ad1c06c6e5","sha512":"73d454cb8fc55f79b1e9965a2aba004a33ff347a9f8a3a37f3f4fd36082faca671b6237bc6dd346ed12f8a59da2f4cb6b0a7ecd6ababe73e8f65955680325a3d","ssdeep":"","tlshash":"3211f0f4f580a9f2e4c41088577b2cb2319a32c9dce1049021a6c8e91fa8449965e9aa","first_seen":"2026-02-12T21:09:52.7015Z","last_seen":"2026-02-14T09:24:23.202085Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/api/public/v1/tur/partners/1022/notifications/whats_new?platform=1\u0026country=NO","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.562Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/public/v1/tur/partners/1022/notifications/whats_new?platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cms.padisahbet804.com/storage/medias/padisahbet37/media_1022_b1b8bf0eef7c88a787b863fd9a44cadb.png","fqdn":"cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.732Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/media_1022_b1b8bf0eef7c88a787b863fd9a44cadb.png HTTP/1.1\r\nHost: cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padisahbet.winwingames.io/img.png","fqdn":"padisahbet.winwingames.io","domain":"winwingames.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padisahbet.winwingames.io/","date":"2026-02-14T09:23:50.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winwingames.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 19:47:04 GMT","end":"Sat, 09 May 2026 20:45:41 GMT"},"fingerprint":{"sha1":"5F:A1:45:1D:4B:B7:61:A8:B4:5F:25:27:8B:2E:35:9F:B2:AE:4E:72","sha256":"80:69:5A:6E:C6:E7:5E:F3:BF:B1:27:9B:EC:BD:81:46:6D:C9:B0:59:00:CC:90:C4:6D:BC:45:CE:D4:38:E5:01"}}},"request":{"raw":"GET /img.png HTTP/1.1\r\nHost: padisahbet.winwingames.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padisahbet.winwingames.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nlast-modified: Sat, 14 Feb 2026 09:23:50 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jAl%2B%2F5tQCBwqM9M9QQCkoG%2BsZPNFGa4fY7dqnVZLLaLKor9Iw79yNYNDSdYk%2BWMdNZRMK9MRpqXD22k3%2BG%2BoQUviKEy4NXQraFT4pa%2BSausfVj5wybBRGiQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cdb82522dd3516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"2ad3a45d82e0940f4c3dc90088721bdd","sha1":"a85bbcda89334914c332b2315aa94f32c843c867","sha256":"bdeff9d8a5ad9b3cb7dcfe91fe91080359bc5a836d18d2f78e1d308c412d87b5","sha512":"06a4f493c0b3fe9ca7ecbf17347ce0aab1e3447c4c62e2876b945fd13f40140cdf11b66e8a799492d8709ba21ccd90c54c7c5f446370bbc7e2579d0b0477360f","ssdeep":"768:VQRzoYMic5jrKBzf/csKDh/GxEsBJWnO2iPRvzLsiWY:KpMVjOzcPVOKJn1iPRHx","tlshash":"3ed2e12fe1997b7a550136f649372eb5124b0e5a54c3f878c31c68a8c217b08cef5ab9","first_seen":"2025-12-24T22:39:16.249591Z","last_seen":"2026-06-07T06:35:51.678608Z","times_seen":78,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-Duf0mDX4.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-Duf0mDX4.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-Pb0kLhjw.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 39025\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gIgYwyGwd72TbRQb%2BNGKhj3fl%2BAwl1ELYmJyPoIaI9FkY52l6UpW3b6KcDJk%2BwekZmnONvskDuvTYMHvR8yHzXigFLc4RCJxdWdac9MzqNsinA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb8244edab95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":157556,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b55f8290681601bbc6c8c90e7a47df59","sha1":"1b60a5c7eca5fad708dc007d466eea7af1569ef6","sha256":"bf8905992c41b7edb8144673aeb5bd2886d3505e8f6dfd41975b94be2902f482","sha512":"ba7e2544fc515daf634f0af2694f927ecad54f557c569cb0748648a98e24734ac0395240f77bd8ded812f1b39d3998bbe7afff1544b01c7f31cf80ceaad9ac4c","ssdeep":"3072:mEwaIFmmU4Hxsu9jbgkqJFHSWotoOwhWBx9/F1FV:JwhFHU4HNwFH7MoOWexZFHV","tlshash":"59f34ce063b4e17db603836e97e605e0e21cb444f729c0f4b6ed87f540c3599deaa629","first_seen":"2026-02-12T21:09:52.64838Z","last_seen":"2026-02-14T09:24:23.178277Z","times_seen":2,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/localConf.json?v=1771061100000","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:45.