{"report_id":"a614f6f3-5921-468b-bf13-adef130f5821","version":0,"status":"done","tags":[],"date":"2026-07-17T12:37:10Z","url":{"schema":"http","addr":"bahislink7.pro","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"ip":{"addr":"104.21.30.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bahislink7.pro/","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"title":"BahisLink — Türkiye'nin En Güvenilir Bahis Rehberi","dom":{"size":105345,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43209)","md5":"f094813274dfe359983e4f9dd92b58da","sha1":"8af9a044900fc98a9b24ba88e00aa584ad2ccb2b","sha256":"8136de0851f06cbbd80677050d1be2898963881dd0642fbf310b06c1424a03e0","sha512":"3347b85d44f33c2fe79d94e25757a7325c439a27708248d160fae15f8324d6cc110bbcd6219aa03a1d767234ecb8139199f1efd64b15e37317c1268d6974aa51","ssdeep":"768:DR681IISatt0K80x00SZX9QQeX32e0unVrKxHBKMWPsyCsYgKN7y87vWGDr3E/Ya:DnIIIwxHgLOb7MhnW8OV","tlshash":"4da367fb80412f3f225769e155577bfd74aa324bdb9f0806f96e8a846fc4e909832134","dom_hash":"domhash16191ca8f6f4a7188fc7956ab55d82b5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bahislink7.pro","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"ip":{"addr":"104.21.30.224","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T12:37:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bahislink7.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":9,"received_data":505633,"sent_data":5168,"comment":"","tags":null,"fingerprints":null},{"fqdn":"betlink.love","ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":10,"received_data":5761,"sent_data":5519,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"betlink43.pro","ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-16T16:28:34.237068Z","last_seen":"2026-07-16T16:28:34.237068Z","alert_count":40,"request_count":10,"received_data":121046,"sent_data":5209,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bahislink7.pro","ip":{"addr":"104.21.30.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-17T12:37:11.103941Z","last_seen":"2026-07-17T12:37:11.103941Z","alert_count":20,"request_count":5,"received_data":547073,"sent_data":2487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":14070,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bahislink7.pro/","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"ip":{"addr":"104.21.30.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a37262ce8650f2f1602305a0e78eed9","sha1":"9833ca7b187fb14f60228d9c207ed380c69a9021","sha256":"b14ebc8aee51f1ab759abacf669832db0676faf17315ad34790b8ee3770ea272","sha512":"9fe9028b4a349d172ef48b5421a9f7bc91c62211ff3cf93c8c27904faf3704e4659b3f6e2a68f549b7ff1151d005f23fbc4add00468031d3c9dcb4c9f33135d7","ssdeep":"","tlshash":"c8f09e7ff8a63c7798bf77e9529f56a4366100434582d8043becc6805f24db52c368e8","size":487,"data":"","first_seen":"2026-06-21T14:09:50.077619Z","last_seen":"2026-07-17T18:44:02.22378Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahislink7.pro/","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"ip":{"addr":"104.21.30.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e4d5c59905a4762a5a215f5c872fd64","sha1":"2381d8aacf320679373fd607d17812223ac10786","sha256":"ec81d56b3c887a28bf3525108d422d63a391201f3974c3eb6298eb54cacc5f1a","sha512":"1bb072f2a87b2e1c751cc6eaa9785410890828bfcb237aa71d511dc2416f7de3054c073d35e9d68a2fe65f8c38f4281eefbc6338bbc6751c87030f6adb93a319","ssdeep":"","tlshash":"b751ea13f3c53236919a901c82abb73dbd3d9102f3011d39ea4afb355b808d7956a96e","size":2673,"data":"","first_seen":"2026-07-17T12:37:15.342466Z","last_seen":"2026-07-17T18:44:02.225724Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahislink7.pro/","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"ip":{"addr":"104.21.30.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b474764470a7e7ff0458d7d4ede8b64","sha1":"fb4da08668c43be3611f2cd00af1c993df7cee77","sha256":"65d34549f6a72e59f6859339bb0d917c47d0c58751a8c77f9b241149fc81b78c","sha512":"5d4bca2a7a01ea812be2b64f15b2b8e48d0debe37eec0b262be4c1814aa87943e1a73933a1cfd36010214d2a4b11c978dcabee0770ea105e3fcb90868c914913","ssdeep":"768:eeX32e0unVrKxHBKMWPsyCsYgKN7y87vWGDr3E/YPa6eZe/gz+nMvXBMHxEr:eOb7MhnW8Ol","tlshash":"7ff222ce81001fbd6a647eb2188b3bfc384c7a66e3ec4c16b99ecd459d98f245072674","size":34947,"data":"","first_seen":"2026-07-17T12:37:15.343622Z","last_seen":"2026-07-17T18:44:02.227485Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.456Z","timestamp":1784291802456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahislink7.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:24:54 GMT\r\nexpires: Mon, 12 Jul 2027 12:24:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 432708\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-18T09:41:55.186366Z","times_seen":18643,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.480Z","timestamp":1784291802480,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahislink7.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:54:25 GMT\r\nexpires: Fri, 16 Jul 2027 02:54:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121337\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-07-18T09:45:05.49375Z","times_seen":61096,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/elitbahis-7d300df3.webp","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.568Z","timestamp":1784291802568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 00:59:12 GMT","end":"Fri, 21 Aug 2026 00:59:11 GMT"},"fingerprint":{"sha1":"9C:35:A8:3C:23:EA:F2:7B:5A:4A:81:5F:3D:A5:AD:B8:D5:40:54:5C","sha256":"06:BF:A7:7C:02:1A:D9:2F:96:05:BD:BE:16:53:26:1D:7C:A4:AA:05:76:3C:B7:2A:08:B5:64:52:16:5A:45:A5"}}},"request":{"raw":"GET /img/elitbahis-7d300df3.webp HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/elitbahis-7d300df3.webp\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMxLEdHF2XtHRLWeI7ceF1WOptexu3l%2FsksU6DmWP4zyRj0LaL1uV%2BMSt4EQ3vJXTYKasqm9e1vJ6I6%2FYRuhCsR5%2BHoOaCF2VE7KWBscob3avQ7B%2FyiZgUgnaBgsxRE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b36887b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.405Z","timestamp":1784291802405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahislink7.