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /localConf.json?v=1771061100000 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 1362\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXX0VoG%2BEQmtdFVbpXXoYlzL5cXPoPjU6Tb0VU89OJ1HkwfXj1w7T4l9CJbGtYXjFcIDy1AgaXLoJ5yL%2BDFSZ3HjyudnpuzCHU89kQrGKbOysQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb8230faab95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6717,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ff02c6fd1343ee37bedd3df32fdc4611","sha1":"e7c19c1abb278999bfd34fb3de9c8ab02496c972","sha256":"6bd5ebda3d8f250ac5db86d9e49b0d47d917353292407045528d61113087388f","sha512":"1f963a8d7dfa49ecd217ee3e3132125e8b8a0705bf310b60991b1ba97f643762df17d589589c6d186b122ab9048250a8375e902595b8e2632c5d676c15dfe97c","ssdeep":"192:IAaAI9PQa0XgwAooSG53jd2ScN1de3jScN1de3YScN1de3YsAjgCFzARP:u30XgwA72MnMaMSgCFzAx","tlshash":"3ed1dc1f20098efed36d65c73d9b375f24a18102d2ca0d19d8bcdf284269f54552bb5b","first_seen":"2026-02-12T21:09:52.717103Z","last_seen":"2026-05-19T18:11:41.217002Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1047,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1047,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/favicon.ico?version=1767848412674","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:46.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /favicon.ico?version=1767848412674 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:46 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 2377\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 21:08:12 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 130533\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRodWOsCDKwzSHFD3dPZTv8T%2FtECu0Fzu386BQccK6nKBeX86zjrvVX6x2Ppb%2FujurKRgwlosifzzIyhpN3EkD9rrW7FM3vG01Yo1Jg%2BhwkKyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cdb82373baf95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"f705b28b430f28c0b5f88d1c292fa7e6","sha1":"14acbbf38727ce76559666f8c2c8ba632cde339d","sha256":"8281e1a0d6d78b448614521c38613cdaac0d28eea5a875b7434d1ba626ac8fc9","sha512":"84bb056d9458abc8b2d973d9b9933727796cee37f6dd9bc32db6e0244d5cf402cbdec6a141a4046f76787f74192c609b959273948c87e8aa8a15be051a6d1901","ssdeep":"96:DuV54GXvWzdSSbj6QsQUTk8JurwxDItsX84aLLFFU6RBl7skoKNB:D9GXv4sHJugMCGxQKn","tlshash":"0d9121e9b841864bd88544b420ad71f683ab8e96e0d952136bc8382fae7cfc74706147","first_seen":"2025-11-18T02:25:29.642613Z","last_seen":"2026-05-04T14:44:20.802811Z","times_seen":27,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-Pb0kLhjw.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-Pb0kLhjw.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/WagmiConf-A39JFnij.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5863\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MkaT9OhQskJL5ylimu%2B%2B3W0mUuozFJ5pd7xf6r61jyRlk%2Fs8zI961leF1i4gSv5Lp4L4n1Uo7bz9cD7si5YqRq7FpUiMN7lyLNCA17IWbeXgVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82440d8595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18027,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17806)","md5":"6a84aa1da1a71063830bdf2e881ef454","sha1":"34f58120ceef75932032c0bfda06c94d3130c181","sha256":"5854246759af34b1ced58c72085fac024406f1bc4c841d10085dd1c24e5fa547","sha512":"6791df393f7e75afbd78c96fa2eea557a39cfb3b4c4b1f94e404d176ba1cf4b8c13b4aede1cc3632bd12b0d6c87d99009c4f4eb414097edc5d3cc9a1b58352f6","ssdeep":"384:dhxMci40qXFFnJImIjE3QEuAOY2E0/JqNPR3OUFxmZ1d33PdEkBcxJ0:dhxMci408FFnJrIjE3D/OY2E0xqpc1NV","tlshash":"5982fad0e3b4f7a642e86add80392074f2248c28347dd0f1b6b6edda70664ca856dd37","first_seen":"2026-02-12T21:09:52.656149Z","last_seen":"2026-02-14T09:24:23.172312Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index-CjSfBsBO.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index-CjSfBsBO.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 937\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oa49BPiQDHjyEG94tf147o3feSmTZkmMDbDkCm2qjprNklpwdCRouA1ARaELlmUKajHj8y4U7YaM6UG9wcLr%2Fblotw21vNroDnXwlH0kHU4BPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82488e2d95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1281)","md5":"7b4a4bbad5c5a6f160ef0669023415e7","sha1":"4553d91dc7fabe659f52f9d337504dc9f0e0cb21","sha256":"f2f06f2521b54be5af175ea4d2c71933defa31b68b59321c2b0aea2cb5b4a169","sha512":"1f1d9541f5754254b899661ce589d667f61a5f29fb4285d49c6fe96aa73408c48c37c392292d348d0106b0cf118dc8b02a9f7cd91b6252f89277483f91ce7c44","ssdeep":"","tlshash":"085152d63e929cb0529681a52a7fd2593163352ca104a470feed98986f20e47c902eed","first_seen":"2026-02-12T21:09:52.684155Z","last_seen":"2026-02-14T09:24:23.220187Z","times_seen":2,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"crm-lib.fasttrack-solutions.com/lib/css/fasttrack-crm-app.css?v=caaa61a","fqdn":"crm-lib.fasttrack-solutions.com","domain":"fasttrack-solutions.com","tld":"com"},"ip":{"addr":"104.26.5.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fasttrack-solutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 02:49:52 GMT","end":"Sat, 25 Apr 2026 03:49:32 GMT"},"fingerprint":{"sha1":"AC:2D:A6:7A:37:80:2E:24:CB:68:71:7C:86:FC:30:1E:1E:D5:AC:5F","sha256":"BD:5F:72:18:CF:A9:84:64:5F:E2:CB:09:75:97:03:8D:AC:00:57:4C:64:66:E8:35:8B:BE:B8:14:A0:84:32:AF"}}},"request":{"raw":"GET /lib/css/fasttrack-crm-app.css?v=caaa61a HTTP/1.1\r\nHost: crm-lib.fasttrack-solutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 11 Feb 2026 13:55:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zbjvR4XmwNBIJlxjEvxcm_sn.IUZfztx\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqPHpCBRHaodCFoWI%2BUTBiQEOZnHzWBJ2rGZgseJtRsJJawHixxNCPwKraUU9o54KlJ01jNJIiMe%2BtZwyBOOSR9BF%2FdCTi94teo1APwrqvon0ks3qSFvWBGU6ppsVg%3D%3D\"}]}\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 419f3eb3d74bedebbef6fc91b3f54a36.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: U8-g8Vg-Wu9suHVgEbcEwqQ5V6eBUbm3-AUWViuRg-rMBlCVSKMtHw==\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\netag: W/\"7906aada543698dba1005a917ffae2a7\"\r\ncontent-encoding: br\r\ncf-ray: 9cdb824feb4276ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":27953,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27953), with no line terminators","md5":"7906aada543698dba1005a917ffae2a7","sha1":"7f00d6655894909587fe280ebf09bf57f66b4100","sha256":"5e2a69854668603fcd556f0b8a3da306e3de6d5ad4dee7a9e9a57ca998269d76","sha512":"262f19709cde3e7abb7bb6d9724437b042fe626636083b80376e35a91d1ea9b39aec82463626711cb60a8c516a1b909d53aac644f056e77929e736fed6d1706b","ssdeep":"384:cFukqharVUf5rKbHWkAB1MG4TmpcHyH3XHZw/XNPalHfI:ckkqharVUf5rKbHWkAB1MG4Tmpc+J6aO","tlshash":"78c2442302c02288ac2b892b73d50599d93ec836651b6dedd7433955c7cb77e3a6b34e","first_seen":"2025-10-24T22:03:16.572036Z","last_seen":"2026-06-06T23:43:56.076642Z","times_seen":141,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":60,"dns":1,"connect":1,"send":0,"wait":586,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato|Lilita+One","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:51.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Lato|Lilita+One HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://crm-lib.fasttrack-solutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 09:23:51 GMT\r\ndate: Sat, 14 Feb 2026 09:23:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2f31f582a62929942285136edb852eb4","sha1":"ade05009e3f52242452d23f325d0d60eb2f4945d","sha256":"86d1d33f6f9e190954cb9cf8f930c7ce03e60bb102b64f2ce0baab352285acab","sha512":"2e4b5ff5cb64ede4c3e63e2477f156c55597e1c3ddd83d888fd96c66bf7cc6716dcf522fad19cdde2a4a564f530022feaff488500797d01f3673e52e295ddabd","ssdeep":"","tlshash":"6e31bf92097ba80497930dc212ce7d32ef1e62406845a825afff18dcfc67c699362b0d","first_seen":"2025-09-20T10:36:49.753015Z","last_seen":"2026-06-06T23:43:56.083256Z","times_seen":146,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":69,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"eu-swarm-newm.padisahbet804.com/","fqdn":"eu-swarm-newm.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:24:02.050Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: eu-swarm-newm.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://padiisahbet801.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: BL23WMF5EW/sOpJflgs14g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/WagmiConf-A39JFnij.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:47.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/WagmiConf-A39JFnij.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 33241\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnBeStk%2F9ExWNG6vNTHivph%2FVqua0ZeHXq5QrEzakq%2Bm0V0HByQbk6NyOKqzshnqIQlH%2Bb6jp04%2BDkjU3XoKAlFykXv4UzWSxy7b5gVaJwjI%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb823cfca995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100979,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48215)","md5":"39f279cc9b9e6f0f0686ecfc979bb58b","sha1":"61e519b19569be622f0e57a1ae9f20b3c54f3e6a","sha256":"cd446851272c55ff37e9c7a7f59356432dd0c94894560cf00cff717c68b92e93","sha512":"f9f6872b08832709ee1a753e65d3a7136eaee6b884dcf3fdefe51f58a58100c57412d4f87f34b12f32d6312c5afe2e3eeaf2dbbd7a5a87e11cd2ae517f3de046","ssdeep":"1536:CYj2Caz30CdwD7ZajZlOxjMij4Yx6uxO7kaUhvFSEy7XUF3waG1RGYBsEUt0s5Pa:iCaMRx5xO7TUqYEUZ5PUR1K/XGl","tlshash":"f2a35ad07196b46103a74ae008bf440bf139ac34200e565cf269ecde79b96e99277f7e","first_seen":"2026-02-12T21:09:52.643492Z","last_seen":"2026-02-14T09:24:23.213482Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/e30d09fe-c0dd-4b61-81e2-d6dc09eb9700?