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 125280\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-18T09:41:55.1797Z","times_seen":238398,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":16,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.454Z","timestamp":1784291802454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahislink7.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 125280\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-18T09:41:55.1797Z","times_seen":238398,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/betmabet-20260109_003353-a55197.webp","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.573Z","timestamp":1784291802573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 00:59:12 GMT","end":"Fri, 21 Aug 2026 00:59:11 GMT"},"fingerprint":{"sha1":"9C:35:A8:3C:23:EA:F2:7B:5A:4A:81:5F:3D:A5:AD:B8:D5:40:54:5C","sha256":"06:BF:A7:7C:02:1A:D9:2F:96:05:BD:BE:16:53:26:1D:7C:A4:AA:05:76:3C:B7:2A:08:B5:64:52:16:5A:45:A5"}}},"request":{"raw":"GET /img/betmabet-20260109_003353-a55197.webp HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/betmabet-20260109_003353-a55197.webp\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zuyI0K%2FOzvw2TV%2B4ZC1%2BAr2HxC2qGkCulUwMAFTUTOo%2BW3EROYMgmSar7g8bsiBYgcQcffb7CV7vro%2Bbw2jxJGM9J3cWNuEls8zAjUQloGyAAm6rXq%2B0Cdk%2BqZmoJ6Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b36887435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/luluslot-dfc1275f.png","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.572Z","timestamp":1784291802572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 00:59:12 GMT","end":"Fri, 21 Aug 2026 00:59:11 GMT"},"fingerprint":{"sha1":"9C:35:A8:3C:23:EA:F2:7B:5A:4A:81:5F:3D:A5:AD:B8:D5:40:54:5C","sha256":"06:BF:A7:7C:02:1A:D9:2F:96:05:BD:BE:16:53:26:1D:7C:A4:AA:05:76:3C:B7:2A:08:B5:64:52:16:5A:45:A5"}}},"request":{"raw":"GET /img/luluslot-dfc1275f.png HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/luluslot-dfc1275f.png\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKScJ2hQajblw8%2FPzNJcUU%2Bx9u%2BWozSPXmJ%2FroL9bCOebfI2zLWFoL5L7z%2FGV3nAydbK0vQ8RxDfdcsLO%2FNXln7MHGR9utemRGMDa065OyaOHeA5vTXFhgCMCTL8u0A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b36887235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/reklam_1781254462_8586.webp","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.699Z","timestamp":1784291802699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/reklam_1781254462_8586.webp HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 12 Jun 2026 08:54:22 GMT\r\netag: \"6a2bc93e-7160\"\r\nexpires: Fri, 14 Aug 2026 16:07:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 160177\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PMgJCem0Zt2F4TmChjgE2mNrEWrb7kWV7Dp1YsuBmtkLSVhJkh0elh5aLhI%2FjASf8T5Dk4aWntRLJ0gWJaqypgXFPNxLUW9hbbvZXY%2F33HijTf7kRyMo8aA7TMi7zn9Z\"}]}\r\ncf-ray: a1c94b384ed52678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29024,"size_decoded":29779,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x670, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b388ef52f49539ddbb7f0463bc5ecb7a","sha1":"784e5b46b9191f9b3f3173f646f7e8771c50d934","sha256":"ace06a6b3340952bde442d6db1b3888bd7fbf30cd0d8349d517357163ce0f55f","sha512":"96153e9456ace2679d6cccb3d662dde4189f13c3f63ca10306a6a3c2f11dcd4cca2a94b39aa08eca97a1d86e9d262a951c3b898ec8c79dc9d0674a9095bd3757","ssdeep":"768:XsiozBDBfNa3XvSlomkD3dBp4T/2I7ht0E2/Nfr3vGsP5:4zx/aHalnK37pS/2I7hc/Nzug5","tlshash":"44d2f2001fcf657acec5c52df32c718536e5c22427e5386f8ea2858de8de805bbd4829","first_seen":"2026-06-15T13:15:27.958678Z","last_seen":"2026-07-17T18:44:02.218057Z","times_seen":11,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/thebet-0618c445.png","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.704Z","timestamp":1784291802704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/thebet-0618c445.png HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 16:39:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d6c1c3-9084\"\r\nexpires: Fri, 14 Aug 2026 16:07:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 160177\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4URKYyyvy3BA9zhHaRO62PQzlFI1XXhS%2BymcEfVCR%2Fu%2Byp33MVmNQIyX5x4ZkgvICtOaH6JvHwcngXAGe6A%2BoXeyML6Tq1pZKJVcDz0X4MQx%2FkI0gVMhMdaBmejcG32M\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b384ed32678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36996,"size_decoded":37263,"mime_type":"image/png","magic":"PNG image data, 352 x 69, 8-bit/color