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2472\r\ncf-ray: 9cdb824c2a62723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfSFghIByqO-qpSeiAGASfCVErfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=17+5 c=0+4 v=2025.5.1 l=2472 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9bbc32ce28fd80253987f2e1f0be287","sha1":"ac50a6c9aaaa9a3fd32f610e9858fecee25be6dc","sha256":"9b9632ed8ef4f6d25483053b956d22184ee488efd3f8c22e0ef2626b974475cd","sha512":"5863d7231d17d3edf58896ef5332bb631d9a5c27d06fb934be7653a6847b8918e92ccb66090e97c8b96f5bd51b3c9ae112d2c4eb9407cfe8f617da98ea3d3dd0","ssdeep":"","tlshash":"f8513b2e28bac5e8bedcb4ce2f90883a3283b7511ad4c45552d80854e35fb41a1db0d8","first_seen":"2025-03-01T08:57:15.902828Z","last_seen":"2026-06-08T18:05:25.25864Z","times_seen":2666,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_10423_1022_f6fd52f2a77b8b5728415fd1116054f8.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.744Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_10423_1022_f6fd52f2a77b8b5728415fd1116054f8.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_15779_1022_5c67026be78f475b7040afbb27b22ad4.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.750Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_15779_1022_5c67026be78f475b7040afbb27b22ad4.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/InformativeWidget-BQZOZXx0.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/InformativeWidget-BQZOZXx0.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 570\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrR%2BaXALeQeTAHylmVCuIEPHTXZbHFZpDLUj3%2FIFH0VCtLCfD%2FXlASEZDAsJgGzQN9qWxxtmJ9AFKBGX0gjnXCzYXTI1zK4cMsmmyYvbUfQwiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb824c6eca95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (1020)","md5":"08b0a016532cf01e03b37b17a2168850","sha1":"eaeac0ee3088429323920adb0915548f969ef60a","sha256":"bf6b146d786e759c49d5f942cf745af9cd7d5f5c6366b28c2d681301338ac664","sha512":"e0408a2d64b69803d31c22f4892f9a98766427497a04237cdc5680421d834c4e26d7a7f416829318724efa75c5b7ba9c82c92d90714c0bedfa018386daff1815","ssdeep":"","tlshash":"84116581e291d63ef06604c84716505465227ed8cf38e8fd84623008d474d0ebaeafad","first_seen":"2026-02-12T21:09:52.597015Z","last_seen":"2026-02-14T09:24:23.218285Z","times_seen":2,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/custom.css","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /custom.css HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 10920\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:23:44 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4aqF%2Fe0ZKPo8LgUose96DVy9UjvzWd37CJfSG6yxkNG2WX4I4Fyks4sKEpR%2FwNUPOMPRfiuT2aTDd9pLvID7ceah%2BwR11JcUeyQeX3pdkCbjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cdb822908fa95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":46769,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (4058)","md5":"e24628618f953f40cb1a70984894940d","sha1":"24edc73c8e3b0769e948ecb22b1a43cdf3bd9613","sha256":"31acf9352e0e7fa3bd7de57fb15e6ac1dfd042d442a9d95d82f6d4c9c456a497","sha512":"f90b8236639b1ff889d127c252621f0e429cdb10fdfed58705aced0e62df8ea27b861a9dec028acc27b404429c8a875a09bc7f007abaec89af2e9a076990ebf9","ssdeep":"768:/e0R+TQBFFksIpm1DNXaGiZ8of+zGV7X5LXd4+/7djO+Nx:blIp6ob5L5t","tlshash":"87232ea3f9e614853227d1886667b7fd7ebc801386199d7ab79473388f873c38432a54","first_seen":"2026-02-12T21:09:52.751398Z","last_seen":"2026-02-14T09:24:23.264469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":584,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/SystemBetCalculatorContainer-CX9u-UKQ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/SystemBetCalculatorContainer-CX9u-UKQ.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 475\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykT9YG54djGA7JWSOBJSDb%2BdRPSPBnuHBkqT%2FLYdGgeFipkv1d2M01gLEUKOP0gdgcNsaR4nLlvIyymWdZxX1tav2OIc2CaeCXaZqCdqV7uwJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82487e2195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":940,"size_decoded":0,"mime_type":"text/javascript","magic":"Java source, ASCII text, with very long lines (520)","md5":"47e50f5b2cf0686b114e31847dbe750c","sha1":"9b7f336cbf6ccf716d2b579f4bbefc05f67923e3","sha256":"7cc63eadbcd0f9c3b9446d393211c1b4c3f31c57ac3596bb404f17c7b277d4c5","sha512":"b101f79f2ed5ba1b692ea1a378ad32837a05baa2fbaf53b01f40cbbf3b5d8342bfcf2538767a6b589408ee7962dcfa17c939cfd0b3221c7fbeeb98363ebcbea2","ssdeep":"","tlshash":"6b11dc626368cd75c48e0fa2089590840df00708690cf528b2b54d3ca01589283eeff7","first_seen":"2026-02-12T21:09:52.632184Z","last_seen":"2026-02-14T09:24:23.122227Z","times_seen":2,"resource_available":true,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":642,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/NotificationsButton-CU_XrVSZ.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/NotificationsButton-CU_XrVSZ.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 350\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TlqjEDNuwhzhl%2BQ7zBzCVz3JgtvMpZSqS2YUAuxLq2ML%2FpjbBM18GIV5qLifdu82WsE2dSeMN%2BuVSynomBwKLCgd%2F6MNnPQyI%2F9FGlOrnT0Mww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82488e3195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":558,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (557)","md5":"cab2bff6dda01c5b7caabeb90103a52e","sha1":"8927a4ca8e2f197b302bdd5158963815d7379fcb","sha256":"8159133786b33125a85a25c536d4cf16feb9218169a57667d478b984c398ab2d","sha512":"2241b98c7149d5813da44ce11e73d955dfed30121e694f4cb7426e82cab780c4c745b0e9583a6b272d578fbea16fcfa515c62f6f492078d2c3caf5fa73524d3d","ssdeep":"","tlshash":"b5f02647a555d8b41bc3065073379011243f787cde06548040e72cd51370067c55f94f","first_seen":"2026-02-12T21:09:52.677569Z","last_seen":"2026-02-14T09:24:23.226884Z","times_seen":2,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/FavoriteGamesButton-BdWkzlac.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/FavoriteGamesButton-BdWkzlac.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 283\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRuJT1WBl22KqzWilcYITd2lh1nffiDTeTYp8Xtqts8KrPDnHDJ7s70GaVrooTQvr5K6e4bVGVpK7t98Db%2BQNayLOtK4q%2FGQvbb7OU2pxNEKXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82488e3295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (426)","md5":"f9919a95214db33d32757db03b82be25","sha1":"1a777db56991716e2c1b745f81ed595950579f67","sha256":"38f4e5a0788fbd6eeb1617a30d066cb2a2294b5e982177b67ac3cfdf85d4e7f0","sha512":"d99602a241ca41360fb0ce0e7fc6de0cb83e23c9747ee6a0a11e1f8eff537742bdf03e8b6bc4ecb21796570ebca65846a594576e0afec94e86757adbfab1cc1c","ssdeep":"","tlshash":"5ce0a307904ad2f93bc717d02513c024242ab4bce748e09080d915943971467c55e96f","first_seen":"2026-02-12T21:09:52.611007Z","last_seen":"2026-02-14T09:24:23.232123Z","times_seen":2,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":664,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/Casino.CL-gqDdB.css","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/Casino.CL-gqDdB.css HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/tr/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 6097\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:23:49 GMT\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3yBy%2B3D3u9zE5QsheR3BgmCFVdX5dC7lcyGD%2FaiTPiBTwmP4W%2FoxiMn98YCnTPULSl7gCJdKdrMTvxDhmsWtAM0pX7LWz2tj5s9S%2BHejIHjfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9cdb824c5ec895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":37316,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (37309)","md5":"71880e85b009b283f2d874f72eef5e21","sha1":"3f7bcb2e5e6d822c53333b2decbbcad2ac91a93a","sha256":"30ac7337bfd7ad91638db406da528bbb78a56bbc1dce600fc93605e0cd19ad81","sha512":"1c06cd66731c42e50c8c9e788dcb1bb619fc001a81276ebcf8f14a46805f7962deb31c338e44087a71c53cfbeca09203abaeaf61d381094c7656877219584806","ssdeep":"384:Opo8j6E4sa1Hk9eeGKNgyGGFPwPJwWzY8IwgrOl009HdeVz7qQXFDpNDFb:OZj6E7Ie+TIIgVz1XN9b","tlshash":"34f29673961923bc75b796527ac0de9ce81c48b9da232641ac967237c3c7d992c307ec","first_seen":"2026-01-10T12:08:16.381261Z","last_seen":"2026-03-23T14:49:47.199808Z","times_seen":8,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go-cms.padisahbet804.com/api/public/v1/tur/partners/1022/components/11297/contents?use_webp=1\u0026platform=1\u0026country=NO","fqdn":"go-cms.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.988Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/public/v1/tur/partners/1022/components/11297/contents?use_webp=1\u0026platform=1\u0026country=NO HTTP/1.1\r\nHost: go-cms.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"icons.padisahbet804.com/storage/medias/padisahbet37/payment_13141_1022_8ac85cc478c2b20eb8db4619daae3cdf.png","fqdn":"icons.padisahbet804.com","domain":"padisahbet804.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:50.751Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/medias/padisahbet37/payment_13141_1022_8ac85cc478c2b20eb8db4619daae3cdf.png HTTP/1.1\r\nHost: icons.padisahbet804.