RGBA, non-interlaced","md5":"f723809aeb7f28dd03a3860520c852be","sha1":"31a8af406949577eaca224cdf8c6a9cc69665366","sha256":"798194eb8e5885133201b7784ffdefabbc4924123c36e6885aac131ddac70831","sha512":"8beaa260c814b4dcd641ca36b24a4bb0cba3604c42d245dcf4803972f054e5d6da808bdaea74cce381e229e721338cf2046ef5896e03ea21b3f343253e2d2c03","ssdeep":"768:ON51xeq50U0Lw4VThn6GMYoAp8f5NS7NB0WgWr8bUMTFSVik1knpQ8KcWo//rk/D:k51xl0E4VThn3p8f5NS5BfgWr8TTDk1v","tlshash":"0ff2f1551f7648708ec8cf2e537e4b5eec1b7626d2a2c8683dd4ce17084c7aac8de1a5","first_seen":"2026-03-15T23:28:03.197924Z","last_seen":"2026-07-17T18:44:02.201404Z","times_seen":17,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":212,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/site_1772446532.webp","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.709Z","timestamp":1784291802709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/site_1772446532.webp HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 02 Mar 2026 10:15:32 GMT\r\netag: \"69a56344-14ce\"\r\nexpires: Fri, 14 Aug 2026 16:07:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 160177\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsXFYMtkL8QHSBfK3PCfCILhlDKzBd13ZU5wJV2r%2Bw02KbCpQb9h67dUkzq%2FeT%2B%2Fo%2B7Ygq4XYbpjmuZ4qMBIibZdmLswkdyxLH6ls3XliDTo%2BoEtJlLMhyE9Rgv4rRNx\"}]}\r\ncf-ray: a1c94b384ed22678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5326\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5326,"size_decoded":6088,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a37e54613748de2e75c7c8ec2a56255","sha1":"0d3ec26826d036a12b0cfd217338ba38ed6393cb","sha256":"7d98d8584b050d8cda9559fe27fa1e974fefa27ade52e2073231fba65edf1e8a","sha512":"75582022b39e5580297d54e5b9fcf7214144ce07dec819c143de2f4f98dc3a734fbda2026c8851f6d51f1095c90d78f45b603cfe19919189895172fa3b06e6d2","ssdeep":"96:IV8fl6J4HhRruqCjWjoW3MAGgd2alkCWpEOZGzg/tFhc6y+1prSFEBQXg:1nHhRbjdXd2aeaY0gK6y+LrSOBQQ","tlshash":"f2b18ebb10610a125f60803c2478f2f59f0809ecd7516b2aa681bd75b03034de76ef4d","first_seen":"2026-03-15T23:28:03.243498Z","last_seen":"2026-07-17T18:44:02.208113Z","times_seen":17,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahislink7.pro/assets/css/style.css","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"ip":{"addr":"104.21.30.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:41.825Z","timestamp":1784291801825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahislink7.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 13:28:46 GMT","end":"Mon, 12 Oct 2026 14:26:10 GMT"},"fingerprint":{"sha1":"56:C0:A6:4B:01:12:A2:72:E8:84:8E:21:EB:F2:C2:5D:E6:4F:04:30","sha256":"98:76:36:C7:1B:F3:F9:6E:11:6A:10:47:1C:FA:6A:EC:34:32:2E:03:E9:BA:90:F8:4A:0B:F1:F4:90:C3:98:9C"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: bahislink7.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Tue, 30 Jun 2026 01:51:53 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\nexpires: Fri, 24 Jul 2026 12:36:42 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver-timing: cfExtPri\r\ncontent-type: text/css\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QcM4Qm%2FSkvuV19C69xsRto7PHMT4rjLjjA06ezs1bZ5FSbrQVmb1DcKSP8ywXrqXkNfhjqtwFlrwGbi2G%2FmVB0N26ut4wtFX2MI6cXqFzVJ8XnBf4RfQ4c1nlpq57ISH5g%3D%3D\"}]}\r\ncf-ray: a1c94b316c742efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34027,"size_decoded":6980,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f7eb32550b76bee77f194086a0a495ad","sha1":"e217de83ad11e37af576dacfcde20edadf2f5d7a","sha256":"6c41117bc651aec9ea5d0514f281eb951348c5ab3c0dd105900ce1e7f74728f4","sha512":"06fdca884caa67abba9a065b83ed736aca4e1bb1684db164cbcfc07c65c4c81273cb8d8281bdb8438b728210b00ef348cd770edd1ba845502a342f8acc6bf1f0","ssdeep":"768:hWk5lDXjgXfezkqkNPFSU9EfFDtrD0Lk13uu6uyca+1lk1:hWIjjgWoqkNPQU9EfxtcLk156uyca+12","tlshash":"dde254e227745164bd2baa982b479f5b735ca043940acabcaff5100c9dc52fd61a3f4c","first_seen":"2026-07-04T12:26:51.53532Z","last_seen":"2026-07-17T18:44:02.206342Z","times_seen":6,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bahislink7.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/tarafbet-3c1012b3.webp","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.563Z","timestamp":1784291802563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 00:59:12 GMT","end":"Fri, 21 Aug 2026 00:59:11 GMT"},"fingerprint":{"sha1":"9C:35:A8:3C:23:EA:F2:7B:5A:4A:81:5F:3D:A5:AD:B8:D5:40:54:5C","sha256":"06:BF:A7:7C:02:1A:D9:2F:96:05:BD:BE:16:53:26:1D:7C:A4:AA:05:76:3C:B7:2A:08:B5:64:52:16:5A:45:A5"}}},"request":{"raw":"GET /img/tarafbet-3c1012b3.webp HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/tarafbet-3c1012b3.webp\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MItXY00k4UhhD%2Fk43t3Q2O5EcmhYqWaAClsnKNYJapbOLtdmVJAUXrAbgF4fksuGkTO6cOraLGLcOj4SR2lFcReDVbI1uEK0Wdaqx3FGMo4kSyHveYshLT06nHt5fE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b36887535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/tarafbet-3c1012b3.webp","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.712Z","timestamp":1784291802712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/tarafbet-3c1012b3.webp HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 09 Sep 2025 01:53:00 GMT\r\netag: \"68bf887c-33e0\"\r\nexpires: Fri, 14 Aug 2026 16:07:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 160177\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R0f5Eia%2B1caN6md10fVm5Ic9KC28qpNF%2FvRxI3n%2BgWV%2FmR8w91vdjV%2BtHY2DhgH2ggNUHCVjs6o583CpQdpWEUsyxIUUjy0cP5c5uakHguh%2FElFOj%2B4dPOR%2BBerZAyHg\"}]}\r\ncf-ray: a1c94b384ecd2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13280\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13280,"size_decoded":14047,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bce9f9529c1d1959712e60f23cee2b78","sha1":"a02eabbb3c57229d02fc49be930f5733d88a51a7","sha256":"511291c34495775816dc7257475e4b6879b665591653166686aa6c6e93365da8","sha512":"e71e1d942e40d57f5ace1213bd9c4220b5ece32dd3b830e4be56051175e764a13b5706178298d30096e149b939ca97fb4e98784e911ea9683101340c06b27b74","ssdeep":"384:neoj2Q2UyYUKjuNy0bh+Wf3kNFx7QyMo2:Z2myQuXbh+c3eFtZf","tlshash":"7452cfee79ab8a2dc304a6ae3dc3a6d4554a193fd73cdf1583107010f4953a3864fa7a","first_seen":"2026-03-15T23:28:03.234743Z","last_seen":"2026-07-17T18:44:02.204619Z","times_seen":13,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.452Z","timestamp":1784291802452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahislink7.