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/index.es-Cxue2lTo.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/index.es-Cxue2lTo.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 82069\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FltCQMCO1mLWijhzbinnWlRMWUZwX0jpP%2BleiepeN8JGe2gnc%2B2RyUyK6Slmh2Jh5O%2Ff7FnP8WJkCzwsKyG9GDm0b1mnCG1hCgwB%2BhzhGPY1tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82448d9295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":295236,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514)","md5":"37d752e0756903c37497978f9edd44b2","sha1":"99cc1741de9a2abbbafb7caf46f3885de871703c","sha256":"c07218a36a98d1b47ed255dc810bbe3c1b9e84dd61c9de255193aec472830bb0","sha512":"e319b631ceeff5f2dba791764f8f81a3086ac5b67c0cc861c547d9ebd604d2635a247ec3eb6769ed862cc9bd3aaa5a0309a51ff900f0f425c2733bc871b6ab3d","ssdeep":"3072:dzCw7+KZdQZv/7VXKAMJtSu7vYK9u6INz8P1jXJphlzfl8FnN1Nd6Uvh:dz77jdU/7sJJMcvYisoljSFN1Nd6Uvh","tlshash":"f354fa8472a7f47543d665a8943b1542f23a5c64700c902cf6acfceebdac4499a3bf78","first_seen":"2026-02-12T21:09:52.658803Z","last_seen":"2026-02-14T09:24:23.135438Z","times_seen":2,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/menus/header_menu_1022_tur.json","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /menus/header_menu_1022_tur.json HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 1931\r\nlast-modified: Sun, 11 Jan 2026 06:18:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WF3Lhcft8vaRmS61JCc4rO1%2BFkds%2Bcf2Zbvo0qwbFb9pDPuuT5yuXlrtoZvQzYsz6FG5ypKyJrqOShfnyzTq0uNIlKUYcPiM1SKrXc2cJJhWzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb8244dda595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":24288,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"63fddd42c5d2aae0a5334b01b3f95ba2","sha1":"8ad54d002ada1fe82f5c71c80468de7bf01bbf73","sha256":"b5ab9789b9bc3fb6ba35cb242ee13e56a967062f1d8d7b2cb5acb720d65afc58","sha512":"53738775028d6a3c5f141c23b272e52458b9925529f031e94ae72fba5f9c4653df64bb9e4eff181e1ee4261e40fe33ed6a6e12b991d4e121d980fc42d94977f4","ssdeep":"384:9rRoakQrkKWC5zl537gx/imC7AkI8sR3DlUiU0ybOn6SEVWQh9a:9rRoakQrkKWC5zl537gx/iP7AkjsR3DJ","tlshash":"7eb27412e83a8c53a3887a3068d50287975152c79c96bc053b8c599d4fdfc5ec6fa3ee","first_seen":"2026-02-12T21:09:52.589672Z","last_seen":"2026-02-14T09:24:23.2685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/logo.png?v=1764600528","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /logo.png?v=1764600528 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T18:34:25.971921Z","times_seen":16246822,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/avenir","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:44.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /css/avenir HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:44 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 2008161\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 22 Jan 2026 03:34:23 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=allpE6Gk7mnJ1ufppUa7fNUzaJ9bmr630yq6F1iv6mSRjrQ8TxgrPILrHGXt7ZOHiUoxww1Qw15gvNfxmlNwjlLRIJQDY99dE%2Br1fImH5D5iWw%3D%3D\"}]}\r\ncf-ray: 9cdb822d1c9c3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"73994015c3211ddb4141a8c2184faa15","sha1":"e81f7af4741a814126b3757a6b3ac38df5c134a2","sha256":"fc2d2df6e28ff97213346ba46a761eb462c08dba26aab906e30c7d1e3eee6e07","sha512":"a57b7fceac15f5e6f87b4a9c863fbdb5977a02c555762246e9cf9f41cbd6addf3d7e7b36b0db5f5795cf89ea86594ec986d214a24932d51f13a9f34423a5574e","ssdeep":"","tlshash":"efd01253589b6c4066300cce771f6a1a4d4f104b200ac5553bbd2d049fe252542c173e","first_seen":"2024-12-10T11:41:33.719624Z","last_seen":"2026-06-06T02:49:48.677841Z","times_seen":79,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":54,"dns":21,"connect":8,"send":0,"wait":12,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/pageBuilder/pageBuilderCssConfig.json?v=1771061100000","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:45.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /pageBuilder/pageBuilderCssConfig.json?v=1771061100000 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 154\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ht5WJFywrN%2FPr1hbxmTEuMGW4lNAz1sl4x2TbdXJq1mE%2BHQTephlsI46bR%2FMvGXYvSvZdrF5LeA2Qhm8AwX%2BeWAggoS8wjOZKbCh0QBhn6yjqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82310aad95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"373d81a18870d500e10cb07066d29cfa","sha1":"5c8e4250b6055f38c7f02393b7df7022afbd3dd9","sha256":"a991a5605a19d20e901a7fd55afe83d32219c456fea8db5c8f77dc5db15f00de","sha512":"147e084787ba8b2aefd87c2a441c5a7c69c1a9ec93e260ec8d0628c01e5a8824e31b2e55ed7a65d500dff3fae6dd8a1b936ffacf0aa006bfb030af87c7bfe7d3","ssdeep":"","tlshash":"06d0950097dd47f1335a91b9050bfdc16403f0033280068d705df17c30c1b592593e85","first_seen":"2026-02-12T21:09:52.744864Z","last_seen":"2026-05-19T18:11:41.225507Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/AppSettingsButton-RbfiIfSo.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/AppSettingsButton-RbfiIfSo.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 258\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vi9aXb1ZwyGtq2C8rZk0mmFpGScAO1ZOGg0tkAe3t8o3j26q%2F3XUZhZioThyNEJ2RDVRyhJ2ppUUXtd3TJDLQbDqifSs669dh%2BUSKJsDmFqhYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82488e3495bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"f1b3f788cc8319cbfe44e55cbe7def74","sha1":"521f629f57d8202438779a094b6e104ff017ee16","sha256":"f375faa0b61473ef8b0c2e8030c887b7c19f22048b36bd3d87e549bc7e910a28","sha512":"6227250fada855ade5de67f98ceb540898b5b36855db5e4e7a07ecf660eb428b8b39cde1f24bd656848dc5567661fd1c04930e2edd1cc9e6b78b986617b0b3d9","ssdeep":"","tlshash":"ebe060875083c3fa03d11bc0c11bc10439063c78c344e802c0bc219136f0093c14f66b","first_seen":"2026-02-12T21:09:52.580944Z","last_seen":"2026-02-14T09:24:23.273476Z","times_seen":2,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/InternalDataspotTracking-CCL-ross.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/InternalDataspotTracking-CCL-ross.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/assets/index-C75pT7xi.js\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08; _immortal|user-hash=pQ5AbqAIv6lhAYmaeYAuPTU920jUN6J8yOtj\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1469\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUtE3tQeJcOTF1tsWfyI2rqOhhe9WZmdYJu0C9lWOazi0qTIs0KL7RPmTHoSEbM1wdmYjcN79Fdzcur6dpdheK99NG6p%2FEXaiZWo9heYybR9Rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb82489e3895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4012,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4011)","md5":"aa64f56221103e57d49f5599c4a8aa69","sha1":"5ae2681e283628791bc1adc563efad2768c68fec","sha256":"e1831c14ddeb3409bf6b8a5872e2a472a89f0b8da0bdc4cf5af7cc3d3dd7b6aa","sha512":"caf2d93c16b7768f1a6e6e1d10c2f5f68b52e0a5260b32cc3f623000d416f34e9c981401f963090ebdc6ad748c1233eb26a818e46b767550125261536eea7734","ssdeep":"","tlshash":"6d81841fdc3c08b0b060cadc5837d566856c3c96a690dcb060378eaa621fe45d7f6e97","first_seen":"2026-02-12T21:09:52.763203Z","last_seen":"2026-02-14T09:24:23.249387Z","times_seen":2,"resource_available":true,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/conf.json?v=1771061100000","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:45.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /conf.json?v=1771061100000 HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nCookie: ci_session=8d0eff2107c5e0e17955d89854e2110d3782df08\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:46 GMT\r\ncontent-type: application/json\r\ncontent-length: 2922\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=huE3PTc0LEP45pyOWskTlWfmEE5Bxv56h%2FYgIBSM3X%2Fts9C9i6%2Byc4llrVjzPVhJ5oGU2KyJ2owsN3zNpbu7ig%2BX5Mr77GyDUUi%2BIqFrNp%2FGig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cdb8230faaa95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7470,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7893eec4caa8d3f6543c6cc48b92cea2","sha1":"dae0476e4a08d80d32d586d4df0a28750908fc59","sha256":"0f2dbb03d0506916f860d2db445cd59b20f464d3e2847644a82c73e48a54c43e","sha512":"6939095678a0bc8abfe050f17e0f5a6673dccf3b4ef67afd0f56e24cf0fc4a1483533a7e8d0ff6c819fb6e0b58b61287cfcce97896eb698b6c833e38c3e8794f","ssdeep":"96:4mLTxWR16zSzTib2KFlARJ7KsuBFvuI6MWZWfRmDSS0L51aDur/W20vPPJYllkqI:hTPv3ARJusuBFvuI6MNLF18yr0vPuR+5","tlshash":"05f1c62717441dbe8389d3d8715b3f0b98bf283b55c2b456e6dcce2c00b669a1325a6b","first_seen":"2026-02-12T21:09:52.764552Z","last_seen":"2026-02-14T09:24:23.276268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1014,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/if-defined-CWaLTnLW.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:48.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/if-defined-CWaLTnLW.