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 125280\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-18T09:41:55.1797Z","times_seen":238398,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/site_1772446532.webp","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.564Z","timestamp":1784291802564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 00:59:12 GMT","end":"Fri, 21 Aug 2026 00:59:11 GMT"},"fingerprint":{"sha1":"9C:35:A8:3C:23:EA:F2:7B:5A:4A:81:5F:3D:A5:AD:B8:D5:40:54:5C","sha256":"06:BF:A7:7C:02:1A:D9:2F:96:05:BD:BE:16:53:26:1D:7C:A4:AA:05:76:3C:B7:2A:08:B5:64:52:16:5A:45:A5"}}},"request":{"raw":"GET /img/site_1772446532.webp HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/site_1772446532.webp\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wpslCNgUPRs5VKQjNhl3cAnnmvP3bbw%2BgBPIQnDsENFcQsQpfislPmsNl%2FRgS7AMM9IE0K5QqmJMVPGD6Bm0xjB3jNSiQ%2BCAUsgk2vPO4fOYnRcpjy92BonW6mQHJiQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b36887635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/thebet-0618c445.png","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.570Z","timestamp":1784291802570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 00:59:12 GMT","end":"Fri, 21 Aug 2026 00:59:11 GMT"},"fingerprint":{"sha1":"9C:35:A8:3C:23:EA:F2:7B:5A:4A:81:5F:3D:A5:AD:B8:D5:40:54:5C","sha256":"06:BF:A7:7C:02:1A:D9:2F:96:05:BD:BE:16:53:26:1D:7C:A4:AA:05:76:3C:B7:2A:08:B5:64:52:16:5A:45:A5"}}},"request":{"raw":"GET /img/thebet-0618c445.png HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/thebet-0618c445.png\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KfbmM6B61fKMUKVzAAermCeqaB4%2FkoQvP0x0EjKVq5qqXOGtenjW5pV2L0WmMVdzzWin9bfHi1p0sSPa4KPauBmRmAFz%2BggZ04aGnPkAfe4shrCP9H67UmneQjYr9kw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b36887a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bahislink7.pro/assets/apple-touch-icon.png","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"ip":{"addr":"104.21.30.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:43.106Z","timestamp":1784291803106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahislink7.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 13:28:46 GMT","end":"Mon, 12 Oct 2026 14:26:10 GMT"},"fingerprint":{"sha1":"56:C0:A6:4B:01:12:A2:72:E8:84:8E:21:EB:F2:C2:5D:E6:4F:04:30","sha256":"98:76:36:C7:1B:F3:F9:6E:11:6A:10:47:1C:FA:6A:EC:34:32:2E:03:E9:BA:90:F8:4A:0B:F1:F4:90:C3:98:9C"}}},"request":{"raw":"GET /assets/apple-touch-icon.png HTTP/1.1\r\nHost: bahislink7.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 12:36:43 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Mon, 08 Jun 2026 21:05:51 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncache-control: max-age=2592000\r\nexpires: Sun, 16 Aug 2026 12:36:43 GMT\r\ncontent-type: image/png\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=baG3TpddEUS%2FmFgzKA7e1dEMtw%2ButJ8qRWFjuAWWV%2F2IfNlQ7AriRjMtHo3iGfeAc4u6Vx21H3QDnaZaCpUEYtGLGIfwOG7DNLYpnWtowin87eq6Ff7yitZqo17pWQz4XA%3D%3D\"}]}\r\ncf-ray: a1c94b396da92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26709\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26709,"size_decoded":27561,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"a88b3b16fbe06d9520531d75146143a3","sha1":"9db0ee64e5f8f284a3a7c6167b6bf75ef6072601","sha256":"765f9ecc2c19f25b10e4a9c1424f49b0f20d208c5943a58171068360d40c2fff","sha512":"1c308f652dded5fe3ca98b2056fe4de77d2256ec7d46db0a2ed9dfc715ce0b6e89ee327b273a4c95860bcefaf235f65a8215c5e6d80f3448ec10f16b5bbaacef","ssdeep":"768:9/eMWLwwVt8dbGlhj4PSLGXgLrYf35/NnA6DL9jmIjp:92wrbAhjiSaXsrYf39NnPL9Hp","tlshash":"3ec2f1cd7ad0baf5bb20b7f614522aee3f50ddd43c0c069b265347b5e9680a86185c3e","first_seen":"2026-06-15T13:15:27.964732Z","last_seen":"2026-07-17T18:44:02.203612Z","times_seen":8,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bahislink7.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahislink7.pro/assets/favicon.svg","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"ip":{"addr":"104.21.30.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:43.111Z","timestamp":1784291803111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahislink7.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 13:28:46 GMT","end":"Mon, 12 Oct 2026 14:26:10 GMT"},"fingerprint":{"sha1":"56:C0:A6:4B:01:12:A2:72:E8:84:8E:21:EB:F2:C2:5D:E6:4F:04:30","sha256":"98:76:36:C7:1B:F3:F9:6E:11:6A:10:47:1C:FA:6A:EC:34:32:2E:03:E9:BA:90:F8:4A:0B:F1:F4:90:C3:98:9C"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: bahislink7.