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 19472\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEMzbyI%2BI4gHKD3UjDiOABGL60tlZsP5GzzTDygPKP4UitAANdo8TmKRU1cUhPPYIwfS9hy6mXHUDMXRIwR9huXL8vwrwfWs1TYgKPpeaZXH%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb8244ddaa95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":53241,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18566)","md5":"a3b110c47aadc250e8c08286a3927c90","sha1":"dc2412f014870a6cdd5d3fe64734a12372b2e66c","sha256":"ff1673476716b35b4481265e15bbbf19e034f23574e163b4f79ab7e39ee93d55","sha512":"a4b3491b2b16d7c8346d302b6c57643dfd39947c2bd5292310d2f86940fd9980430abd20062b49151f9417afc5d133f9056f0da838e0afe5e1c0b3b561b5580e","ssdeep":"1536:vMetjKG9nc1EM27QiZmqog9o/LxGRbVkT68QEC07G8:v5UZg9o/LxGRbVkT68Qup","tlshash":"203308d472d671a243d386e5843b001bf3753824382d846cba2de9dbbd35a4691bbf39","first_seen":"2025-06-12T05:59:20.504038Z","last_seen":"2026-06-06T21:30:11.633829Z","times_seen":639,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"padiisahbet801.com/assets/AppSettingsButton-RbfiIfSo.js","fqdn":"padiisahbet801.com","domain":"padiisahbet801.com","tld":"com"},"ip":{"addr":"172.67.169.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"padiisahbet801.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 19:15:30 GMT","end":"Mon, 27 Apr 2026 20:13:52 GMT"},"fingerprint":{"sha1":"9C:4E:A7:04:03:C8:AC:A3:34:C5:94:A8:C2:25:0B:1A:0C:97:0B:42","sha256":"4F:50:54:37:E0:29:7B:5B:E8:F5:05:FF:33:34:1F:62:E8:57:0F:0E:4B:9C:65:FF:04:59:B4:7B:C3:EB:72:8C"}}},"request":{"raw":"GET /assets/AppSettingsButton-RbfiIfSo.js HTTP/1.1\r\nHost: padiisahbet801.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/tr/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 258\r\nlast-modified: Sun, 11 Jan 2026 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icu%2B4OEoiWGlP8t2fpehXPWYjP0hiAWvu5m3oq3PySflPs%2BiSdTSSKyOqCME8fVk%2F%2BRmpWi7x1vSCK29f4%2Bc%2BEHoqLSclO36Jfr0GOywxU9hEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdb82487e2595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":385,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (384)","md5":"f1b3f788cc8319cbfe44e55cbe7def74","sha1":"521f629f57d8202438779a094b6e104ff017ee16","sha256":"f375faa0b61473ef8b0c2e8030c887b7c19f22048b36bd3d87e549bc7e910a28","sha512":"6227250fada855ade5de67f98ceb540898b5b36855db5e4e7a07ecf660eb428b8b39cde1f24bd656848dc5567661fd1c04930e2edd1cc9e6b78b986617b0b3d9","ssdeep":"","tlshash":"ebe060875083c3fa03d11bc0c11bc10439063c78c344e802c0bc219136f0093c14f66b","first_seen":"2026-02-12T21:09:52.580944Z","last_seen":"2026-02-14T09:24:23.273476Z","times_seen":2,"resource_available":true,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"padiisahbet801.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getInjectedListings?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://padiisahbet801.com/\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdb824a2fa3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":429349,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8ce3d14abecb886f5fd4febd8e04a900","sha1":"c118507c0f9522adbeb7c31f7a2c6de68fb85e94","sha256":"f05a1376993beca0b7fdcbb94542d3f7a6c87967b6a875ce7ab1b53bed57386c","sha512":"e0ae803c21707f5d7b52ddf5e8fbea7718b15c2d4956a6fe700450ed69ebf677a2c74aab63f1f2b4be804465c2589b7c2e0a5221e38ce2ba7a7edc8ee2dcfe2b","ssdeep":"3072:bnRupagBfZbVITZZYA5dHAdZ7GlAMIDl3g3Wcmvu7IHkGOQyD9gkI:LsLBtVILT3WHu7WOQEI","tlshash":"159444bb8f848f5b1b280bc9212d3d6c999e298bcbc55df6f1c0cf1844f4ab92315566","first_seen":"2026-02-13T18:47:56.386179Z","last_seen":"2026-02-16T19:46:38.120673Z","times_seen":17,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":46,"dns":21,"connect":3,"send":0,"wait":101,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.20.35.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://padiisahbet801.com/","date":"2026-02-14T09:23:49.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=45f4062f4f6427f9e6eab952d2452b3c\u0026sdkType=w3m\u0026sdkVersion=js-2.7.1 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://padiisahbet801.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://padiisahbet801.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 09:23:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2176\r\ncf-ray: 9cdb824c3a9b723c-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=16+2 c=0+1 v=2025.8.5 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-06-08T18:05:25.257239Z","times_seen":2954,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}