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 12:36:43 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Mon, 08 Jun 2026 21:05:51 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QbyHXzsTMrWOy4CWE9svyHxG8MLPaFkq92JbMiZcJwPpzZWiEHP7VaXxzzr6TPN0c369eprUYyyXMP9SOgRTM8%2Fteed9dnxhPvyQ3LdvmbB5L9qzCxjMW7CGDPsWNeqbg%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Sun, 16 Aug 2026 12:36:43 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1c94b397daa2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189429,"size_decoded":141580,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc4a5e0d38340bf7c11ee1e00302e592","sha1":"339fa511ba3159c0b459ec569b712f5fb1593bfc","sha256":"ef9c66ea0fb9d7acb5a20dd2928b5052c3e88f31b4c94e07f387a337c77ed23c","sha512":"793313c64e4984b8f40346f93808fd853941f4bd7e2f07cdad80bc9df891a93a62cb856bc095194914413b4f76b3213a49f1bd1548ab037fb5d6035545d15c5c","ssdeep":"3072:Up/B70v5P57jYcaQH4BEyf8AG/pAIBFLqAM3K9w/Xcng7LhCSJ8K3PPDw4edNveW:Up/N0RP57tFyEAGumFLqEbng7NCSp47","tlshash":"a30412937847fcae43abd72a0a7ab6004bf908d4445073730b6ae433da4e78e514e47b","first_seen":"2026-06-15T13:15:27.946623Z","last_seen":"2026-07-17T18:44:02.209092Z","times_seen":8,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bahislink7.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Playfair+Display:wght@600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:41.821Z","timestamp":1784291801821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Playfair+Display:wght@600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 12:36:41 GMT\r\ndate: Fri, 17 Jul 2026 12:36:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13386,"size_decoded":1562,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b30153501574e4a4f27d46934a18db97","sha1":"05282deecdc3ea94a4609df41874c2148b856efc","sha256":"8577033fc95d9fef86637d15a38149ccb1b85c5cb646f54d2eed33ff2d8b6e64","sha512":"9cec031a4343f64ca9e1130fb7d8351134ddc53e5689b43fd7202e2b0ddb039306cbbe038225008e05026e43ad68638d4b9052f476d14cb5a72822da5b03477e","ssdeep":"384:vXuM0p2+wF2R/Y2v52bp26E2R/J2vI2b42W:7aww50pAahwI049","tlshash":"4652ba92006ba500ab871dc223cf7f3aae8e60946085d2796ffd0dc95cefd66436875d","first_seen":"2025-09-19T19:27:45.729204Z","last_seen":"2026-07-17T18:44:02.21587Z","times_seen":60,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.475Z","timestamp":1784291802475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahislink7.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:24:54 GMT\r\nexpires: Mon, 12 Jul 2027 12:24:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 432708\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-18T09:41:55.186366Z","times_seen":18643,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.476Z","timestamp":1784291802476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTLYgFE_.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahislink7.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 06:06:37 GMT\r\nexpires: Fri, 16 Jul 2027 06:06:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 109805\r\nlast-modified: Wed, 10 Sep 2025 16:50:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":21140,"size_decoded":21953,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21140, version 1.0","md5":"319e6b2aad48bec980d22efb27163e79","sha1":"99a7c18e5b3d2969af30be24c2b180e9d0aec548","sha256":"42898ad49a6b23f32b109243e1df596edf831015ed685f429e4dafbb181d599d","sha512":"6fc7d4323f0c9f20c70912d6cf28ce77534fcd4ef459bc290a54e2aa5d431b8df4201a9d7fed92e1018390cc9f81ba89303b096cb2f132fba7a43bf6fcd9c8ef","ssdeep":"384:C4L2Peg+2AvuSkfvMacY3RHOCKk9yg8TwuEgAXdoFCl8/Q3U7:4G2Eax3Rubk9yg8cgcVCf7","tlshash":"ec92d08f84abd1e2b38e1d359da53a997fdf3436a246b7c0d28420179ee2417011f012","first_seen":"2025-09-12T15:33:44.21019Z","last_seen":"2026-07-18T03:01:12.47325Z","times_seen":3376,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.404Z","timestamp":1784291802404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/playfairdisplay/v40/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahislink7.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 38404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:54:25 GMT\r\nexpires: Fri, 16 Jul 2027 02:54:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 121337\r\nlast-modified: Wed, 10 Sep 2025 16:48:54 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":38404,"size_decoded":39217,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38404, version 1.0","md5":"ef05b30d6e5ca86ef9deda8c5bfa599a","sha1":"daeff530b773fd9ef9c50a803021a2cfba76083a","sha256":"e0c764a8e9e1cce92163c55bac4b2ad6cd4cf8c696ce2289ab5c41565e65b7e2","sha512":"0d5b2444bfe9e47a0665b6f25bf8bb161346888f8e5c49f2b8b4a6c4baacf3cde37a95aa8c3d5800d545fb5e684e3833df41582671073df12b60a42bf8ebb331","ssdeep":"768:FwI4wBedSjX1mVXUjvqnWIiYvffoRgF4vY7Ooy263B1kzEj9SSJxE:aIYdSjX+rWIiYXQRS4iTy2637ky0ExE","tlshash":"0603f1cb9b682138e95f513b0b8b13dd56ad112e9591d9a1821d8c0c96f033e5fff31a","first_seen":"2025-09-11T16:59:11.155785Z","last_seen":"2026-07-18T09:45:05.49375Z","times_seen":61096,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":25,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.478Z","timestamp":1784291802478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bahislink7.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:24:54 GMT\r\nexpires: Mon, 12 Jul 2027 12:24:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 432708\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-07-18T09:41:55.186366Z","times_seen":18643,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/site_1779820799.webp","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.710Z","timestamp":1784291802710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/site_1779820799.webp HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 26 May 2026 18:39:59 GMT\r\netag: \"6a15e8ff-ef8\"\r\nexpires: Fri, 14 Aug 2026 16:07:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 160177\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FuOcCQgrs3bLhF%2F093msdCRZiUcsD0SB80jWX8XPHnHLPGF3PvMLEWw4DHhMr2ZTVlrUs8nBVCjX3nIhKFuTlCwqZVmktyIcnhICWT1EbUjQ8CwZLbwuKDWLt3WveJY%2F\"}]}\r\ncf-ray: a1c94b384ed42678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3832,"size_decoded":4587,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36eb4fcd6b09d0b6f4cb019f89e880c9","sha1":"bc0182a3141d8d5d837d9b27a980ae6248ad3efa","sha256":"8e871f6cd7ea5a22a2407639a548c2f27796dcf7d12a36de5660510e24f0585e","sha512":"a8d478f389dddeb7c037c951b66f4400f8d30d48fa4c8dbf5f0a45674134424549f899d51379bccd7a1d011a0ac9278d6fcc47bce0366f45943a42a3e7fdfaac","ssdeep":"","tlshash":"c1814c13612752cc312b78c7b70c0c74bf4613018d6ac7061de6b56c8ee81e74d4259a","first_seen":"2026-06-15T13:15:27.945595Z","last_seen":"2026-07-17T18:44:02.207217Z","times_seen":9,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/betmabet-20260109_003353-a55197.webp","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.716Z","timestamp":1784291802716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/betmabet-20260109_003353-a55197.webp HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 08 Jan 2026 21:33:53 GMT\r\netag: \"696022c1-ffe\"\r\nexpires: Fri, 14 Aug 2026 16:07:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 160177\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBDbiT5QKWyf%2F%2B3WXMFrSUOPzDMzZ1z33BOAF%2FESlqRbNvMVcmnSkscDFViOK0pvmtnaW53szJWVZYJzYJqhFkmCGWDvDNwqcBoNrchyjEeZ3K9l6hcG%2BVhHfe1Hplpk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b384ecc2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4094\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4094,"size_decoded":4851,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a1c258c8e8dea08d889efda648bfd88","sha1":"507539538a4159e3ce82a200f1e4a54209cc4fa6","sha256":"621b9f4be89e72cf40a06267a4d37c5218373491f7dd7b3943395dde9ccc8fea","sha512":"9f780c97a329d1d0bd9964870f0adca0bae95d83e90a33e50842da04a0097649e24233aabcf26de11f1789f36deab49f51e96c5c1475308e4dfa5f769ed2242d","ssdeep":"","tlshash":"d3817ee2dce533a7af2336c197f56e81c4319c88158f6a9e560c7f9a235052d7787064","first_seen":"2026-03-15T23:28:03.182718Z","last_seen":"2026-07-17T18:44:02.219899Z","times_seen":17,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/site_1780752016.webp","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.718Z","timestamp":1784291802718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/site_1780752016.webp HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 06 Jun 2026 13:20:16 GMT\r\netag: \"6a241e90-1ee2\"\r\nexpires: Fri, 14 Aug 2026 16:07:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 160177\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Ug%2FMTpmWv5FKaLiXVJ%2FOBgEqoShR6gwMM0eCCpE5gbs9zZloZD8xfM4UnoPggmiWvSMKBsldFtVnVPY2u1JGVOz5p3l7YLZHXcVIui2lB1s%2F3j5rQsUrAqwPqFBWWT7\"}]}\r\ncf-ray: a1c94b384ecf2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7906\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7906,"size_decoded":8662,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b4c6c688c7c68f47699442ea4e38f546","sha1":"a314a0c4a7b763e4c4beeaa7d58f110099601477","sha256":"f1bd799b557bbccf92eba0a3463834dc9101eaa92aa3a4e3b051ecddb5951bdb","sha512":"3b3d0699077f07b529f0b21f4c77149173ec3b5d5d12ef28e16541ac65ed7d45e0175764b5478a981fd0b5bcfc5a230c844522804c4226186f90a24f5aa6f75e","ssdeep":"192:OXCq6e2AGR9iIpAIEGAGLkXm5NBANV5x/Fy03P8HeFs:OXn2AGriQAHnGk0XAFyCEHea","tlshash":"44f1af6d20997408ef8f166973f284fbb3a4c59e33592c219d3a0077949b2e509ed5ca","first_seen":"2026-06-15T13:15:27.963579Z","last_seen":"2026-07-17T18:44:02.202526Z","times_seen":9,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahislink7.pro/assets/logo.svg","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"ip":{"addr":"104.21.30.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:41.833Z","timestamp":1784291801833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahislink7.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 13:28:46 GMT","end":"Mon, 12 Oct 2026 14:26:10 GMT"},"fingerprint":{"sha1":"56:C0:A6:4B:01:12:A2:72:E8:84:8E:21:EB:F2:C2:5D:E6:4F:04:30","sha256":"98:76:36:C7:1B:F3:F9:6E:11:6A:10:47:1C:FA:6A:EC:34:32:2E:03:E9:BA:90:F8:4A:0B:F1:F4:90:C3:98:9C"}}},"request":{"raw":"GET /assets/logo.svg HTTP/1.1\r\nHost: bahislink7.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlast-modified: Mon, 08 Jun 2026 21:05:51 GMT\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BdafIlcdACXPMdCQz5cHkHHV7BVDYe%2F95oFCrb7dMR2WsFaGvRLVGMc62fu22LpHLn%2FKRCu7Pb3CVxN6n5WoVk%2BjxGTWnKVu2I5EfTbFcWC9LqT3gBxHBA%2BAXKnuLMGHg%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\nexpires: Sun, 16 Aug 2026 12:36:42 GMT\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1c94b317c792efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189429,"size_decoded":141588,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc4a5e0d38340bf7c11ee1e00302e592","sha1":"339fa511ba3159c0b459ec569b712f5fb1593bfc","sha256":"ef9c66ea0fb9d7acb5a20dd2928b5052c3e88f31b4c94e07f387a337c77ed23c","sha512":"793313c64e4984b8f40346f93808fd853941f4bd7e2f07cdad80bc9df891a93a62cb856bc095194914413b4f76b3213a49f1bd1548ab037fb5d6035545d15c5c","ssdeep":"3072:Up/B70v5P57jYcaQH4BEyf8AG/pAIBFLqAM3K9w/Xcng7LhCSJ8K3PPDw4edNveW:Up/N0RP57tFyEAGumFLqEbng7NCSp47","tlshash":"a30412937847fcae43abd72a0a7ab6004bf908d4445073730b6ae433da4e78e514e47b","first_seen":"2026-06-15T13:15:27.946623Z","last_seen":"2026-07-17T18:44:02.209092Z","times_seen":8,"resource_available":false,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bahislink7.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/safirbet-ae24d4cc.png","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.562Z","timestamp":1784291802562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 00:59:12 GMT","end":"Fri, 21 Aug 2026 00:59:11 GMT"},"fingerprint":{"sha1":"9C:35:A8:3C:23:EA:F2:7B:5A:4A:81:5F:3D:A5:AD:B8:D5:40:54:5C","sha256":"06:BF:A7:7C:02:1A:D9:2F:96:05:BD:BE:16:53:26:1D:7C:A4:AA:05:76:3C:B7:2A:08:B5:64:52:16:5A:45:A5"}}},"request":{"raw":"GET /img/safirbet-ae24d4cc.png HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/safirbet-ae24d4cc.png\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzkoDAJhMydTACCqaeAA9FSlhfByHmwoGtDjgjIDdoaOByJcvqg2ErUxczGthQgwc2GOIYK3sEv028WRZWCwGEOmSIKWNuaQcbFGjQ7R%2BAqDrFz2WwQkJ%2FbLGcaIcpY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b36887735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":61,"connect":20,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/reklam_1781254462_8586.webp","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.576Z","timestamp":1784291802576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 00:59:12 GMT","end":"Fri, 21 Aug 2026 00:59:11 GMT"},"fingerprint":{"sha1":"9C:35:A8:3C:23:EA:F2:7B:5A:4A:81:5F:3D:A5:AD:B8:D5:40:54:5C","sha256":"06:BF:A7:7C:02:1A:D9:2F:96:05:BD:BE:16:53:26:1D:7C:A4:AA:05:76:3C:B7:2A:08:B5:64:52:16:5A:45:A5"}}},"request":{"raw":"GET /img/reklam_1781254462_8586.webp HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/reklam_1781254462_8586.webp\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gshzP9WxmenEhmiQcXHZBVM38AMZBdqDTvEwx%2BeY%2FoMq%2BgHBC8S%2F6iVdeK5A6ynNxe05stV39CaMrjo%2FWvzeWLyEQdkcpc1aBqEmkwnbeM9HiOvX9TWAgl0IsPeDKKU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b36887935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/safirbet-ae24d4cc.png","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.714Z","timestamp":1784291802714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/safirbet-ae24d4cc.png HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 06 Sep 2025 16:26:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bc60cd-1348\"\r\nexpires: Fri, 14 Aug 2026 16:07:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 160177\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9owXshWoeuunlVKvTMTfwG98graxgPJvk7AGcsTy9ZLtqhCNOIhfzNPaSWZNhGDQIrpeCmsxuUkMwbu4buqDUQQ0wF8bBNVMbQr%2B7JaIDu16VzDlvYSzunOOIe4ICoZi\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b384ed12678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4936,"size_decoded":5484,"mime_type":"image/png","magic":"PNG image data, 202 x 40, 8-bit/color RGBA, non-interlaced","md5":"fbf6ee5ce491314fafbd3ce9d92ba6a5","sha1":"f9b25252d4e916313c9b25b6c20591a1c033db81","sha256":"4ff7db0ddb8e46e7baf2704abb687c696f7c019f6fa030a50aab617d2ec324b2","sha512":"256714ec6c578d04b7793e39a102f79466b881152438d56ba3c575900816d21d7e3bef15f5c5e326666706d1273602fd5acb75b0eba0d711bc9848144e6d8b82","ssdeep":"96:IN2zW/gyyyramPKWfBDoM9rzsF63VULaIoOeo7XuFkTpB6gHAbo547W4pc:Ya9WfBDoMJwFWULTpeWXfB6pbg4i","tlshash":"2da17d99aa5239c9e065d85028ff70aa9af74a087dd2e01c58c3e412afba1195c8b5c7","first_seen":"2025-09-27T17:04:18.348076Z","last_seen":"2026-07-17T18:44:02.221778Z","times_seen":14,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/site_1780752016.webp","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.574Z","timestamp":1784291802574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 00:59:12 GMT","end":"Fri, 21 Aug 2026 00:59:11 GMT"},"fingerprint":{"sha1":"9C:35:A8:3C:23:EA:F2:7B:5A:4A:81:5F:3D:A5:AD:B8:D5:40:54:5C","sha256":"06:BF:A7:7C:02:1A:D9:2F:96:05:BD:BE:16:53:26:1D:7C:A4:AA:05:76:3C:B7:2A:08:B5:64:52:16:5A:45:A5"}}},"request":{"raw":"GET /img/site_1780752016.webp HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/site_1780752016.webp\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KwV%2FYvIfsUd6JQFmua2aQ0cVZzSWB4z9Fkk0vhMcajuAFLeFP2uwby5mP%2F356ERn7wg0DJJIKd8%2BGDQ0UfYr0BRKRT2bwJs8nHPx3Pb%2B%2FiFgtAjGTTITPME2frYxNLw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b36887335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink.love/img/site_1779820799.webp","fqdn":"betlink.love","domain":"betlink.love","tld":"love"},"ip":{"addr":"172.67.153.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.576Z","timestamp":1784291802576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink.love","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 May 2026 00:59:12 GMT","end":"Fri, 21 Aug 2026 00:59:11 GMT"},"fingerprint":{"sha1":"9C:35:A8:3C:23:EA:F2:7B:5A:4A:81:5F:3D:A5:AD:B8:D5:40:54:5C","sha256":"06:BF:A7:7C:02:1A:D9:2F:96:05:BD:BE:16:53:26:1D:7C:A4:AA:05:76:3C:B7:2A:08:B5:64:52:16:5A:45:A5"}}},"request":{"raw":"GET /img/site_1779820799.webp HTTP/1.1\r\nHost: betlink.love\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://betlink43.pro/img/site_1779820799.webp\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=12NO43F%2FDq9yCm8TzwC%2BXC0zHK2lWjJdi3zYDlk2bwKNS%2FSq%2FvErYzi72sMkz3efI2hFMSizKgqZqiJRc1JawnCnUHumCetu9A%2FfRv25qu3CiG9l%2FIe%2B%2Fw%2FtJGko%2Beo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1c94b36887835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T09:43:23.238949Z","times_seen":17334766,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/elitbahis-7d300df3.webp","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.696Z","timestamp":1784291802696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/elitbahis-7d300df3.webp HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 08 Sep 2025 14:20:07 GMT\r\netag: \"68bee617-c60\"\r\nexpires: Fri, 14 Aug 2026 16:07:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\naccept-ranges: bytes\r\nage: 160177\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dg17xUtwBpTmWuUImEshumV%2Fzjufyw70vq5We%2FPyDat3ljlClpz2OK1MJiCX4avwP%2FvyfopP879hq0NviwqgxazzYLhQv%2FWBBEKkYa9kWekOUQfp5gzY9M6TipPugLcg\"}]}\r\ncf-ray: a1c94b384ed02678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3168,"size_decoded":3925,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d209230f9073e7511ab157fd1390456","sha1":"ce5e74ddb09cbcc369821ac13b41b2f9a6045ff3","sha256":"9b4c41575d5081f50b3d1fffa6b7c46092d6a7229294a483310bdd0a9ebf75c6","sha512":"31ff6170cac638ee405cec31064d58736a315ff414b1bed7c9faf93ee90f496b95dfb4295b6a20c184051836d47a071b12c510b880d01dffc16eb5fa5519d1f4","ssdeep":"","tlshash":"69515d4018197b1798ae9511290eb3d7b6cf4488c0695c94d17eecb222cca52df2f6a2","first_seen":"2026-03-15T23:28:03.176384Z","last_seen":"2026-07-17T18:44:02.205571Z","times_seen":17,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":206,"connect":17,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"betlink43.pro/img/luluslot-dfc1275f.png","fqdn":"betlink43.pro","domain":"betlink43.pro","tld":"pro"},"ip":{"addr":"172.67.156.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bahislink7.pro/","date":"2026-07-17T12:36:42.701Z","timestamp":1784291802701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"betlink43.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 21:29:54 GMT","end":"Wed, 30 Sep 2026 22:28:17 GMT"},"fingerprint":{"sha1":"15:BE:82:B9:7B:F6:32:7C:6A:A3:09:0B:20:90:88:48:F2:FF:24:4C","sha256":"1C:7D:E6:5A:FB:65:AB:FC:73:67:E0:C6:F3:67:DC:B2:D7:6C:06:EA:25:92:E2:4E:62:64:FF:01:1F:1B:32:3E"}}},"request":{"raw":"GET /img/luluslot-dfc1275f.png HTTP/1.1\r\nHost: betlink43.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bahislink7.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 17 Jul 2026 12:36:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 12:10:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68c16abf-131d\"\r\nexpires: Fri, 14 Aug 2026 16:07:05 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 160177\r\npriority: u=4,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2dD%2FooiPwluAml4OmZ2qd7AWokPqhT93jILkCDCRIcAyDbvErz6%2F41eMoAKYpWVnr1iWwwG5FW69u8Q1ZFPf%2Fy5i6pKWgGMZptBdEH7YtqM9stCHzXzXioePcU0%2FKblo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1c94b384ece2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4893,"size_decoded":5683,"mime_type":"image/png","magic":"PNG image data, 214 x 67, 8-bit/color RGBA, non-interlaced","md5":"25876de8ea48c1ba9f0e2339dbd53996","sha1":"86bf0b554ec1a4751037b2ac87d86c13b31b307c","sha256":"94d5e447da02921963c39e9dacacd1fe25d21625ee793ecea72cc0d6beb28ef4","sha512":"a5fad922a275194ff8b83523d8f57591bd8502ec8c649b576288cf763be4d3f2031e89633437a3b0077dfec2feecc3c55a5551a2788d9ffd4f2819aa409a20d5","ssdeep":"96:UEgpsu6Zk+7sfLLGs8pA+2C6P5riK4qZexmo1LABUV1I7:sN6ZSLGs8pA+r85rima1LABo27","tlshash":"38a18e14e1c45f68c800a292157a93be66d573d6ff6333ccebb1bb18398a0703e578a1","first_seen":"2025-11-02T15:34:27.398217Z","last_seen":"2026-07-17T18:44:02.214475Z","times_seen":18,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"betlink43.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"betlink43.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bahislink7.pro/","fqdn":"bahislink7.pro","domain":"bahislink7.pro","tld":"pro"},"ip":{"addr":"104.21.30.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T12:36:40.359Z","timestamp":1784291800359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bahislink7.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 14 Jul 2026 13:28:46 GMT","end":"Mon, 12 Oct 2026 14:26:10 GMT"},"fingerprint":{"sha1":"56:C0:A6:4B:01:12:A2:72:E8:84:8E:21:EB:F2:C2:5D:E6:4F:04:30","sha256":"98:76:36:C7:1B:F3:F9:6E:11:6A:10:47:1C:FA:6A:EC:34:32:2E:03:E9:BA:90:F8:4A:0B:F1:F4:90:C3:98:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bahislink7.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 12:36:41 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/8.2.31\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EppXU6tTh5bIwY%2BfaYBl9E3LRkZWjPYpHjKbvDaHhgNPcgJSyV9p4Uw6YlGi2BlxHkiBlr8UgH4jh48hCsCIhlGQqU6bpYXPmJBmhxUgXaZ8TrCB3qTmUBkXbDng1xDtjA%3D%3D\"}]}\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1c94b28db092efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:8.2.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103293,"size_decoded":19290,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42833)","md5":"b6efb309a265da48db42a447b6f0b417","sha1":"077eb3dbaa835b6325c9a52728ca454f1ca7dd09","sha256":"728237d7fabdfc7912fbf813220b3d6d54f5c561e7c4249da721a01e23010c3a","sha512":"0848383f6b81a123746da731d33b0177cc898282a74e2318fe4e3a9070a8d58caef6591647d9b6ef5a660f53cc13dee6d5a7ba293183bcd786617211bdecfa74","ssdeep":"768:SIl8YII1Qt+9rlx0DmZXpnJeX32e0unVrKxHBKMWPsyCsYgKN7y87vWGDr3E/YPc:SKIIlrxAcbOb7MhnW8OP","tlshash":"07a346fb81111f3f625769e155177bfd709a320bdb9f0806fa6e8a846fc4ea19832134","first_seen":"2026-07-17T12:37:15.340206Z","last_seen":"2026-07-17T12:44:31.066489Z","times_seen":2,"resource_available":true,"data":null}},"time_used":999,"timings":{"blocked":-1,"dns":73,"connect":16,"send":0,"wait":907,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"bahislink7.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"bahislink7.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}